@opensoha/contracts 0.1.26 → 0.1.27

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (129) hide show
  1. package/COMPATIBILITY.md +10 -0
  2. package/auth/catalog_generated.go +2 -2
  3. package/auth/permission-catalog.json +481 -1
  4. package/compat/json-schema-ecosystem-0.1.0.json +1 -1
  5. package/compat/openapi-loose-boundaries-0.1.0.json +1 -1
  6. package/endpointcontrol/decode.go +64 -0
  7. package/endpointcontrol/models.go +138 -0
  8. package/endpointcontrol/models_test.go +51 -0
  9. package/endpointcontrol/protocol.schema.json +397 -0
  10. package/fixtures/json-schema/endpoint-controls/invalid/controls.json +16 -0
  11. package/fixtures/json-schema/endpoint-controls/invalid/missing-channel-decision.json +15 -0
  12. package/fixtures/json-schema/endpoint-controls/invalid/receipt-content.json +36 -0
  13. package/fixtures/json-schema/endpoint-controls/valid/controls.json +16 -0
  14. package/fixtures/json-schema/endpoint-controls/valid/receipt.json +35 -0
  15. package/fixtures/json-schema/network-runtime-protocol/invalid/eap-activate-bad-fingerprint.json +14 -0
  16. package/fixtures/json-schema/network-runtime-protocol/invalid/eap-gateway-request.json +14 -0
  17. package/fixtures/json-schema/network-runtime-protocol/invalid/eap-private-key-request.json +15 -0
  18. package/fixtures/json-schema/network-runtime-protocol/invalid/eap-profile-without-eap-credential.json +22 -0
  19. package/fixtures/json-schema/network-runtime-protocol/invalid/endpoint-dns-observation.json +25 -0
  20. package/fixtures/json-schema/network-runtime-protocol/invalid/gateway-presence.json +22 -0
  21. package/fixtures/json-schema/network-runtime-protocol/invalid/mihomo-protection-zero-version.json +45 -0
  22. package/fixtures/json-schema/network-runtime-protocol/invalid/presence-raw-key.json +23 -0
  23. package/fixtures/json-schema/network-runtime-protocol/invalid/presence-zero-sequence.json +22 -0
  24. package/fixtures/json-schema/network-runtime-protocol/invalid/workload-wide-vpn.json +17 -0
  25. package/fixtures/json-schema/network-runtime-protocol/valid/eap-certificate-activate.json +14 -0
  26. package/fixtures/json-schema/network-runtime-protocol/valid/eap-certificate-request.json +14 -0
  27. package/fixtures/json-schema/network-runtime-protocol/valid/eap-profile-enrollment.json +24 -0
  28. package/fixtures/json-schema/network-runtime-protocol/valid/endpoint-presence.json +22 -0
  29. package/fixtures/json-schema/network-runtime-protocol/valid/ipv6-configuration.json +102 -0
  30. package/fixtures/json-schema/network-runtime-protocol/valid/mihomo-protected-policy.json +45 -0
  31. package/fixtures/json-schema/network-runtime-protocol/valid/site-dns-ipv6.json +25 -0
  32. package/fixtures/json-schema/network-runtime-protocol/valid/workload-direct-ztna.json +20 -0
  33. package/fixtures/openapi/DLPShadowDecision/invalid/step-up-type.json +14 -0
  34. package/fixtures/openapi/DLPShadowDecision/valid/archive-v2.json +14 -0
  35. package/fixtures/openapi/DLPShadowDecision/valid/step-up.json +14 -0
  36. package/fixtures/openapi/DLPShadowInput/invalid/self-reported-result.json +7 -0
  37. package/fixtures/openapi/DLPShadowInput/invalid/too-many-samples.json +14 -0
  38. package/fixtures/openapi/DLPShadowInput/valid/bounded.json +7 -0
  39. package/fixtures/openapi/DockerVolumeDLPAppealInput/invalid/p4-response.json +3 -0
  40. package/fixtures/openapi/DockerVolumeDLPAppealInput/valid/p4-response.json +3 -0
  41. package/fixtures/openapi/DockerVolumeDLPAppealReviewInput/invalid/p4-response.json +5 -0
  42. package/fixtures/openapi/DockerVolumeDLPAppealReviewInput/valid/p4-response.json +5 -0
  43. package/fixtures/openapi/DockerVolumeDLPAuthorizationInput/invalid/p4-response.json +3 -0
  44. package/fixtures/openapi/DockerVolumeDLPAuthorizationInput/valid/p4-response.json +3 -0
  45. package/fixtures/openapi/DockerVolumeDLPContent/invalid/archive-unsupported-channel.json +9 -0
  46. package/fixtures/openapi/DockerVolumeDLPContent/invalid/p4.json +6 -0
  47. package/fixtures/openapi/DockerVolumeDLPContent/invalid/step-up-audit.json +9 -0
  48. package/fixtures/openapi/DockerVolumeDLPContent/invalid/unavailable-engine.json +9 -0
  49. package/fixtures/openapi/DockerVolumeDLPContent/invalid/unknown-data-level.json +12 -0
  50. package/fixtures/openapi/DockerVolumeDLPContent/valid/classified-rule.json +16 -0
  51. package/fixtures/openapi/DockerVolumeDLPContent/valid/p4.json +8 -0
  52. package/fixtures/openapi/DockerVolumeDLPContent/valid/step-up.json +9 -0
  53. package/fixtures/openapi/DockerVolumeDLPDecision/invalid/p4.json +9 -0
  54. package/fixtures/openapi/DockerVolumeDLPDecision/invalid/step-up-type.json +12 -0
  55. package/fixtures/openapi/DockerVolumeDLPDecision/valid/archive-v2.json +12 -0
  56. package/fixtures/openapi/DockerVolumeDLPDecision/valid/p4.json +11 -0
  57. package/fixtures/openapi/DockerVolumeDLPDecision/valid/step-up.json +12 -0
  58. package/fixtures/openapi/DockerVolumeDLPSaveInput/invalid/p4.json +11 -0
  59. package/fixtures/openapi/DockerVolumeDLPSaveInput/valid/p4.json +11 -0
  60. package/fixtures/openapi/DockerVolumeFileReadInput/invalid/p4-response.json +5 -0
  61. package/fixtures/openapi/DockerVolumeFileReadInput/valid/p4-response.json +4 -0
  62. package/fixtures/openapi/EndpointDeviceInput/invalid/reported-management.json +5 -0
  63. package/fixtures/openapi/EndpointDeviceInput/valid/management-state.json +5 -0
  64. package/fixtures/openapi/EndpointDeviceRegistrationInput/invalid/self-promote-management.json +5 -0
  65. package/fixtures/openapi/ManagedContentPasteInput/invalid/boundary.json +5 -0
  66. package/fixtures/openapi/ManagedContentPasteInput/valid/boundary.json +6 -0
  67. package/fixtures/openapi/ManagedContentPolicy/invalid/self-reported-allow.json +8 -0
  68. package/fixtures/openapi/ManagedContentPolicy/invalid/step-up-audit.json +8 -0
  69. package/fixtures/openapi/ManagedContentPolicy/invalid/unknown-extractor.json +8 -0
  70. package/fixtures/openapi/ManagedContentPolicy/valid/archive-v2.json +8 -0
  71. package/fixtures/openapi/ManagedContentPolicy/valid/network-and-level.json +10 -0
  72. package/fixtures/openapi/ManagedContentPolicy/valid/step-up.json +8 -0
  73. package/fixtures/openapi/ManagedContentReviewInput/invalid/boundary.json +5 -0
  74. package/fixtures/openapi/ManagedContentReviewInput/valid/boundary.json +5 -0
  75. package/fixtures/openapi/ManagedContentSaveInput/invalid/boundary.json +14 -0
  76. package/fixtures/openapi/ManagedContentSaveInput/valid/boundary.json +16 -0
  77. package/fixtures/openapi/ManagedContentUploadInput/invalid/boundary.json +7 -0
  78. package/fixtures/openapi/ManagedContentUploadInput/valid/boundary.json +6 -0
  79. package/fixtures/openapi/NetworkAccessPolicyInput/invalid/unknown-management-state.json +35 -0
  80. package/fixtures/openapi/NetworkAccessPolicyInput/valid/managed-device.json +35 -0
  81. package/fixtures/openapi/NetworkAdmissionPreviewRequest/invalid/deviceId-characters.json +4 -0
  82. package/fixtures/openapi/NetworkAdmissionPreviewRequest/invalid/nasBindingId-characters.json +4 -0
  83. package/fixtures/openapi/NetworkAdmissionPreviewRequest/invalid/subject-override.json +1 -0
  84. package/fixtures/openapi/NetworkAdmissionPreviewRequest/valid/device-nas.json +1 -0
  85. package/fixtures/openapi/NetworkAdmissionPreviewResult/invalid/missing-attributeVersion.json +13 -0
  86. package/fixtures/openapi/NetworkAdmissionPreviewResult/invalid/missing-evaluatedAt.json +13 -0
  87. package/fixtures/openapi/NetworkAdmissionPreviewResult/valid/versioned.json +14 -0
  88. package/fixtures/openapi/NetworkConflictAnalysisRequest/invalid/missing-runtime-ranges.json +1 -0
  89. package/fixtures/openapi/NetworkConflictAnalysisRequest/invalid/unknown-source-type.json +9 -0
  90. package/fixtures/openapi/NetworkConflictAnalysisRequest/valid/empty-runtime-ranges.json +3 -0
  91. package/fixtures/openapi/NetworkConflictAnalysisRequest/{invalid → valid}/ipv6-range.json +1 -1
  92. package/fixtures/openapi/NetworkEAPServerTrust/invalid/no-server-validation.json +5 -0
  93. package/fixtures/openapi/NetworkEAPServerTrust/valid/named-server.json +9 -0
  94. package/fixtures/openapi/NetworkEndpointResponsePolicyInput/invalid/all-sites-implicit.json +45 -0
  95. package/fixtures/openapi/NetworkEndpointResponsePolicyInput/invalid/unbounded-stages.json +54 -0
  96. package/fixtures/openapi/NetworkEndpointResponsePolicyInput/invalid/zero-heartbeat.json +47 -0
  97. package/fixtures/openapi/NetworkEndpointResponsePolicyInput/valid/staged-protection.json +47 -0
  98. package/fixtures/openapi/NetworkEndpointResponseRestoreInput/invalid/missing-reason.json +3 -0
  99. package/fixtures/openapi/NetworkEndpointResponseRestoreInput/valid/expected-current.json +4 -0
  100. package/fixtures/openapi/NetworkPolicyPreviewResult/invalid/attribute-version.json +1 -0
  101. package/fixtures/openapi/NetworkPolicyPreviewResult/valid/admission-version.json +1 -0
  102. package/fixtures/openapi/NetworkPolicySubjects/invalid/duplicate-role.json +1 -0
  103. package/fixtures/openapi/NetworkPolicySubjects/invalid/role-characters.json +5 -0
  104. package/fixtures/openapi/NetworkPolicySubjects/valid/role-bound.json +1 -0
  105. package/fixtures/openapi/NetworkProxyConfigurationInput/invalid/missing-content.json +1 -0
  106. package/fixtures/openapi/NetworkProxyConfigurationPatchInput/invalid/bad-binding-id.json +9 -0
  107. package/fixtures/openapi/NetworkProxyConfigurationPatchInput/invalid/empty-content.json +1 -0
  108. package/fixtures/openapi/NetworkProxyConfigurationPatchInput/valid/binding-only.json +11 -0
  109. package/fixtures/openapi/NetworkProxyConfigurationPatchInput/valid/clear-binding-disabled.json +5 -0
  110. package/fixtures/openapi/NetworkProxyConfigurationPatchInput/valid/enabled.json +1 -0
  111. package/fixtures/openapi/NetworkSiteInput/invalid/unknown-governance.json +6 -0
  112. package/fixtures/openapi/NetworkSiteInput/valid/restricted-unmanaged.json +6 -0
  113. package/gen/go/sohaapi/client.go +1 -1
  114. package/gen/go/sohaapi/proxy_configuration_test.go +38 -0
  115. package/gen/go/sohaapi/types.go +2825 -196
  116. package/gen/ts/sohaapi/index.ts +14533 -9883
  117. package/network/README.md +34 -0
  118. package/network/network-radius-accounting.schema.json +4 -1
  119. package/network/network-runtime-protocol.schema.json +2166 -317
  120. package/network/proxy-runtime.schema.json +482 -67
  121. package/openapi/network_control_test.go +64 -0
  122. package/openapi/soha-api.json +52989 -45064
  123. package/openapi/soha-api.yaml +26472 -20872
  124. package/openapi/spec_generated.go +3 -3
  125. package/package.json +6 -3
  126. package/proxytransport/handler.go +271 -0
  127. package/proxytransport/probe.go +30 -0
  128. package/proxytransport/scope.go +89 -0
  129. package/proxytransport/transport_test.go +60 -0
@@ -0,0 +1,9 @@
1
+ {
2
+ "enabled": true,
3
+ "mode": "block",
4
+ "detectors": [
5
+ "private_key"
6
+ ],
7
+ "rules": [],
8
+ "detectorVersion": "content-dlp-archive-v2"
9
+ }
@@ -0,0 +1,6 @@
1
+ {
2
+ "enabled": true,
3
+ "mode": "allow",
4
+ "detectors": [],
5
+ "rules": []
6
+ }
@@ -0,0 +1,9 @@
1
+ {
2
+ "mode": "audit",
3
+ "detectors": [
4
+ "private_key"
5
+ ],
6
+ "rules": [],
7
+ "requireStepUp": true,
8
+ "enabled": true
9
+ }
@@ -0,0 +1,9 @@
1
+ {
2
+ "enabled": true,
3
+ "mode": "block",
4
+ "detectors": [
5
+ "private_key"
6
+ ],
7
+ "rules": [],
8
+ "detectorVersion": "content-dlp-unavailable"
9
+ }
@@ -0,0 +1,12 @@
1
+ {
2
+ "enabled": true,
3
+ "mode": "block",
4
+ "detectors": [],
5
+ "rules": [
6
+ {
7
+ "id": "bad",
8
+ "expression": "x",
9
+ "dataLevel": "unknown"
10
+ }
11
+ ]
12
+ }
@@ -0,0 +1,16 @@
1
+ {
2
+ "enabled": true,
3
+ "mode": "block",
4
+ "detectors": [
5
+ "private_key"
6
+ ],
7
+ "rules": [
8
+ {
9
+ "id": "internal",
10
+ "expression": "INTERNAL",
11
+ "dataLevel": "internal"
12
+ }
13
+ ],
14
+ "minimumDataLevel": "confidential",
15
+ "detectorVersion": "content-dlp-text-v1"
16
+ }
@@ -0,0 +1,8 @@
1
+ {
2
+ "enabled": true,
3
+ "mode": "block",
4
+ "detectors": [
5
+ "private_key"
6
+ ],
7
+ "rules": []
8
+ }
@@ -0,0 +1,9 @@
1
+ {
2
+ "mode": "warn",
3
+ "detectors": [
4
+ "private_key"
5
+ ],
6
+ "rules": [],
7
+ "requireStepUp": true,
8
+ "enabled": true
9
+ }
@@ -0,0 +1,9 @@
1
+ {
2
+ "eventId": "e1",
3
+ "mode": "block",
4
+ "status": "safe",
5
+ "allowed": true,
6
+ "policyVersion": 1,
7
+ "detectorVersion": "content-dlp-text-v1",
8
+ "matchedRuleIds": []
9
+ }
@@ -0,0 +1,12 @@
1
+ {
2
+ "eventId": "e1",
3
+ "mode": "block",
4
+ "status": "matched",
5
+ "allowed": false,
6
+ "policyVersion": 1,
7
+ "detectorVersion": "content-dlp-text-v1",
8
+ "matchedRuleIds": [
9
+ "private_key"
10
+ ],
11
+ "stepUpRequired": "true"
12
+ }
@@ -0,0 +1,12 @@
1
+ {
2
+ "eventId": "e1",
3
+ "mode": "block",
4
+ "status": "matched",
5
+ "allowed": false,
6
+ "policyVersion": 1,
7
+ "detectorVersion": "content-dlp-archive-v2",
8
+ "matchedRuleIds": [
9
+ "private_key"
10
+ ],
11
+ "stepUpRequired": true
12
+ }
@@ -0,0 +1,11 @@
1
+ {
2
+ "eventId": "e1",
3
+ "mode": "block",
4
+ "status": "matched",
5
+ "allowed": false,
6
+ "policyVersion": 1,
7
+ "detectorVersion": "content-dlp-text-v1",
8
+ "matchedRuleIds": [
9
+ "private_key"
10
+ ]
11
+ }
@@ -0,0 +1,12 @@
1
+ {
2
+ "eventId": "e1",
3
+ "mode": "block",
4
+ "status": "matched",
5
+ "allowed": false,
6
+ "policyVersion": 1,
7
+ "detectorVersion": "content-dlp-text-v1",
8
+ "matchedRuleIds": [
9
+ "private_key"
10
+ ],
11
+ "stepUpRequired": true
12
+ }
@@ -0,0 +1,11 @@
1
+ {
2
+ "expectedRevision": -1,
3
+ "draft": {
4
+ "enabled": true,
5
+ "mode": "block",
6
+ "detectors": [
7
+ "unknown"
8
+ ],
9
+ "rules": []
10
+ }
11
+ }
@@ -0,0 +1,11 @@
1
+ {
2
+ "expectedRevision": 0,
3
+ "draft": {
4
+ "enabled": true,
5
+ "mode": "audit",
6
+ "detectors": [
7
+ "private_key"
8
+ ],
9
+ "rules": []
10
+ }
11
+ }
@@ -0,0 +1,5 @@
1
+ {
2
+ "target": "/data",
3
+ "path": "/file.txt",
4
+ "authorization": "short"
5
+ }
@@ -0,0 +1,4 @@
1
+ {
2
+ "target": "/data",
3
+ "path": "/file.txt"
4
+ }
@@ -0,0 +1,5 @@
1
+ {
2
+ "name": "Laptop",
3
+ "status": "active",
4
+ "managementState": "self_attested"
5
+ }
@@ -0,0 +1,5 @@
1
+ {
2
+ "name": "Pilot laptop",
3
+ "status": "active",
4
+ "managementState": "managed"
5
+ }
@@ -0,0 +1,5 @@
1
+ {
2
+ "name": "Laptop",
3
+ "platform": "windows",
4
+ "managementState": "managed"
5
+ }
@@ -0,0 +1,5 @@
1
+ {
2
+ "requestId": "11111111-1111-4111-8111-111111111111",
3
+ "destinationId": "22222222-2222-4222-8222-222222222222",
4
+ "fileName": "paste.txt"
5
+ }
@@ -0,0 +1,6 @@
1
+ {
2
+ "requestId": "11111111-1111-4111-8111-111111111111",
3
+ "destinationId": "22222222-2222-4222-8222-222222222222",
4
+ "fileName": "paste.txt",
5
+ "text": "example"
6
+ }
@@ -0,0 +1,8 @@
1
+ {
2
+ "mode": "block",
3
+ "detectors": [
4
+ "private_key"
5
+ ],
6
+ "rules": [],
7
+ "allowed": true
8
+ }
@@ -0,0 +1,8 @@
1
+ {
2
+ "mode": "audit",
3
+ "detectors": [
4
+ "private_key"
5
+ ],
6
+ "rules": [],
7
+ "requireStepUp": true
8
+ }
@@ -0,0 +1,8 @@
1
+ {
2
+ "mode": "block",
3
+ "detectors": [
4
+ "private_key"
5
+ ],
6
+ "rules": [],
7
+ "detectorVersion": "content-dlp-archive-v99"
8
+ }
@@ -0,0 +1,8 @@
1
+ {
2
+ "mode": "block",
3
+ "detectors": [
4
+ "private_key"
5
+ ],
6
+ "rules": [],
7
+ "detectorVersion": "content-dlp-archive-v2"
8
+ }
@@ -0,0 +1,10 @@
1
+ {
2
+ "mode": "block",
3
+ "detectors": [
4
+ "private_key"
5
+ ],
6
+ "rules": [],
7
+ "minimumDataLevel": "restricted",
8
+ "detectorVersion": "content-dlp-text-v1",
9
+ "networkAction": "revoke_network"
10
+ }
@@ -0,0 +1,8 @@
1
+ {
2
+ "mode": "warn",
3
+ "detectors": [
4
+ "private_key"
5
+ ],
6
+ "rules": [],
7
+ "requireStepUp": true
8
+ }
@@ -0,0 +1,5 @@
1
+ {
2
+ "expectedRevision": 1,
3
+ "resolution": "allow_forever",
4
+ "reasonCode": "business_exception"
5
+ }
@@ -0,0 +1,5 @@
1
+ {
2
+ "expectedRevision": 1,
3
+ "resolution": "reject",
4
+ "reasonCode": "insufficient_justification"
5
+ }
@@ -0,0 +1,14 @@
1
+ {
2
+ "expectedRevision": 0,
3
+ "draft": {
4
+ "name": "missing explicit enabled",
5
+ "kind": "s3",
6
+ "policy": {
7
+ "mode": "block",
8
+ "detectors": [
9
+ "private_key"
10
+ ],
11
+ "rules": []
12
+ }
13
+ }
14
+ }
@@ -0,0 +1,16 @@
1
+ {
2
+ "expectedRevision": 0,
3
+ "draft": {
4
+ "name": "Approved storage",
5
+ "kind": "s3",
6
+ "enabled": true,
7
+ "storageIntegrationId": "integration",
8
+ "policy": {
9
+ "mode": "block",
10
+ "detectors": [
11
+ "private_key"
12
+ ],
13
+ "rules": []
14
+ }
15
+ }
16
+ }
@@ -0,0 +1,7 @@
1
+ {
2
+ "requestId": "11111111-1111-4111-8111-111111111111",
3
+ "destinationId": "22222222-2222-4222-8222-222222222222",
4
+ "fileName": "example.txt",
5
+ "contentBase64": "ZXhhbXBsZQ==",
6
+ "clean": true
7
+ }
@@ -0,0 +1,6 @@
1
+ {
2
+ "requestId": "11111111-1111-4111-8111-111111111111",
3
+ "destinationId": "22222222-2222-4222-8222-222222222222",
4
+ "fileName": "example.txt",
5
+ "contentBase64": "ZXhhbXBsZQ=="
6
+ }
@@ -0,0 +1,35 @@
1
+ {
2
+ "accessProfile": "full",
3
+ "deviceStatuses": [
4
+ "active"
5
+ ],
6
+ "effect": "allow",
7
+ "enabled": true,
8
+ "modes": [
9
+ "internal_ztna",
10
+ "external_vpn_ztna"
11
+ ],
12
+ "name": "Engineering protected access",
13
+ "postureStatuses": [
14
+ "compliant"
15
+ ],
16
+ "priority": 100,
17
+ "resourceIds": [
18
+ "resource-git"
19
+ ],
20
+ "siteIds": [
21
+ "site-hq"
22
+ ],
23
+ "subjects": {
24
+ "tags": [
25
+ "employee"
26
+ ],
27
+ "teams": [
28
+ "team-engineering"
29
+ ],
30
+ "users": []
31
+ },
32
+ "deviceManagementStates": [
33
+ "self_attested"
34
+ ]
35
+ }
@@ -0,0 +1,35 @@
1
+ {
2
+ "accessProfile": "full",
3
+ "deviceStatuses": [
4
+ "active"
5
+ ],
6
+ "effect": "allow",
7
+ "enabled": true,
8
+ "modes": [
9
+ "internal_ztna",
10
+ "external_vpn_ztna"
11
+ ],
12
+ "name": "Engineering protected access",
13
+ "postureStatuses": [
14
+ "compliant"
15
+ ],
16
+ "priority": 100,
17
+ "resourceIds": [
18
+ "resource-git"
19
+ ],
20
+ "siteIds": [
21
+ "site-hq"
22
+ ],
23
+ "subjects": {
24
+ "tags": [
25
+ "employee"
26
+ ],
27
+ "teams": [
28
+ "team-engineering"
29
+ ],
30
+ "users": []
31
+ },
32
+ "deviceManagementStates": [
33
+ "managed"
34
+ ]
35
+ }
@@ -0,0 +1,4 @@
1
+ {
2
+ "deviceId": "invalid id",
3
+ "nasBindingId": "nas-1"
4
+ }
@@ -0,0 +1,4 @@
1
+ {
2
+ "deviceId": "device-1",
3
+ "nasBindingId": "invalid id"
4
+ }
@@ -0,0 +1 @@
1
+ {"deviceId":"device-1","nasBindingId":"nas-binding-1","subjectUserId":"other-user"}
@@ -0,0 +1 @@
1
+ {"deviceId":"device-1","nasBindingId":"nas-binding-1"}
@@ -0,0 +1,13 @@
1
+ {
2
+ "decision": "allow",
3
+ "path": "site_direct",
4
+ "policyVersion": 2,
5
+ "evaluatedAt": "2026-10-15T05:00:00Z",
6
+ "protected": false,
7
+ "networkLeaseRequired": false,
8
+ "resourceLeaseRequired": false,
9
+ "networkProfile": "restricted",
10
+ "reasons": [
11
+ "policy_allow:office"
12
+ ]
13
+ }
@@ -0,0 +1,13 @@
1
+ {
2
+ "decision": "allow",
3
+ "path": "site_direct",
4
+ "policyVersion": 2,
5
+ "attributeVersion": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
6
+ "protected": false,
7
+ "networkLeaseRequired": false,
8
+ "resourceLeaseRequired": false,
9
+ "networkProfile": "restricted",
10
+ "reasons": [
11
+ "policy_allow:office"
12
+ ]
13
+ }
@@ -0,0 +1,14 @@
1
+ {
2
+ "decision": "allow",
3
+ "path": "site_direct",
4
+ "policyVersion": 2,
5
+ "attributeVersion": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
6
+ "evaluatedAt": "2026-10-15T05:00:00Z",
7
+ "protected": false,
8
+ "networkLeaseRequired": false,
9
+ "resourceLeaseRequired": false,
10
+ "networkProfile": "restricted",
11
+ "reasons": [
12
+ "policy_allow:office"
13
+ ]
14
+ }
@@ -0,0 +1,9 @@
1
+ {
2
+ "runtimeRanges": [
3
+ {
4
+ "name": "Unknown source type",
5
+ "cidr": "192.0.2.0/24",
6
+ "sourceType": "unknown"
7
+ }
8
+ ]
9
+ }
@@ -2,7 +2,7 @@
2
2
  "runtimeRanges": [
3
3
  {
4
4
  "cidr": "fd00::/64",
5
- "name": "Unsupported IPv6 overlay",
5
+ "name": "IPv6 overlay",
6
6
  "sourceType": "wireguard_overlay"
7
7
  }
8
8
  ]
@@ -0,0 +1,5 @@
1
+ {
2
+ "serverNames": [],
3
+ "caCertificates": [],
4
+ "wifiSecurity": "wpa2-enterprise"
5
+ }
@@ -0,0 +1,9 @@
1
+ {
2
+ "serverNames": [
3
+ "radius.lab.example"
4
+ ],
5
+ "caCertificates": [
6
+ "-----BEGIN CERTIFICATE-----\nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\n-----END CERTIFICATE-----"
7
+ ],
8
+ "wifiSecurity": "wpa2-enterprise"
9
+ }
@@ -0,0 +1,45 @@
1
+ {
2
+ "expectedRevision": 0,
3
+ "configuration": {
4
+ "name": "Office service protection",
5
+ "enabled": true,
6
+ "siteIds": [],
7
+ "nasBindingIds": [
8
+ "nas-lab"
9
+ ],
10
+ "deviceIds": [
11
+ "endpoint-lab"
12
+ ],
13
+ "subjects": {
14
+ "users": [],
15
+ "teams": [],
16
+ "tags": []
17
+ },
18
+ "signal": "service_unavailable",
19
+ "requireHealthyForAdmission": true,
20
+ "heartbeatIntervalSeconds": 30,
21
+ "missedHeartbeats": 3,
22
+ "gracePeriodSeconds": 30,
23
+ "accountingFreshnessSeconds": 120,
24
+ "restoreHeartbeats": 3,
25
+ "restoreObservationSeconds": 60,
26
+ "autoRestore": false,
27
+ "steps": [
28
+ {
29
+ "afterSeconds": 0,
30
+ "action": "notify"
31
+ },
32
+ {
33
+ "afterSeconds": 60,
34
+ "action": "restrict",
35
+ "targetAccessProfile": "restricted"
36
+ },
37
+ {
38
+ "afterSeconds": 180,
39
+ "action": "disconnect"
40
+ }
41
+ ],
42
+ "failureAction": "disconnect",
43
+ "notificationPolicyId": "notifications-lab"
44
+ }
45
+ }
@@ -0,0 +1,54 @@
1
+ {
2
+ "expectedRevision": 0,
3
+ "configuration": {
4
+ "name": "Office service protection",
5
+ "enabled": true,
6
+ "siteIds": [
7
+ "site-lab"
8
+ ],
9
+ "nasBindingIds": [
10
+ "nas-lab"
11
+ ],
12
+ "deviceIds": [
13
+ "endpoint-lab"
14
+ ],
15
+ "subjects": {
16
+ "users": [],
17
+ "teams": [],
18
+ "tags": []
19
+ },
20
+ "signal": "service_unavailable",
21
+ "requireHealthyForAdmission": true,
22
+ "heartbeatIntervalSeconds": 30,
23
+ "missedHeartbeats": 3,
24
+ "gracePeriodSeconds": 30,
25
+ "accountingFreshnessSeconds": 120,
26
+ "restoreHeartbeats": 3,
27
+ "restoreObservationSeconds": 60,
28
+ "autoRestore": false,
29
+ "steps": [
30
+ {
31
+ "afterSeconds": 0,
32
+ "action": "disconnect"
33
+ },
34
+ {
35
+ "afterSeconds": 0,
36
+ "action": "disconnect"
37
+ },
38
+ {
39
+ "afterSeconds": 0,
40
+ "action": "disconnect"
41
+ },
42
+ {
43
+ "afterSeconds": 0,
44
+ "action": "disconnect"
45
+ },
46
+ {
47
+ "afterSeconds": 0,
48
+ "action": "disconnect"
49
+ }
50
+ ],
51
+ "failureAction": "disconnect",
52
+ "notificationPolicyId": "notifications-lab"
53
+ }
54
+ }