@homeflare/distilled-unifi-network 0.2.0

package/src/services/firewall.ts

@@ -0,0 +1,1492 @@
+// AUTO-GENERATED by scripts/generate.ts from .generated-specs (specs/spec-mirror-unifi-network/specs/openapi.json). Do not edit.
+import * as S from "@distilled.cloud/core/schema";
+import * as API from "@distilled.cloud/core/api";
+import * as T from "../traits.ts";
+import {
+  UnifiNetworkProtocol,
+  type UnifiNetworkOpError,
+  type UnifiNetworkOpContext,
+} from "../protocol.ts";
+import { UnknownUnifiNetworkError } from "../errors.ts";
+import * as Retry from "../retry.ts";
+
+export type { UnifiNetworkOpError, UnifiNetworkOpContext };
+
+/** Defines action for matched traffic. */
+export interface FirewallPolicyAction {
+  type: string;
+  /** Creates a derived policy for the mirrored firewall zone pair to automatically allow the return traffic. */
+  allowReturnTraffic?: boolean;
+}
+export const FirewallPolicyAction = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    type: S.String,
+    allowReturnTraffic: S.optional(S.Boolean),
+  }),
+).annotate({
+  identifier: "FirewallPolicyAction",
+}) as any as S.Schema<FirewallPolicyAction>;
+
+export type CreateFirewallPolicyRequestConnectionStateFilterItem =
+  | "NEW"
+  | "INVALID"
+  | "ESTABLISHED"
+  | "RELATED";
+export const CreateFirewallPolicyRequestConnectionStateFilterItem = S.String;
+
+/** Match on firewall connection state. If null, matches all connection states. */
+export type CreateFirewallPolicyRequestConnectionStateFilterList = Array<
+  CreateFirewallPolicyRequestConnectionStateFilterItem | (string & {})
+>;
+export const CreateFirewallPolicyRequestConnectionStateFilterList =
+  /*@__PURE__*/ S.Array(
+    CreateFirewallPolicyRequestConnectionStateFilterItem,
+  ) as any as S.Schema<CreateFirewallPolicyRequestConnectionStateFilterList>;
+
+/** Array of DPI Application IDs to match. */
+export type FirewallPolicyApplicationFilterApplicationIdsList = Array<number>;
+export const FirewallPolicyApplicationFilterApplicationIdsList =
+  /*@__PURE__*/ S.Array(
+    S.Number,
+  ) as any as S.Schema<FirewallPolicyApplicationFilterApplicationIdsList>;
+
+export interface FirewallPolicyApplicationFilter {
+  /** Array of DPI Application IDs to match. */
+  applicationIds: FirewallPolicyApplicationFilterApplicationIdsList;
+}
+export const FirewallPolicyApplicationFilter = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    applicationIds: FirewallPolicyApplicationFilterApplicationIdsList,
+  }),
+).annotate({
+  identifier: "FirewallPolicyApplicationFilter",
+}) as any as S.Schema<FirewallPolicyApplicationFilter>;
+
+export interface PortMatching {
+  type: string;
+  /** Port number */
+  value?: number;
+  /** Start port number */
+  start?: number;
+  /** Stop port number */
+  stop?: number;
+}
+export const PortMatching = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    type: S.String,
+    value: S.optional(S.Number),
+    start: S.optional(S.Number),
+    stop: S.optional(S.Number),
+  }),
+).annotate({ identifier: "PortMatching" }) as any as S.Schema<PortMatching>;
+
+/** List of ports or port ranges to match. */
+export type FirewallPolicyPortFilterItemsList = Array<PortMatching>;
+export const FirewallPolicyPortFilterItemsList = /*@__PURE__*/ S.Array(
+  PortMatching,
+) as any as S.Schema<FirewallPolicyPortFilterItemsList>;
+
+/** Defines rules for matching traffic by port. */
+export interface FirewallPolicyPortFilter {
+  /** Match on all ports except the specified ones. */
+  matchOpposite: boolean;
+  type: string;
+  /** List of ports or port ranges to match. */
+  items?: FirewallPolicyPortFilterItemsList;
+  /** ID of Traffic Matching List containing ports to match. */
+  trafficMatchingListId?: string;
+}
+export const FirewallPolicyPortFilter = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    matchOpposite: S.Boolean,
+    type: S.String,
+    items: S.optional(FirewallPolicyPortFilterItemsList),
+    trafficMatchingListId: S.optional(S.String),
+  }),
+).annotate({
+  identifier: "FirewallPolicyPortFilter",
+}) as any as S.Schema<FirewallPolicyPortFilter>;
+
+/** Array of DPI Category IDs to match. */
+export type FirewallPolicyApplicationCategoryFilterApplicationCategoryIdsList =
+  Array<number>;
+export const FirewallPolicyApplicationCategoryFilterApplicationCategoryIdsList =
+  /*@__PURE__*/ S.Array(
+    S.Number,
+  ) as any as S.Schema<FirewallPolicyApplicationCategoryFilterApplicationCategoryIdsList>;
+
+export interface FirewallPolicyApplicationCategoryFilter {
+  /** Array of DPI Category IDs to match. */
+  applicationCategoryIds: FirewallPolicyApplicationCategoryFilterApplicationCategoryIdsList;
+}
+export const FirewallPolicyApplicationCategoryFilter = /*@__PURE__*/ S.suspend(
+  () =>
+    S.Struct({
+      applicationCategoryIds:
+        FirewallPolicyApplicationCategoryFilterApplicationCategoryIdsList,
+    }),
+).annotate({
+  identifier: "FirewallPolicyApplicationCategoryFilter",
+}) as any as S.Schema<FirewallPolicyApplicationCategoryFilter>;
+
+/** List of domains to match. */
+export type FirewallPolicyDomainFilterDomainsList = Array<string>;
+export const FirewallPolicyDomainFilterDomainsList = /*@__PURE__*/ S.Array(
+  S.String,
+) as any as S.Schema<FirewallPolicyDomainFilterDomainsList>;
+
+export interface FirewallPolicyDomainFilter {
+  type: string;
+  /** List of domains to match. */
+  domains?: FirewallPolicyDomainFilterDomainsList;
+}
+export const FirewallPolicyDomainFilter = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    type: S.String,
+    domains: S.optional(FirewallPolicyDomainFilterDomainsList),
+  }),
+).annotate({
+  identifier: "FirewallPolicyDomainFilter",
+}) as any as S.Schema<FirewallPolicyDomainFilter>;
+
+export interface FirewallPolicyIPv6InterfaceIdentifierFilter {
+  /** IPv6 Interface Identifier. */
+  ipv6Iid: string;
+  /** Match on all IPv6 IIDs except the specified one. */
+  matchOpposite: boolean;
+}
+export const FirewallPolicyIPv6InterfaceIdentifierFilter =
+  /*@__PURE__*/ S.suspend(() =>
+    S.Struct({
+      ipv6Iid: S.String,
+      matchOpposite: S.Boolean,
+    }),
+  ).annotate({
+    identifier: "FirewallPolicyIPv6InterfaceIdentifierFilter",
+  }) as any as S.Schema<FirewallPolicyIPv6InterfaceIdentifierFilter>;
+
+export interface IPMatching {
+  type: string;
+  /** IP address to match. */
+  value?: string;
+  /** First IP address from range to match. */
+  start?: string;
+  /** Last IP address from range to match. */
+  stop?: string;
+}
+export const IPMatching = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    type: S.String,
+    value: S.optional(S.String),
+    start: S.optional(S.String),
+    stop: S.optional(S.String),
+  }),
+).annotate({ identifier: "IPMatching" }) as any as S.Schema<IPMatching>;
+
+/** List of IP addresses, IP address ranges, or IP subnets to match. */
+export type FirewallPolicyIPAddressFilterItemsList = Array<IPMatching>;
+export const FirewallPolicyIPAddressFilterItemsList = /*@__PURE__*/ S.Array(
+  IPMatching,
+) as any as S.Schema<FirewallPolicyIPAddressFilterItemsList>;
+
+/** Match traffic originating from, or destined to selected IP addresses. */
+export interface FirewallPolicyIPAddressFilter {
+  /** Match on all IP addresses except the specified ones. */
+  matchOpposite: boolean;
+  type: string;
+  /** List of IP addresses, IP address ranges, or IP subnets to match. */
+  items?: FirewallPolicyIPAddressFilterItemsList;
+  /** ID of Traffic Matching List containing IP addresses to match. */
+  trafficMatchingListId?: string;
+}
+export const FirewallPolicyIPAddressFilter = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    matchOpposite: S.Boolean,
+    type: S.String,
+    items: S.optional(FirewallPolicyIPAddressFilterItemsList),
+    trafficMatchingListId: S.optional(S.String),
+  }),
+).annotate({
+  identifier: "FirewallPolicyIPAddressFilter",
+}) as any as S.Schema<FirewallPolicyIPAddressFilter>;
+
+/** Array of Network IDs to match. */
+export type FirewallPolicyNetworkFilterNetworkIdsList = Array<string>;
+export const FirewallPolicyNetworkFilterNetworkIdsList = /*@__PURE__*/ S.Array(
+  S.String,
+) as any as S.Schema<FirewallPolicyNetworkFilterNetworkIdsList>;
+
+export interface FirewallPolicyNetworkFilter {
+  /** Match on all Networks except the selected. */
+  matchOpposite: boolean;
+  /** Array of Network IDs to match. */
+  networkIds: FirewallPolicyNetworkFilterNetworkIdsList;
+}
+export const FirewallPolicyNetworkFilter = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    matchOpposite: S.Boolean,
+    networkIds: FirewallPolicyNetworkFilterNetworkIdsList,
+  }),
+).annotate({
+  identifier: "FirewallPolicyNetworkFilter",
+}) as any as S.Schema<FirewallPolicyNetworkFilter>;
+
+export type FirewallPolicyRegionFilterRegionsItem =
+  | "AD"
+  | "AE"
+  | "AF"
+  | "AG"
+  | "AI"
+  | "AL"
+  | "AM"
+  | "AO"
+  | "AQ"
+  | "AR"
+  | "AS"
+  | "AT"
+  | "AU"
+  | "AW"
+  | "AX"
+  | "AZ"
+  | "BA"
+  | "BB"
+  | "BD"
+  | "BE"
+  | "BF"
+  | "BG"
+  | "BH"
+  | "BI"
+  | "BJ"
+  | "BL"
+  | "BM"
+  | "BN"
+  | "BO"
+  | "BQ"
+  | "BR"
+  | "BS"
+  | "BT"
+  | "BW"
+  | "BY"
+  | "BZ"
+  | "CA"
+  | "CC"
+  | "CD"
+  | "CF"
+  | "CG"
+  | "CH"
+  | "CI"
+  | "CK"
+  | "CL"
+  | "CM"
+  | "CN"
+  | "CO"
+  | "CR"
+  | "CU"
+  | "CV"
+  | "CW"
+  | "CX"
+  | "CY"
+  | "CZ"
+  | "DE"
+  | "DJ"
+  | "DK"
+  | "DM"
+  | "DO"
+  | "DZ"
+  | "EC"
+  | "EE"
+  | "EG"
+  | "EH"
+  | "ER"
+  | "ES"
+  | "ET"
+  | "FI"
+  | "FJ"
+  | "FK"
+  | "FM"
+  | "FO"
+  | "FR"
+  | "GA"
+  | "GB"
+  | "GD"
+  | "GE"
+  | "GF"
+  | "GG"
+  | "GH"
+  | "GI"
+  | "GL"
+  | "GM"
+  | "GN"
+  | "GP"
+  | "GQ"
+  | "GR"
+  | "GS"
+  | "GT"
+  | "GU"
+  | "GW"
+  | "GY"
+  | "HK"
+  | "HN"
+  | "HR"
+  | "HT"
+  | "HU"
+  | "ID"
+  | "IE"
+  | "IL"
+  | "IM"
+  | "IN"
+  | "IO"
+  | "IQ"
+  | "IR"
+  | "IS"
+  | "IT"
+  | "JE"
+  | "JM"
+  | "JO"
+  | "JP"
+  | "KE"
+  | "KG"
+  | "KH"
+  | "KI"
+  | "KM"
+  | "KN"
+  | "KP"
+  | "KR"
+  | "KW"
+  | "KY"
+  | "KZ"
+  | "LA"
+  | "LB"
+  | "LC"
+  | "LI"
+  | "LK"
+  | "LR"
+  | "LS"
+  | "LT"
+  | "LU"
+  | "LV"
+  | "LY"
+  | "MA"
+  | "MC"
+  | "MD"
+  | "ME"
+  | "MF"
+  | "MG"
+  | "MH"
+  | "MK"
+  | "ML"
+  | "MM"
+  | "MN"
+  | "MO"
+  | "MP"
+  | "MQ"
+  | "MR"
+  | "MS"
+  | "MT"
+  | "MU"
+  | "MV"
+  | "MW"
+  | "MX"
+  | "MY"
+  | "MZ"
+  | "NA"
+  | "NC"
+  | "NE"
+  | "NF"
+  | "NG"
+  | "NI"
+  | "NL"
+  | "NO"
+  | "NP"
+  | "NR"
+  | "NU"
+  | "NZ"
+  | "OM"
+  | "PA"
+  | "PE"
+  | "PF"
+  | "PG"
+  | "PH"
+  | "PK"
+  | "PL"
+  | "PM"
+  | "PN"
+  | "PR"
+  | "PS"
+  | "PT"
+  | "PW"
+  | "PY"
+  | "QA"
+  | "RE"
+  | "RO"
+  | "RS"
+  | "RU"
+  | "RW"
+  | "SA"
+  | "SB"
+  | "SC"
+  | "SD"
+  | "SE"
+  | "SG"
+  | "SH"
+  | "SI"
+  | "SJ"
+  | "SK"
+  | "SL"
+  | "SM"
+  | "SN"
+  | "SO"
+  | "SR"
+  | "SS"
+  | "ST"
+  | "SV"
+  | "SX"
+  | "SY"
+  | "SZ"
+  | "TC"
+  | "TD"
+  | "TF"
+  | "TG"
+  | "TH"
+  | "TJ"
+  | "TK"
+  | "TL"
+  | "TM"
+  | "TN"
+  | "TO"
+  | "TR"
+  | "TT"
+  | "TV"
+  | "TW"
+  | "TZ"
+  | "UA"
+  | "UG"
+  | "UM"
+  | "US"
+  | "UY"
+  | "UZ"
+  | "VA"
+  | "VC"
+  | "VE"
+  | "VG"
+  | "VI"
+  | "VN"
+  | "VU"
+  | "WF"
+  | "WS"
+  | "XK"
+  | "YE"
+  | "YT"
+  | "ZA"
+  | "ZM"
+  | "ZW";
+export const FirewallPolicyRegionFilterRegionsItem = S.String;
+
+/** Match traffic originating from selected regions. Regions are identified by their ISO 3166-1 alpha-2 country codes. */
+export type FirewallPolicyRegionFilterRegionsList = Array<
+  FirewallPolicyRegionFilterRegionsItem | (string & {})
+>;
+export const FirewallPolicyRegionFilterRegionsList = /*@__PURE__*/ S.Array(
+  FirewallPolicyRegionFilterRegionsItem,
+) as any as S.Schema<FirewallPolicyRegionFilterRegionsList>;
+
+export interface FirewallPolicyRegionFilter {
+  /** Match traffic originating from selected regions. Regions are identified by their ISO 3166-1 alpha-2 country codes. */
+  regions: FirewallPolicyRegionFilterRegionsList;
+}
+export const FirewallPolicyRegionFilter = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    regions: FirewallPolicyRegionFilterRegionsList,
+  }),
+).annotate({
+  identifier: "FirewallPolicyRegionFilter",
+}) as any as S.Schema<FirewallPolicyRegionFilter>;
+
+export interface FirewallPolicySiteToSiteVPNTunnelFilter {
+  siteToSiteVpnTunnelId: string;
+}
+export const FirewallPolicySiteToSiteVPNTunnelFilter = /*@__PURE__*/ S.suspend(
+  () =>
+    S.Struct({
+      siteToSiteVpnTunnelId: S.String,
+    }),
+).annotate({
+  identifier: "FirewallPolicySiteToSiteVPNTunnelFilter",
+}) as any as S.Schema<FirewallPolicySiteToSiteVPNTunnelFilter>;
+
+export type FirewallPolicyVPNServerFilterVpnServerIdsList = Array<string>;
+export const FirewallPolicyVPNServerFilterVpnServerIdsList =
+  /*@__PURE__*/ S.Array(
+    S.String,
+  ) as any as S.Schema<FirewallPolicyVPNServerFilterVpnServerIdsList>;
+
+export interface FirewallPolicyVPNServerFilter {
+  matchOpposite: boolean;
+  vpnServerIds: FirewallPolicyVPNServerFilterVpnServerIdsList;
+}
+export const FirewallPolicyVPNServerFilter = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    matchOpposite: S.Boolean,
+    vpnServerIds: FirewallPolicyVPNServerFilterVpnServerIdsList,
+  }),
+).annotate({
+  identifier: "FirewallPolicyVPNServerFilter",
+}) as any as S.Schema<FirewallPolicyVPNServerFilter>;
+
+export interface FirewallPolicyDestinationTrafficFilter {
+  type: string;
+  /** Match destination traffic by DPI applications. */
+  applicationFilter?: FirewallPolicyApplicationFilter;
+  /** Match destination traffic additionally by ports. If null, match all ports. */
+  portFilter?: FirewallPolicyPortFilter;
+  /** Match destination traffic by DPI application categories. */
+  applicationCategoryFilter?: FirewallPolicyApplicationCategoryFilter;
+  /** Match destination traffic by domains. */
+  domainFilter?: FirewallPolicyDomainFilter;
+  /** Match destination traffic by IPv6 interface identifier. */
+  ipv6IidFilter?: FirewallPolicyIPv6InterfaceIdentifierFilter;
+  /** Match destination traffic by IP addresses. */
+  ipAddressFilter?: FirewallPolicyIPAddressFilter;
+  /** Match destination traffic by networks. */
+  networkFilter?: FirewallPolicyNetworkFilter;
+  /** Match destination traffic by regions. */
+  regionFilter?: FirewallPolicyRegionFilter;
+  /** Match destination traffic by site-to-site VPN tunnel. */
+  siteToSiteVpnTunnelFilter?: FirewallPolicySiteToSiteVPNTunnelFilter;
+  /** Match destination traffic by VPN servers. */
+  vpnServerFilter?: FirewallPolicyVPNServerFilter;
+}
+export const FirewallPolicyDestinationTrafficFilter = /*@__PURE__*/ S.suspend(
+  () =>
+    S.Struct({
+      type: S.String,
+      applicationFilter: S.optional(FirewallPolicyApplicationFilter),
+      portFilter: S.optional(FirewallPolicyPortFilter),
+      applicationCategoryFilter: S.optional(
+        FirewallPolicyApplicationCategoryFilter,
+      ),
+      domainFilter: S.optional(FirewallPolicyDomainFilter),
+      ipv6IidFilter: S.optional(FirewallPolicyIPv6InterfaceIdentifierFilter),
+      ipAddressFilter: S.optional(FirewallPolicyIPAddressFilter),
+      networkFilter: S.optional(FirewallPolicyNetworkFilter),
+      regionFilter: S.optional(FirewallPolicyRegionFilter),
+      siteToSiteVpnTunnelFilter: S.optional(
+        FirewallPolicySiteToSiteVPNTunnelFilter,
+      ),
+      vpnServerFilter: S.optional(FirewallPolicyVPNServerFilter),
+    }),
+).annotate({
+  identifier: "FirewallPolicyDestinationTrafficFilter",
+}) as any as S.Schema<FirewallPolicyDestinationTrafficFilter>;
+
+export interface FirewallPolicyDestination {
+  trafficFilter?: FirewallPolicyDestinationTrafficFilter;
+  /** ID of the firewall zone to which the matched traffic is destined. */
+  zoneId: string;
+}
+export const FirewallPolicyDestination = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    trafficFilter: S.optional(FirewallPolicyDestinationTrafficFilter),
+    zoneId: S.String,
+  }),
+).annotate({
+  identifier: "FirewallPolicyDestination",
+}) as any as S.Schema<FirewallPolicyDestination>;
+
+/** Defines rules for matching by IP version and protocol. */
+export interface FirewallPolicyIPProtocolScope {
+  ipVersion: string;
+  /** Shape varies by variant — widened by scripts/convert.ts; see README. */
+  protocolFilter?: unknown;
+}
+export const FirewallPolicyIPProtocolScope = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    ipVersion: S.String,
+    protocolFilter: S.optional(S.Unknown),
+  }),
+).annotate({
+  identifier: "FirewallPolicyIPProtocolScope",
+}) as any as S.Schema<FirewallPolicyIPProtocolScope>;
+
+/** Match on traffic encrypted, or not encrypted by IPsec. If null, matches all traffic. */
+export type CreateFirewallPolicyRequestIpsecFilter =
+  | "MATCH_ENCRYPTED"
+  | "MATCH_NOT_ENCRYPTED";
+export const CreateFirewallPolicyRequestIpsecFilter = S.String;
+
+export type FirewallScheduleRepeatOnDaysItem =
+  | "MONDAY"
+  | "TUESDAY"
+  | "WEDNESDAY"
+  | "THURSDAY"
+  | "FRIDAY"
+  | "SATURDAY"
+  | "SUNDAY";
+export const FirewallScheduleRepeatOnDaysItem = S.String;
+
+export type FirewallScheduleRepeatOnDaysList = Array<
+  FirewallScheduleRepeatOnDaysItem | (string & {})
+>;
+export const FirewallScheduleRepeatOnDaysList = /*@__PURE__*/ S.Array(
+  FirewallScheduleRepeatOnDaysItem,
+) as any as S.Schema<FirewallScheduleRepeatOnDaysList>;
+
+/** Defines the time range when the entity is active. If null, the entity is active all day. */
+export interface FirewallScheduleTime {
+  /** Time in HH:MM format. Uses 24-hour clock system. ISO 8601 compliant. */
+  startTime: string;
+  /** Time in HH:MM format. Uses 24-hour clock system. ISO 8601 compliant. */
+  stopTime: string;
+}
+export const FirewallScheduleTime = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    startTime: S.String,
+    stopTime: S.String,
+  }),
+).annotate({
+  identifier: "FirewallScheduleTime",
+}) as any as S.Schema<FirewallScheduleTime>;
+
+/** Defines date and time when the entity is active. If null, the entity is always active. */
+export interface FirewallSchedule {
+  mode: string;
+  repeatOnDays?: FirewallScheduleRepeatOnDaysList;
+  /** Date in YYYY-MM-DD format. ISO 8601 compliant. */
+  startDate?: string;
+  /** Date in YYYY-MM-DD format. ISO 8601 compliant. */
+  stopDate?: string;
+  timeFilter?: FirewallScheduleTime;
+  /** Date in YYYY-MM-DD format. ISO 8601 compliant. */
+  date?: string;
+}
+export const FirewallSchedule = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    mode: S.String,
+    repeatOnDays: S.optional(FirewallScheduleRepeatOnDaysList),
+    startDate: S.optional(S.String),
+    stopDate: S.optional(S.String),
+    timeFilter: S.optional(FirewallScheduleTime),
+    date: S.optional(S.String),
+  }),
+).annotate({
+  identifier: "FirewallSchedule",
+}) as any as S.Schema<FirewallSchedule>;
+
+export interface FirewallPolicySourceTrafficFilter {
+  type: string;
+  /** Match source traffic by IPv6 interface identifier */
+  ipv6IidFilter?: FirewallPolicyIPv6InterfaceIdentifierFilter;
+  /** Shape varies by variant — widened by scripts/convert.ts; see README. */
+  macAddressFilter?: unknown;
+  /** Match source traffic additionally by ports. If null, match all ports. */
+  portFilter?: FirewallPolicyPortFilter;
+  /** Match source traffic by IP addresses */
+  ipAddressFilter?: FirewallPolicyIPAddressFilter;
+  /** Match source traffic by networks. */
+  networkFilter?: FirewallPolicyNetworkFilter;
+  /** Match source traffic by regions. */
+  regionFilter?: FirewallPolicyRegionFilter;
+  /** Match source traffic by site-to-site VPN tunnel. */
+  siteToSiteVpnTunnelFilter?: FirewallPolicySiteToSiteVPNTunnelFilter;
+  /** Match source traffic by VPN servers. */
+  vpnServerFilter?: FirewallPolicyVPNServerFilter;
+}
+export const FirewallPolicySourceTrafficFilter = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    type: S.String,
+    ipv6IidFilter: S.optional(FirewallPolicyIPv6InterfaceIdentifierFilter),
+    macAddressFilter: S.optional(S.Unknown),
+    portFilter: S.optional(FirewallPolicyPortFilter),
+    ipAddressFilter: S.optional(FirewallPolicyIPAddressFilter),
+    networkFilter: S.optional(FirewallPolicyNetworkFilter),
+    regionFilter: S.optional(FirewallPolicyRegionFilter),
+    siteToSiteVpnTunnelFilter: S.optional(
+      FirewallPolicySiteToSiteVPNTunnelFilter,
+    ),
+    vpnServerFilter: S.optional(FirewallPolicyVPNServerFilter),
+  }),
+).annotate({
+  identifier: "FirewallPolicySourceTrafficFilter",
+}) as any as S.Schema<FirewallPolicySourceTrafficFilter>;
+
+export interface FirewallPolicySource {
+  trafficFilter?: FirewallPolicySourceTrafficFilter;
+  /** ID of the firewall zone from which the matched traffic originates. */
+  zoneId: string;
+}
+export const FirewallPolicySource = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    trafficFilter: S.optional(FirewallPolicySourceTrafficFilter),
+    zoneId: S.String,
+  }),
+).annotate({
+  identifier: "FirewallPolicySource",
+}) as any as S.Schema<FirewallPolicySource>;
+
+export interface CreateFirewallPolicyRequest {
+  siteId: string;
+  action: FirewallPolicyAction;
+  /** Match on firewall connection state. If null, matches all connection states. */
+  connectionStateFilter?: CreateFirewallPolicyRequestConnectionStateFilterList;
+  description?: string;
+  destination: FirewallPolicyDestination;
+  enabled: boolean;
+  ipProtocolScope: FirewallPolicyIPProtocolScope;
+  /** Match on traffic encrypted, or not encrypted by IPsec. If null, matches all traffic. */
+  ipsecFilter?: CreateFirewallPolicyRequestIpsecFilter | (string & {});
+  /** Generate syslog entries when traffic is matched. Such entries are sent to a remote syslog server. */
+  loggingEnabled: boolean;
+  name: string;
+  schedule?: FirewallSchedule;
+  source: FirewallPolicySource;
+}
+export const CreateFirewallPolicyRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    siteId: S.String.pipe(T.Label()),
+    action: FirewallPolicyAction,
+    connectionStateFilter: S.optional(
+      CreateFirewallPolicyRequestConnectionStateFilterList,
+    ),
+    description: S.optional(S.String),
+    destination: FirewallPolicyDestination,
+    enabled: S.Boolean,
+    ipProtocolScope: FirewallPolicyIPProtocolScope,
+    ipsecFilter: S.optional(CreateFirewallPolicyRequestIpsecFilter),
+    loggingEnabled: S.Boolean,
+    name: S.String,
+    schedule: S.optional(FirewallSchedule),
+    source: FirewallPolicySource,
+  }).pipe(
+    T.Http({
+      method: "POST",
+      uri: "/v1/sites/{siteId}/firewall/policies",
+      code: 200,
+    }),
+  ),
+).annotate({
+  identifier: "CreateFirewallPolicyRequest",
+}) as any as S.Schema<CreateFirewallPolicyRequest>;
+
+export type FirewallPolicyConnectionStateFilterItem =
+  | "NEW"
+  | "INVALID"
+  | "ESTABLISHED"
+  | "RELATED";
+export const FirewallPolicyConnectionStateFilterItem = S.String;
+
+/** Match on firewall connection state. If null, matches all connection states. */
+export type FirewallPolicyConnectionStateFilterList =
+  Array<FirewallPolicyConnectionStateFilterItem>;
+export const FirewallPolicyConnectionStateFilterList = /*@__PURE__*/ S.Array(
+  FirewallPolicyConnectionStateFilterItem,
+) as any as S.Schema<FirewallPolicyConnectionStateFilterList>;
+
+/** Match on traffic encrypted, or not encrypted by IPsec. If null, matches all traffic. */
+export type FirewallPolicyIpsecFilter =
+  | "MATCH_ENCRYPTED"
+  | "MATCH_NOT_ENCRYPTED";
+export const FirewallPolicyIpsecFilter = S.String;
+
+export type UserOrSystemDefinedOrDerivedEntityMetadataSource = "SDWAN";
+export const UserOrSystemDefinedOrDerivedEntityMetadataSource = S.String;
+
+export interface UserOrSystemDefinedOrDerivedEntityMetadata {
+  origin: string;
+  source?: UserOrSystemDefinedOrDerivedEntityMetadataSource;
+}
+export const UserOrSystemDefinedOrDerivedEntityMetadata =
+  /*@__PURE__*/ S.suspend(() =>
+    S.Struct({
+      origin: S.String,
+      source: S.optional(UserOrSystemDefinedOrDerivedEntityMetadataSource),
+    }),
+  ).annotate({
+    identifier: "UserOrSystemDefinedOrDerivedEntityMetadata",
+  }) as any as S.Schema<UserOrSystemDefinedOrDerivedEntityMetadata>;
+
+export interface FirewallPolicy {
+  action: FirewallPolicyAction;
+  /** Match on firewall connection state. If null, matches all connection states. */
+  connectionStateFilter?: FirewallPolicyConnectionStateFilterList;
+  description?: string;
+  destination: FirewallPolicyDestination;
+  enabled: boolean;
+  id: string;
+  index: number;
+  ipProtocolScope: FirewallPolicyIPProtocolScope;
+  /** Match on traffic encrypted, or not encrypted by IPsec. If null, matches all traffic. */
+  ipsecFilter?: FirewallPolicyIpsecFilter;
+  /** Generate syslog entries when traffic is matched. Such entries are sent to a remote syslog server. */
+  loggingEnabled: boolean;
+  metadata: UserOrSystemDefinedOrDerivedEntityMetadata;
+  name: string;
+  schedule?: FirewallSchedule;
+  source: FirewallPolicySource;
+}
+export const FirewallPolicy = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    action: FirewallPolicyAction,
+    connectionStateFilter: S.optional(FirewallPolicyConnectionStateFilterList),
+    description: S.optional(S.String),
+    destination: FirewallPolicyDestination,
+    enabled: S.Boolean,
+    id: S.String,
+    index: S.Number,
+    ipProtocolScope: FirewallPolicyIPProtocolScope,
+    ipsecFilter: S.optional(FirewallPolicyIpsecFilter),
+    loggingEnabled: S.Boolean,
+    metadata: UserOrSystemDefinedOrDerivedEntityMetadata,
+    name: S.String,
+    schedule: S.optional(FirewallSchedule),
+    source: FirewallPolicySource,
+  }),
+).annotate({ identifier: "FirewallPolicy" }) as any as S.Schema<FirewallPolicy>;
+
+/** List of Network IDs */
+export type CreateFirewallZoneRequestNetworkIdsList = Array<string>;
+export const CreateFirewallZoneRequestNetworkIdsList = /*@__PURE__*/ S.Array(
+  S.String,
+) as any as S.Schema<CreateFirewallZoneRequestNetworkIdsList>;
+
+export interface CreateFirewallZoneRequest {
+  siteId: string;
+  /** Name of a firewall zone */
+  name: string;
+  /** List of Network IDs */
+  networkIds: CreateFirewallZoneRequestNetworkIdsList;
+}
+export const CreateFirewallZoneRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    siteId: S.String.pipe(T.Label()),
+    name: S.String,
+    networkIds: CreateFirewallZoneRequestNetworkIdsList,
+  }).pipe(
+    T.Http({
+      method: "POST",
+      uri: "/v1/sites/{siteId}/firewall/zones",
+      code: 200,
+    }),
+  ),
+).annotate({
+  identifier: "CreateFirewallZoneRequest",
+}) as any as S.Schema<CreateFirewallZoneRequest>;
+
+export type UserOrSystemDefinedEntityMetadataSource = "SDWAN";
+export const UserOrSystemDefinedEntityMetadataSource = S.String;
+
+export interface UserOrSystemDefinedEntityMetadata {
+  origin: string;
+  source?: UserOrSystemDefinedEntityMetadataSource;
+}
+export const UserOrSystemDefinedEntityMetadata = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    origin: S.String,
+    source: S.optional(UserOrSystemDefinedEntityMetadataSource),
+  }),
+).annotate({
+  identifier: "UserOrSystemDefinedEntityMetadata",
+}) as any as S.Schema<UserOrSystemDefinedEntityMetadata>;
+
+/** List of Network IDs */
+export type FirewallZoneNetworkIdsList = Array<string>;
+export const FirewallZoneNetworkIdsList = /*@__PURE__*/ S.Array(
+  S.String,
+) as any as S.Schema<FirewallZoneNetworkIdsList>;
+
+export interface FirewallZone {
+  id: string;
+  /** System-defined configurable zones support configuring only attached networks */
+  metadata: UserOrSystemDefinedEntityMetadata;
+  /** Name of a firewall zone */
+  name: string;
+  /** List of Network IDs */
+  networkIds: FirewallZoneNetworkIdsList;
+}
+export const FirewallZone = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    id: S.String,
+    metadata: UserOrSystemDefinedEntityMetadata,
+    name: S.String,
+    networkIds: FirewallZoneNetworkIdsList,
+  }),
+).annotate({ identifier: "FirewallZone" }) as any as S.Schema<FirewallZone>;
+
+export interface DeleteFirewallPolicyRequest {
+  siteId: string;
+  firewallPolicyId: string;
+}
+export const DeleteFirewallPolicyRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    siteId: S.String.pipe(T.Label()),
+    firewallPolicyId: S.String.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "DELETE",
+      uri: "/v1/sites/{siteId}/firewall/policies/{firewallPolicyId}",
+      code: 200,
+    }),
+  ),
+).annotate({
+  identifier: "DeleteFirewallPolicyRequest",
+}) as any as S.Schema<DeleteFirewallPolicyRequest>;
+
+export interface DeleteFirewallPolicyResponse {}
+export const DeleteFirewallPolicyResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({}),
+).annotate({
+  identifier: "DeleteFirewallPolicyResponse",
+}) as any as S.Schema<DeleteFirewallPolicyResponse>;
+
+export interface DeleteFirewallZoneRequest {
+  siteId: string;
+  firewallZoneId: string;
+}
+export const DeleteFirewallZoneRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    siteId: S.String.pipe(T.Label()),
+    firewallZoneId: S.String.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "DELETE",
+      uri: "/v1/sites/{siteId}/firewall/zones/{firewallZoneId}",
+      code: 200,
+    }),
+  ),
+).annotate({
+  identifier: "DeleteFirewallZoneRequest",
+}) as any as S.Schema<DeleteFirewallZoneRequest>;
+
+export interface DeleteFirewallZoneResponse {}
+export const DeleteFirewallZoneResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({}),
+).annotate({
+  identifier: "DeleteFirewallZoneResponse",
+}) as any as S.Schema<DeleteFirewallZoneResponse>;
+
+export interface GetFirewallPoliciesRequest {
+  siteId: string;
+  offset?: number;
+  limit?: number;
+  filter?: string;
+}
+export const GetFirewallPoliciesRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    siteId: S.String.pipe(T.Label()),
+    offset: S.optional(S.Number.pipe(T.Query())),
+    limit: S.optional(S.Number.pipe(T.Query())),
+    filter: S.optional(S.String.pipe(T.Query())),
+  }).pipe(
+    T.Http({
+      method: "GET",
+      uri: "/v1/sites/{siteId}/firewall/policies",
+      code: 200,
+    }),
+  ),
+).annotate({
+  identifier: "GetFirewallPoliciesRequest",
+}) as any as S.Schema<GetFirewallPoliciesRequest>;
+
+export type FirewallPolicyPageDataList = Array<FirewallPolicy>;
+export const FirewallPolicyPageDataList = /*@__PURE__*/ S.Array(
+  FirewallPolicy,
+) as any as S.Schema<FirewallPolicyPageDataList>;
+
+export interface FirewallPolicyPage {
+  count: number;
+  data: FirewallPolicyPageDataList;
+  limit: number;
+  offset: number;
+  totalCount: number;
+}
+export const FirewallPolicyPage = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    count: S.Number,
+    data: FirewallPolicyPageDataList,
+    limit: S.Number,
+    offset: S.Number,
+    totalCount: S.Number,
+  }),
+).annotate({
+  identifier: "FirewallPolicyPage",
+}) as any as S.Schema<FirewallPolicyPage>;
+
+export interface GetFirewallPolicyRequest {
+  siteId: string;
+  firewallPolicyId: string;
+}
+export const GetFirewallPolicyRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    siteId: S.String.pipe(T.Label()),
+    firewallPolicyId: S.String.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "GET",
+      uri: "/v1/sites/{siteId}/firewall/policies/{firewallPolicyId}",
+      code: 200,
+    }),
+  ),
+).annotate({
+  identifier: "GetFirewallPolicyRequest",
+}) as any as S.Schema<GetFirewallPolicyRequest>;
+
+export interface GetFirewallPolicyOrderingRequest {
+  siteId: string;
+  sourceFirewallZoneId: string;
+  destinationFirewallZoneId: string;
+}
+export const GetFirewallPolicyOrderingRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    siteId: S.String.pipe(T.Label()),
+    sourceFirewallZoneId: S.String.pipe(T.Query()),
+    destinationFirewallZoneId: S.String.pipe(T.Query()),
+  }).pipe(
+    T.Http({
+      method: "GET",
+      uri: "/v1/sites/{siteId}/firewall/policies/ordering",
+      code: 200,
+    }),
+  ),
+).annotate({
+  identifier: "GetFirewallPolicyOrderingRequest",
+}) as any as S.Schema<GetFirewallPolicyOrderingRequest>;
+
+export type OrderedFirewallPolicyIDsAfterSystemDefinedList = Array<string>;
+export const OrderedFirewallPolicyIDsAfterSystemDefinedList =
+  /*@__PURE__*/ S.Array(
+    S.String,
+  ) as any as S.Schema<OrderedFirewallPolicyIDsAfterSystemDefinedList>;
+
+export type OrderedFirewallPolicyIDsBeforeSystemDefinedList = Array<string>;
+export const OrderedFirewallPolicyIDsBeforeSystemDefinedList =
+  /*@__PURE__*/ S.Array(
+    S.String,
+  ) as any as S.Schema<OrderedFirewallPolicyIDsBeforeSystemDefinedList>;
+
+export interface OrderedFirewallPolicyIDs {
+  afterSystemDefined: OrderedFirewallPolicyIDsAfterSystemDefinedList;
+  beforeSystemDefined: OrderedFirewallPolicyIDsBeforeSystemDefinedList;
+}
+export const OrderedFirewallPolicyIDs = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    afterSystemDefined: OrderedFirewallPolicyIDsAfterSystemDefinedList,
+    beforeSystemDefined: OrderedFirewallPolicyIDsBeforeSystemDefinedList,
+  }),
+).annotate({
+  identifier: "OrderedFirewallPolicyIDs",
+}) as any as S.Schema<OrderedFirewallPolicyIDs>;
+
+export interface IntegrationFirewallPolicyOrderingDto {
+  orderedFirewallPolicyIds: OrderedFirewallPolicyIDs;
+}
+export const IntegrationFirewallPolicyOrderingDto = /*@__PURE__*/ S.suspend(
+  () =>
+    S.Struct({
+      orderedFirewallPolicyIds: OrderedFirewallPolicyIDs,
+    }),
+).annotate({
+  identifier: "IntegrationFirewallPolicyOrderingDto",
+}) as any as S.Schema<IntegrationFirewallPolicyOrderingDto>;
+
+export interface GetFirewallZoneRequest {
+  siteId: string;
+  firewallZoneId: string;
+}
+export const GetFirewallZoneRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    siteId: S.String.pipe(T.Label()),
+    firewallZoneId: S.String.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "GET",
+      uri: "/v1/sites/{siteId}/firewall/zones/{firewallZoneId}",
+      code: 200,
+    }),
+  ),
+).annotate({
+  identifier: "GetFirewallZoneRequest",
+}) as any as S.Schema<GetFirewallZoneRequest>;
+
+export interface GetFirewallZonesRequest {
+  siteId: string;
+  offset?: number;
+  limit?: number;
+  filter?: string;
+}
+export const GetFirewallZonesRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    siteId: S.String.pipe(T.Label()),
+    offset: S.optional(S.Number.pipe(T.Query())),
+    limit: S.optional(S.Number.pipe(T.Query())),
+    filter: S.optional(S.String.pipe(T.Query())),
+  }).pipe(
+    T.Http({
+      method: "GET",
+      uri: "/v1/sites/{siteId}/firewall/zones",
+      code: 200,
+    }),
+  ),
+).annotate({
+  identifier: "GetFirewallZonesRequest",
+}) as any as S.Schema<GetFirewallZonesRequest>;
+
+export type FirewallZonesPageDataList = Array<FirewallZone>;
+export const FirewallZonesPageDataList = /*@__PURE__*/ S.Array(
+  FirewallZone,
+) as any as S.Schema<FirewallZonesPageDataList>;
+
+export interface FirewallZonesPage {
+  count: number;
+  data: FirewallZonesPageDataList;
+  limit: number;
+  offset: number;
+  totalCount: number;
+}
+export const FirewallZonesPage = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    count: S.Number,
+    data: FirewallZonesPageDataList,
+    limit: S.Number,
+    offset: S.Number,
+    totalCount: S.Number,
+  }),
+).annotate({
+  identifier: "FirewallZonesPage",
+}) as any as S.Schema<FirewallZonesPage>;
+
+export interface PatchFirewallPolicyRequest {
+  siteId: string;
+  firewallPolicyId: string;
+  loggingEnabled?: boolean;
+}
+export const PatchFirewallPolicyRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    siteId: S.String.pipe(T.Label()),
+    firewallPolicyId: S.String.pipe(T.Label()),
+    loggingEnabled: S.optional(S.Boolean),
+  }).pipe(
+    T.Http({
+      method: "PATCH",
+      uri: "/v1/sites/{siteId}/firewall/policies/{firewallPolicyId}",
+      code: 200,
+    }),
+  ),
+).annotate({
+  identifier: "PatchFirewallPolicyRequest",
+}) as any as S.Schema<PatchFirewallPolicyRequest>;
+
+export type UpdateFirewallPolicyRequestConnectionStateFilterItem =
+  | "NEW"
+  | "INVALID"
+  | "ESTABLISHED"
+  | "RELATED";
+export const UpdateFirewallPolicyRequestConnectionStateFilterItem = S.String;
+
+/** Match on firewall connection state. If null, matches all connection states. */
+export type UpdateFirewallPolicyRequestConnectionStateFilterList = Array<
+  UpdateFirewallPolicyRequestConnectionStateFilterItem | (string & {})
+>;
+export const UpdateFirewallPolicyRequestConnectionStateFilterList =
+  /*@__PURE__*/ S.Array(
+    UpdateFirewallPolicyRequestConnectionStateFilterItem,
+  ) as any as S.Schema<UpdateFirewallPolicyRequestConnectionStateFilterList>;
+
+/** Match on traffic encrypted, or not encrypted by IPsec. If null, matches all traffic. */
+export type UpdateFirewallPolicyRequestIpsecFilter =
+  | "MATCH_ENCRYPTED"
+  | "MATCH_NOT_ENCRYPTED";
+export const UpdateFirewallPolicyRequestIpsecFilter = S.String;
+
+export interface UpdateFirewallPolicyRequest {
+  siteId: string;
+  firewallPolicyId: string;
+  action: FirewallPolicyAction;
+  /** Match on firewall connection state. If null, matches all connection states. */
+  connectionStateFilter?: UpdateFirewallPolicyRequestConnectionStateFilterList;
+  description?: string;
+  destination: FirewallPolicyDestination;
+  enabled: boolean;
+  ipProtocolScope: FirewallPolicyIPProtocolScope;
+  /** Match on traffic encrypted, or not encrypted by IPsec. If null, matches all traffic. */
+  ipsecFilter?: UpdateFirewallPolicyRequestIpsecFilter | (string & {});
+  /** Generate syslog entries when traffic is matched. Such entries are sent to a remote syslog server. */
+  loggingEnabled: boolean;
+  name: string;
+  schedule?: FirewallSchedule;
+  source: FirewallPolicySource;
+}
+export const UpdateFirewallPolicyRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    siteId: S.String.pipe(T.Label()),
+    firewallPolicyId: S.String.pipe(T.Label()),
+    action: FirewallPolicyAction,
+    connectionStateFilter: S.optional(
+      UpdateFirewallPolicyRequestConnectionStateFilterList,
+    ),
+    description: S.optional(S.String),
+    destination: FirewallPolicyDestination,
+    enabled: S.Boolean,
+    ipProtocolScope: FirewallPolicyIPProtocolScope,
+    ipsecFilter: S.optional(UpdateFirewallPolicyRequestIpsecFilter),
+    loggingEnabled: S.Boolean,
+    name: S.String,
+    schedule: S.optional(FirewallSchedule),
+    source: FirewallPolicySource,
+  }).pipe(
+    T.Http({
+      method: "PUT",
+      uri: "/v1/sites/{siteId}/firewall/policies/{firewallPolicyId}",
+      code: 200,
+    }),
+  ),
+).annotate({
+  identifier: "UpdateFirewallPolicyRequest",
+}) as any as S.Schema<UpdateFirewallPolicyRequest>;
+
+export interface UpdateFirewallPolicyOrderingRequest {
+  siteId: string;
+  sourceFirewallZoneId: string;
+  destinationFirewallZoneId: string;
+  orderedFirewallPolicyIds: OrderedFirewallPolicyIDs;
+}
+export const UpdateFirewallPolicyOrderingRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    siteId: S.String.pipe(T.Label()),
+    sourceFirewallZoneId: S.String.pipe(T.Query()),
+    destinationFirewallZoneId: S.String.pipe(T.Query()),
+    orderedFirewallPolicyIds: OrderedFirewallPolicyIDs,
+  }).pipe(
+    T.Http({
+      method: "PUT",
+      uri: "/v1/sites/{siteId}/firewall/policies/ordering",
+      code: 200,
+    }),
+  ),
+).annotate({
+  identifier: "UpdateFirewallPolicyOrderingRequest",
+}) as any as S.Schema<UpdateFirewallPolicyOrderingRequest>;
+
+/** List of Network IDs */
+export type UpdateFirewallZoneRequestNetworkIdsList = Array<string>;
+export const UpdateFirewallZoneRequestNetworkIdsList = /*@__PURE__*/ S.Array(
+  S.String,
+) as any as S.Schema<UpdateFirewallZoneRequestNetworkIdsList>;
+
+export interface UpdateFirewallZoneRequest {
+  siteId: string;
+  firewallZoneId: string;
+  /** Name of a firewall zone */
+  name: string;
+  /** List of Network IDs */
+  networkIds: UpdateFirewallZoneRequestNetworkIdsList;
+}
+export const UpdateFirewallZoneRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    siteId: S.String.pipe(T.Label()),
+    firewallZoneId: S.String.pipe(T.Label()),
+    name: S.String,
+    networkIds: UpdateFirewallZoneRequestNetworkIdsList,
+  }).pipe(
+    T.Http({
+      method: "PUT",
+      uri: "/v1/sites/{siteId}/firewall/zones/{firewallZoneId}",
+      code: 200,
+    }),
+  ),
+).annotate({
+  identifier: "UpdateFirewallZoneRequest",
+}) as any as S.Schema<UpdateFirewallZoneRequest>;
+
+export type CreateFirewallPolicyError = UnifiNetworkOpError;
+/** Create Firewall Policy Create a new firewall policy on a site. */
+export const createFirewallPolicy: API.OperationMethod<
+  CreateFirewallPolicyRequest,
+  FirewallPolicy,
+  CreateFirewallPolicyError,
+  UnifiNetworkOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: CreateFirewallPolicyRequest,
+  output: FirewallPolicy,
+  errors: [UnknownUnifiNetworkError],
+  protocol: UnifiNetworkProtocol,
+  retry: Retry.Retry,
+}));
+
+export type CreateFirewallZoneError = UnifiNetworkOpError;
+/** Create Custom Firewall Zone Create a new custom firewall zone on a site. */
+export const createFirewallZone: API.OperationMethod<
+  CreateFirewallZoneRequest,
+  FirewallZone,
+  CreateFirewallZoneError,
+  UnifiNetworkOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: CreateFirewallZoneRequest,
+  output: FirewallZone,
+  errors: [UnknownUnifiNetworkError],
+  protocol: UnifiNetworkProtocol,
+  retry: Retry.Retry,
+}));
+
+export type DeleteFirewallPolicyError = UnifiNetworkOpError;
+/** Delete Firewall Policy Delete an existing firewall policy on a site. */
+export const deleteFirewallPolicy: API.OperationMethod<
+  DeleteFirewallPolicyRequest,
+  DeleteFirewallPolicyResponse,
+  DeleteFirewallPolicyError,
+  UnifiNetworkOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: DeleteFirewallPolicyRequest,
+  output: DeleteFirewallPolicyResponse,
+  errors: [UnknownUnifiNetworkError],
+  protocol: UnifiNetworkProtocol,
+  retry: Retry.Retry,
+}));
+
+export type DeleteFirewallZoneError = UnifiNetworkOpError;
+/** Delete Custom Firewall Zone Delete a custom firewall zone from a site. */
+export const deleteFirewallZone: API.OperationMethod<
+  DeleteFirewallZoneRequest,
+  DeleteFirewallZoneResponse,
+  DeleteFirewallZoneError,
+  UnifiNetworkOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: DeleteFirewallZoneRequest,
+  output: DeleteFirewallZoneResponse,
+  errors: [UnknownUnifiNetworkError],
+  protocol: UnifiNetworkProtocol,
+  retry: Retry.Retry,
+}));
+
+export type GetFirewallPoliciesError = UnifiNetworkOpError;
+/** List Firewall Policies Retrieve a list of all firewall policies on a site. <details> <summary>Filterable properties (click to expand)</summary> </details> */
+export const getFirewallPolicies: API.OperationMethod<
+  GetFirewallPoliciesRequest,
+  FirewallPolicyPage,
+  GetFirewallPoliciesError,
+  UnifiNetworkOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: GetFirewallPoliciesRequest,
+  output: FirewallPolicyPage,
+  errors: [UnknownUnifiNetworkError],
+  protocol: UnifiNetworkProtocol,
+  retry: Retry.Retry,
+}));
+
+export type GetFirewallPolicyError = UnifiNetworkOpError;
+/** Get Firewall Policy Retrieve specific firewall policy. */
+export const getFirewallPolicy: API.OperationMethod<
+  GetFirewallPolicyRequest,
+  FirewallPolicy,
+  GetFirewallPolicyError,
+  UnifiNetworkOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: GetFirewallPolicyRequest,
+  output: FirewallPolicy,
+  errors: [UnknownUnifiNetworkError],
+  protocol: UnifiNetworkProtocol,
+  retry: Retry.Retry,
+}));
+
+export type GetFirewallPolicyOrderingError = UnifiNetworkOpError;
+/** Get User-Defined Firewall Policy Ordering Retrieve user-defined firewall policy ordering for a specific source/destination zone pair. */
+export const getFirewallPolicyOrdering: API.OperationMethod<
+  GetFirewallPolicyOrderingRequest,
+  IntegrationFirewallPolicyOrderingDto,
+  GetFirewallPolicyOrderingError,
+  UnifiNetworkOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: GetFirewallPolicyOrderingRequest,
+  output: IntegrationFirewallPolicyOrderingDto,
+  errors: [UnknownUnifiNetworkError],
+  protocol: UnifiNetworkProtocol,
+  retry: Retry.Retry,
+}));
+
+export type GetFirewallZoneError = UnifiNetworkOpError;
+/** Get Firewall Zone Get a firewall zone on a site. */
+export const getFirewallZone: API.OperationMethod<
+  GetFirewallZoneRequest,
+  FirewallZone,
+  GetFirewallZoneError,
+  UnifiNetworkOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: GetFirewallZoneRequest,
+  output: FirewallZone,
+  errors: [UnknownUnifiNetworkError],
+  protocol: UnifiNetworkProtocol,
+  retry: Retry.Retry,
+}));
+
+export type GetFirewallZonesError = UnifiNetworkOpError;
+/** List Firewall Zones Retrieve a list of all firewall zones on a site. <details> <summary>Filterable properties (click to expand)</summary> </details> */
+export const getFirewallZones: API.OperationMethod<
+  GetFirewallZonesRequest,
+  FirewallZonesPage,
+  GetFirewallZonesError,
+  UnifiNetworkOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: GetFirewallZonesRequest,
+  output: FirewallZonesPage,
+  errors: [UnknownUnifiNetworkError],
+  protocol: UnifiNetworkProtocol,
+  retry: Retry.Retry,
+}));
+
+export type PatchFirewallPolicyError = UnifiNetworkOpError;
+/** Patch Firewall Policy Patch an existing firewall policy on a site. */
+export const patchFirewallPolicy: API.OperationMethod<
+  PatchFirewallPolicyRequest,
+  FirewallPolicy,
+  PatchFirewallPolicyError,
+  UnifiNetworkOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: PatchFirewallPolicyRequest,
+  output: FirewallPolicy,
+  errors: [UnknownUnifiNetworkError],
+  protocol: UnifiNetworkProtocol,
+  retry: Retry.Retry,
+}));
+
+export type UpdateFirewallPolicyError = UnifiNetworkOpError;
+/** Update Firewall Policy Update an existing firewall policy on a site. */
+export const updateFirewallPolicy: API.OperationMethod<
+  UpdateFirewallPolicyRequest,
+  FirewallPolicy,
+  UpdateFirewallPolicyError,
+  UnifiNetworkOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: UpdateFirewallPolicyRequest,
+  output: FirewallPolicy,
+  errors: [UnknownUnifiNetworkError],
+  protocol: UnifiNetworkProtocol,
+  retry: Retry.Retry,
+}));
+
+export type UpdateFirewallPolicyOrderingError = UnifiNetworkOpError;
+/** Reorder User-Defined Firewall Policies Reorder user-defined firewall policies for a specific source/destination zone pair. */
+export const updateFirewallPolicyOrdering: API.OperationMethod<
+  UpdateFirewallPolicyOrderingRequest,
+  IntegrationFirewallPolicyOrderingDto,
+  UpdateFirewallPolicyOrderingError,
+  UnifiNetworkOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: UpdateFirewallPolicyOrderingRequest,
+  output: IntegrationFirewallPolicyOrderingDto,
+  errors: [UnknownUnifiNetworkError],
+  protocol: UnifiNetworkProtocol,
+  retry: Retry.Retry,
+}));
+
+export type UpdateFirewallZoneError = UnifiNetworkOpError;
+/** Update Firewall Zone Update a firewall zone on a site. */
+export const updateFirewallZone: API.OperationMethod<
+  UpdateFirewallZoneRequest,
+  FirewallZone,
+  UpdateFirewallZoneError,
+  UnifiNetworkOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: UpdateFirewallZoneRequest,
+  output: FirewallZone,
+  errors: [UnknownUnifiNetworkError],
+  protocol: UnifiNetworkProtocol,
+  retry: Retry.Retry,
+}));