@pulumi/scm 1.0.0 → 1.0.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/address.d.ts +39 -3
- package/address.js +3 -3
- package/address.js.map +1 -1
- package/addressGroup.d.ts +26 -2
- package/addressGroup.js +2 -2
- package/addressGroup.js.map +1 -1
- package/aggregateInterface.d.ts +258 -0
- package/aggregateInterface.js +163 -0
- package/aggregateInterface.js.map +1 -0
- package/antiSpywareProfile.d.ts +57 -0
- package/antiSpywareProfile.js +45 -0
- package/antiSpywareProfile.js.map +1 -1
- package/antiSpywareSignature.d.ts +49 -3
- package/antiSpywareSignature.js +34 -0
- package/antiSpywareSignature.js.map +1 -1
- package/appOverrideRule.d.ts +140 -3
- package/appOverrideRule.js +95 -0
- package/appOverrideRule.js.map +1 -1
- package/application.d.ts +81 -0
- package/application.js +69 -0
- package/application.js.map +1 -1
- package/applicationFilter.d.ts +28 -0
- package/applicationFilter.js +16 -0
- package/applicationFilter.js.map +1 -1
- package/applicationGroup.d.ts +12 -0
- package/applicationGroup.js.map +1 -1
- package/authenticationPortal.d.ts +191 -0
- package/authenticationPortal.js +93 -0
- package/authenticationPortal.js.map +1 -0
- package/authenticationProfile.d.ts +66 -9
- package/authenticationProfile.js +45 -0
- package/authenticationProfile.js.map +1 -1
- package/authenticationRule.d.ts +135 -0
- package/authenticationRule.js +103 -0
- package/authenticationRule.js.map +1 -1
- package/authenticationSequence.d.ts +35 -0
- package/authenticationSequence.js +23 -0
- package/authenticationSequence.js.map +1 -1
- package/autoVpnCluster.d.ts +176 -0
- package/autoVpnCluster.js +115 -0
- package/autoVpnCluster.js.map +1 -0
- package/autoVpnSetting.d.ts +95 -0
- package/autoVpnSetting.js +80 -0
- package/autoVpnSetting.js.map +1 -0
- package/bgpAddressFamilyProfile.d.ts +38 -3
- package/bgpAddressFamilyProfile.js +23 -0
- package/bgpAddressFamilyProfile.js.map +1 -1
- package/bgpAuthProfile.d.ts +25 -0
- package/bgpAuthProfile.js +13 -0
- package/bgpAuthProfile.js.map +1 -1
- package/bgpFilteringProfile.d.ts +46 -0
- package/bgpFilteringProfile.js +34 -0
- package/bgpFilteringProfile.js.map +1 -1
- package/bgpRedistributionProfile.d.ts +39 -0
- package/bgpRedistributionProfile.js +27 -0
- package/bgpRedistributionProfile.js.map +1 -1
- package/bgpRouteMap.d.ts +65 -0
- package/bgpRouteMap.js +53 -0
- package/bgpRouteMap.js.map +1 -1
- package/bgpRouteMapRedistribution.d.ts +36 -6
- package/bgpRouteMapRedistribution.js.map +1 -1
- package/bgpRouting.d.ts +133 -0
- package/bgpRouting.js +82 -0
- package/bgpRouting.js.map +1 -0
- package/certificateProfile.d.ts +41 -0
- package/certificateProfile.js +29 -0
- package/certificateProfile.js.map +1 -1
- package/decryptionExclusion.d.ts +12 -0
- package/decryptionExclusion.js.map +1 -1
- package/decryptionProfile.d.ts +151 -0
- package/decryptionProfile.js +139 -0
- package/decryptionProfile.js.map +1 -1
- package/decryptionRule.d.ts +177 -0
- package/decryptionRule.js +145 -0
- package/decryptionRule.js.map +1 -1
- package/dhcpInterface.d.ts +24 -0
- package/dhcpInterface.js.map +1 -1
- package/dnsProxy.d.ts +18 -6
- package/dnsProxy.js.map +1 -1
- package/dnsSecurityProfile.d.ts +138 -0
- package/dnsSecurityProfile.js +126 -0
- package/dnsSecurityProfile.js.map +1 -1
- package/dosProtectionProfile.d.ts +12 -0
- package/dosProtectionProfile.js.map +1 -1
- package/dosProtectionRule.d.ts +12 -0
- package/dosProtectionRule.js.map +1 -1
- package/dynamicUserGroup.d.ts +15 -3
- package/dynamicUserGroup.js +3 -3
- package/dynamicUserGroup.js.map +1 -1
- package/ethernetInterface.d.ts +204 -11
- package/ethernetInterface.js +147 -0
- package/ethernetInterface.js.map +1 -1
- package/externalDynamicList.d.ts +92 -0
- package/externalDynamicList.js +80 -0
- package/externalDynamicList.js.map +1 -1
- package/fileBlockingProfile.d.ts +86 -0
- package/fileBlockingProfile.js +74 -0
- package/fileBlockingProfile.js.map +1 -1
- package/folder.d.ts +60 -0
- package/folder.js +60 -0
- package/folder.js.map +1 -1
- package/getAddress.d.ts +0 -21
- package/getAddress.js.map +1 -1
- package/getAddressGroup.d.ts +0 -15
- package/getAddressGroup.js.map +1 -1
- package/getAddressGroupList.d.ts +4 -4
- package/getAddressGroupList.js +4 -4
- package/getAddressList.d.ts +4 -4
- package/getAddressList.js +4 -4
- package/getAggregateInterface.d.ts +104 -0
- package/getAggregateInterface.js +68 -0
- package/getAggregateInterface.js.map +1 -0
- package/getAggregateInterfaceList.d.ts +136 -0
- package/getAggregateInterfaceList.js +66 -0
- package/getAggregateInterfaceList.js.map +1 -0
- package/getAntiSpywareProfile.d.ts +0 -21
- package/getAntiSpywareProfile.js.map +1 -1
- package/getAntiSpywareProfileList.d.ts +2 -2
- package/getAntiSpywareProfileList.js +2 -2
- package/getAntiSpywareSignature.d.ts +41 -28
- package/getAntiSpywareSignature.js +40 -0
- package/getAntiSpywareSignature.js.map +1 -1
- package/getAntiSpywareSignatureList.d.ts +2 -2
- package/getAntiSpywareSignatureList.js +2 -2
- package/getAppOverrideRule.d.ts +28 -37
- package/getAppOverrideRule.js +24 -0
- package/getAppOverrideRule.js.map +1 -1
- package/getAppOverrideRuleList.d.ts +48 -2
- package/getAppOverrideRuleList.js +36 -2
- package/getAppOverrideRuleList.js.map +1 -1
- package/getApplication.d.ts +0 -66
- package/getApplication.js.map +1 -1
- package/getApplicationFilter.d.ts +0 -57
- package/getApplicationFilter.js.map +1 -1
- package/getApplicationGroup.d.ts +0 -9
- package/getApplicationGroup.js.map +1 -1
- package/getApplicationGroupList.d.ts +4 -4
- package/getApplicationGroupList.js +4 -4
- package/getApplicationList.d.ts +2 -2
- package/getApplicationList.js +2 -2
- package/getAuthenticationProfile.d.ts +27 -25
- package/getAuthenticationProfile.js +26 -0
- package/getAuthenticationProfile.js.map +1 -1
- package/getAuthenticationProfileList.d.ts +32 -0
- package/getAuthenticationProfileList.js +32 -0
- package/getAuthenticationProfileList.js.map +1 -1
- package/getAuthenticationRule.d.ts +29 -51
- package/getAuthenticationRule.js +26 -0
- package/getAuthenticationRule.js.map +1 -1
- package/getAuthenticationRuleList.d.ts +50 -2
- package/getAuthenticationRuleList.js +38 -2
- package/getAuthenticationRuleList.js.map +1 -1
- package/getAuthenticationSequence.d.ts +26 -9
- package/getAuthenticationSequence.js +26 -0
- package/getAuthenticationSequence.js.map +1 -1
- package/getAuthenticationSequenceList.d.ts +32 -0
- package/getAuthenticationSequenceList.js +32 -0
- package/getAuthenticationSequenceList.js.map +1 -1
- package/getAutoVpnCluster.d.ts +112 -0
- package/getAutoVpnCluster.js +68 -0
- package/getAutoVpnCluster.js.map +1 -0
- package/{getAggregateEthernetInterfaceList.d.ts → getAutoVpnClusterList.d.ts} +35 -9
- package/getAutoVpnClusterList.js +66 -0
- package/getAutoVpnClusterList.js.map +1 -0
- package/getAutoVpnSetting.d.ts +52 -0
- package/getAutoVpnSetting.js +44 -0
- package/getAutoVpnSetting.js.map +1 -0
- package/getBgpAddressFamilyProfile.d.ts +36 -9
- package/getBgpAddressFamilyProfile.js +36 -0
- package/getBgpAddressFamilyProfile.js.map +1 -1
- package/getBgpAuthProfile.d.ts +36 -12
- package/getBgpAuthProfile.js +36 -0
- package/getBgpAuthProfile.js.map +1 -1
- package/getBgpAuthProfileList.d.ts +26 -0
- package/getBgpAuthProfileList.js +26 -0
- package/getBgpAuthProfileList.js.map +1 -1
- package/getBgpFilteringProfile.d.ts +0 -9
- package/getBgpFilteringProfile.js.map +1 -1
- package/getBgpRedistributionProfile.d.ts +36 -9
- package/getBgpRedistributionProfile.js +36 -0
- package/getBgpRedistributionProfile.js.map +1 -1
- package/getBgpRedistributionProfileList.d.ts +26 -0
- package/getBgpRedistributionProfileList.js +26 -0
- package/getBgpRedistributionProfileList.js.map +1 -1
- package/getBgpRouteMap.d.ts +36 -9
- package/getBgpRouteMap.js +36 -0
- package/getBgpRouteMap.js.map +1 -1
- package/getBgpRouteMapList.d.ts +26 -0
- package/getBgpRouteMapList.js +26 -0
- package/getBgpRouteMapList.js.map +1 -1
- package/getBgpRouteMapRedistribution.d.ts +6 -24
- package/getBgpRouteMapRedistribution.js.map +1 -1
- package/getBgpRouting.d.ts +64 -0
- package/getBgpRouting.js +44 -0
- package/getBgpRouting.js.map +1 -0
- package/getCertificateProfile.d.ts +0 -21
- package/getCertificateProfile.js.map +1 -1
- package/getCertificateProfileList.d.ts +2 -2
- package/getCertificateProfileList.js +2 -2
- package/getDecryptionExclusion.d.ts +0 -6
- package/getDecryptionExclusion.js.map +1 -1
- package/getDecryptionProfile.d.ts +40 -18
- package/getDecryptionProfile.js +40 -0
- package/getDecryptionProfile.js.map +1 -1
- package/getDecryptionProfileList.d.ts +32 -0
- package/getDecryptionProfileList.js +32 -0
- package/getDecryptionProfileList.js.map +1 -1
- package/getDecryptionRule.d.ts +29 -51
- package/getDecryptionRule.js +26 -0
- package/getDecryptionRule.js.map +1 -1
- package/getDecryptionRuleList.d.ts +48 -2
- package/getDecryptionRuleList.js +36 -2
- package/getDecryptionRuleList.js.map +1 -1
- package/getDhcpInterface.d.ts +0 -12
- package/getDhcpInterface.js.map +1 -1
- package/getDnsProxy.d.ts +0 -24
- package/getDnsProxy.js.map +1 -1
- package/getDnsSecurityProfile.d.ts +40 -6
- package/getDnsSecurityProfile.js +40 -0
- package/getDnsSecurityProfile.js.map +1 -1
- package/getDnsSecurityProfileList.d.ts +32 -0
- package/getDnsSecurityProfileList.js +32 -0
- package/getDnsSecurityProfileList.js.map +1 -1
- package/getDosProtectionProfile.d.ts +0 -15
- package/getDosProtectionProfile.js.map +1 -1
- package/getDosProtectionRule.d.ts +0 -39
- package/getDosProtectionRule.js.map +1 -1
- package/getDynamicUserGroup.d.ts +0 -12
- package/getDynamicUserGroup.js.map +1 -1
- package/getDynamicUserGroupList.d.ts +4 -4
- package/getDynamicUserGroupList.js +4 -4
- package/getEthernetInterface.d.ts +40 -37
- package/getEthernetInterface.js +38 -0
- package/getEthernetInterface.js.map +1 -1
- package/getEthernetInterfaceList.d.ts +26 -0
- package/getEthernetInterfaceList.js +26 -0
- package/getEthernetInterfaceList.js.map +1 -1
- package/getExternalDynamicList.d.ts +0 -12
- package/getExternalDynamicList.js.map +1 -1
- package/getExternalDynamicListList.d.ts +4 -4
- package/getExternalDynamicListList.js +4 -4
- package/getFileBlockingProfile.d.ts +40 -9
- package/getFileBlockingProfile.js +40 -0
- package/getFileBlockingProfile.js.map +1 -1
- package/getFileBlockingProfileList.d.ts +32 -0
- package/getFileBlockingProfileList.js +32 -0
- package/getFileBlockingProfileList.js.map +1 -1
- package/getFolder.d.ts +36 -0
- package/getFolder.js +36 -0
- package/getFolder.js.map +1 -1
- package/getHipObject.d.ts +0 -27
- package/getHipObject.js.map +1 -1
- package/getHipObjectList.d.ts +4 -4
- package/getHipObjectList.js +4 -4
- package/getHipProfile.d.ts +0 -9
- package/getHipProfile.js.map +1 -1
- package/getHipProfileList.d.ts +4 -4
- package/getHipProfileList.js +4 -4
- package/getHttpHeaderProfile.d.ts +0 -9
- package/getHttpHeaderProfile.js.map +1 -1
- package/getHttpServerProfile.d.ts +0 -15
- package/getHttpServerProfile.js.map +1 -1
- package/getIkeCryptoProfile.d.ts +0 -18
- package/getIkeCryptoProfile.js.map +1 -1
- package/getIkeGateway.d.ts +0 -27
- package/getIkeGateway.js.map +1 -1
- package/getInterfaceManagementProfile.d.ts +29 -41
- package/getInterfaceManagementProfile.js +26 -0
- package/getInterfaceManagementProfile.js.map +1 -1
- package/getInterfaceManagementProfileList.d.ts +42 -0
- package/getInterfaceManagementProfileList.js +42 -0
- package/getInterfaceManagementProfileList.js.map +1 -1
- package/getIpsecCryptoProfile.d.ts +0 -21
- package/getIpsecCryptoProfile.js.map +1 -1
- package/getIpsecTunnel.d.ts +0 -15
- package/getIpsecTunnel.js.map +1 -1
- package/getKerberosServerProfile.d.ts +0 -9
- package/getKerberosServerProfile.js.map +1 -1
- package/getLayer2Subinterface.d.ts +41 -13
- package/getLayer2Subinterface.js +40 -0
- package/getLayer2Subinterface.js.map +1 -1
- package/getLayer2SubinterfaceList.d.ts +26 -0
- package/getLayer2SubinterfaceList.js +26 -0
- package/getLayer2SubinterfaceList.js.map +1 -1
- package/getLayer3Subinterface.d.ts +43 -25
- package/getLayer3Subinterface.js +42 -0
- package/getLayer3Subinterface.js.map +1 -1
- package/getLayer3SubinterfaceList.d.ts +26 -0
- package/getLayer3SubinterfaceList.js +26 -0
- package/getLayer3SubinterfaceList.js.map +1 -1
- package/getLdapServerProfile.d.ts +0 -27
- package/getLdapServerProfile.js.map +1 -1
- package/getLinkTag.d.ts +0 -6
- package/getLinkTag.js.map +1 -1
- package/getLocalUser.d.ts +0 -15
- package/getLocalUser.js.map +1 -1
- package/getLocalUserGroup.d.ts +0 -9
- package/getLocalUserGroup.js.map +1 -1
- package/getLogForwardingProfile.d.ts +0 -9
- package/getLogForwardingProfile.js.map +1 -1
- package/getLogicalRouter.d.ts +38 -12
- package/getLogicalRouter.js +38 -0
- package/getLogicalRouter.js.map +1 -1
- package/getLogicalRouterList.d.ts +40 -0
- package/getLogicalRouterList.js +30 -0
- package/getLogicalRouterList.js.map +1 -1
- package/getLoopbackInterface.d.ts +45 -21
- package/getLoopbackInterface.js +38 -0
- package/getLoopbackInterface.js.map +1 -1
- package/getLoopbackInterfaceList.d.ts +26 -0
- package/getLoopbackInterfaceList.js +26 -0
- package/getLoopbackInterfaceList.js.map +1 -1
- package/getNatRule.d.ts +46 -14
- package/getNatRule.js +36 -0
- package/getNatRule.js.map +1 -1
- package/getNatRuleList.d.ts +52 -2
- package/getNatRuleList.js +40 -2
- package/getNatRuleList.js.map +1 -1
- package/getOspfAuthProfile.d.ts +0 -15
- package/getOspfAuthProfile.js.map +1 -1
- package/getPbfRule.d.ts +34 -27
- package/getPbfRule.js +34 -0
- package/getPbfRule.js.map +1 -1
- package/getPbfRuleList.d.ts +34 -0
- package/getPbfRuleList.js +34 -0
- package/getPbfRuleList.js.map +1 -1
- package/getProfileGroup.d.ts +0 -27
- package/getProfileGroup.js.map +1 -1
- package/getQosPolicyRule.d.ts +27 -12
- package/getQosPolicyRule.js +24 -0
- package/getQosPolicyRule.js.map +1 -1
- package/getQosPolicyRuleList.d.ts +48 -2
- package/getQosPolicyRuleList.js +36 -2
- package/getQosPolicyRuleList.js.map +1 -1
- package/getQosProfile.d.ts +0 -6
- package/getQosProfile.js.map +1 -1
- package/getRadiusServerProfile.d.ts +24 -18
- package/getRadiusServerProfile.js +24 -0
- package/getRadiusServerProfile.js.map +1 -1
- package/getRegion.d.ts +0 -9
- package/getRegion.js.map +1 -1
- package/getRouteAccessList.d.ts +0 -9
- package/getRouteAccessList.js.map +1 -1
- package/getRouteCommunityList.d.ts +0 -9
- package/getRouteCommunityList.js.map +1 -1
- package/getRoutePathAccessList.d.ts +0 -6
- package/getRoutePathAccessList.js.map +1 -1
- package/getRoutePrefixList.d.ts +1 -10
- package/getRoutePrefixList.js.map +1 -1
- package/getSamlServerProfile.d.ts +0 -27
- package/getSamlServerProfile.js.map +1 -1
- package/getScepProfile.d.ts +0 -36
- package/getScepProfile.js.map +1 -1
- package/getSchedule.d.ts +0 -9
- package/getSchedule.js.map +1 -1
- package/getSdwanErrorCorrectionProfile.d.ts +0 -9
- package/getSdwanErrorCorrectionProfile.js.map +1 -1
- package/getSdwanPathQualityProfile.d.ts +0 -9
- package/getSdwanPathQualityProfile.js.map +1 -1
- package/getSdwanRule.d.ts +0 -45
- package/getSdwanRule.js.map +1 -1
- package/getSdwanSaasQualityProfile.d.ts +0 -9
- package/getSdwanSaasQualityProfile.js.map +1 -1
- package/getSdwanTrafficDistributionProfile.d.ts +0 -12
- package/getSdwanTrafficDistributionProfile.js.map +1 -1
- package/getSecurityRule.d.ts +42 -0
- package/getSecurityRule.js +30 -0
- package/getSecurityRule.js.map +1 -1
- package/getSecurityRuleList.d.ts +46 -2
- package/getSecurityRuleList.js +34 -2
- package/getSecurityRuleList.js.map +1 -1
- package/getService.d.ts +0 -12
- package/getService.js.map +1 -1
- package/getServiceConnection.d.ts +31 -1
- package/getServiceConnection.js +30 -0
- package/getServiceConnection.js.map +1 -1
- package/getServiceConnectionGroup.d.ts +26 -0
- package/getServiceConnectionGroup.js +26 -0
- package/getServiceConnectionGroup.js.map +1 -1
- package/getServiceGroup.d.ts +0 -12
- package/getServiceGroup.js.map +1 -1
- package/getServiceGroupList.d.ts +2 -2
- package/getServiceGroupList.js +2 -2
- package/getServiceList.d.ts +4 -4
- package/getServiceList.js +4 -4
- package/getSite.d.ts +30 -2
- package/getSite.js +24 -0
- package/getSite.js.map +1 -1
- package/getSiteList.d.ts +28 -0
- package/getSiteList.js +28 -0
- package/getSiteList.js.map +1 -1
- package/getSnippet.d.ts +36 -0
- package/getSnippet.js +36 -0
- package/getSnippet.js.map +1 -1
- package/getSnippetList.d.ts +24 -0
- package/getSnippetList.js +24 -0
- package/getSnippetList.js.map +1 -1
- package/getSyslogServerProfile.d.ts +0 -12
- package/getSyslogServerProfile.js.map +1 -1
- package/getTacacsServerProfile.d.ts +0 -18
- package/getTacacsServerProfile.js.map +1 -1
- package/getTag.d.ts +0 -6
- package/getTag.js.map +1 -1
- package/getTagList.d.ts +2 -2
- package/getTagList.js +2 -2
- package/getTlsServiceProfile.d.ts +0 -9
- package/getTlsServiceProfile.js.map +1 -1
- package/getTunnelInterface.d.ts +41 -18
- package/getTunnelInterface.js +38 -0
- package/getTunnelInterface.js.map +1 -1
- package/getTunnelInterfaceList.d.ts +26 -0
- package/getTunnelInterfaceList.js +26 -0
- package/getTunnelInterfaceList.js.map +1 -1
- package/getUrlAccessProfile.d.ts +0 -30
- package/getUrlAccessProfile.js.map +1 -1
- package/getUrlAccessProfileList.d.ts +2 -2
- package/getUrlAccessProfileList.js +2 -2
- package/getUrlCategory.d.ts +0 -12
- package/getUrlCategory.js.map +1 -1
- package/getUrlCategoryList.d.ts +4 -4
- package/getUrlCategoryList.js +4 -4
- package/getVariable.d.ts +0 -15
- package/getVariable.js.map +1 -1
- package/getVlanInterface.d.ts +43 -24
- package/getVlanInterface.js +40 -0
- package/getVlanInterface.js.map +1 -1
- package/getVlanInterfaceList.d.ts +26 -0
- package/getVlanInterfaceList.js +26 -0
- package/getVlanInterfaceList.js.map +1 -1
- package/getVulnerabilityProtectionProfile.d.ts +0 -12
- package/getVulnerabilityProtectionProfile.js.map +1 -1
- package/getVulnerabilityProtectionProfileList.d.ts +2 -2
- package/getVulnerabilityProtectionProfileList.js +2 -2
- package/getVulnerabilityProtectionSignature.d.ts +41 -28
- package/getVulnerabilityProtectionSignature.js +40 -0
- package/getVulnerabilityProtectionSignature.js.map +1 -1
- package/getVulnerabilityProtectionSignatureList.d.ts +32 -0
- package/getVulnerabilityProtectionSignatureList.js +32 -0
- package/getVulnerabilityProtectionSignatureList.js.map +1 -1
- package/getWildfireAntiVirusProfile.d.ts +0 -18
- package/getWildfireAntiVirusProfile.js.map +1 -1
- package/getZone.d.ts +44 -27
- package/getZone.js +44 -0
- package/getZone.js.map +1 -1
- package/getZoneList.d.ts +26 -0
- package/getZoneList.js +26 -0
- package/getZoneList.js.map +1 -1
- package/hipObject.d.ts +168 -0
- package/hipObject.js +156 -0
- package/hipObject.js.map +1 -1
- package/hipProfile.d.ts +12 -0
- package/hipProfile.js.map +1 -1
- package/httpHeaderProfile.d.ts +12 -0
- package/httpHeaderProfile.js.map +1 -1
- package/httpServerProfile.d.ts +12 -0
- package/httpServerProfile.js.map +1 -1
- package/ikeCryptoProfile.d.ts +12 -0
- package/ikeCryptoProfile.js.map +1 -1
- package/ikeGateway.d.ts +61 -0
- package/ikeGateway.js +49 -0
- package/ikeGateway.js.map +1 -1
- package/index.d.ts +36 -9
- package/index.js +58 -21
- package/index.js.map +1 -1
- package/interfaceManagementProfile.d.ts +68 -24
- package/interfaceManagementProfile.js +30 -0
- package/interfaceManagementProfile.js.map +1 -1
- package/ipsecCryptoProfile.d.ts +52 -0
- package/ipsecCryptoProfile.js +28 -0
- package/ipsecCryptoProfile.js.map +1 -1
- package/ipsecTunnel.d.ts +78 -0
- package/ipsecTunnel.js +66 -0
- package/ipsecTunnel.js.map +1 -1
- package/kerberosServerProfile.d.ts +12 -0
- package/kerberosServerProfile.js.map +1 -1
- package/layer2Subinterface.d.ts +48 -7
- package/layer2Subinterface.js +32 -0
- package/layer2Subinterface.js.map +1 -1
- package/layer3Subinterface.d.ts +94 -11
- package/layer3Subinterface.js +59 -0
- package/layer3Subinterface.js.map +1 -1
- package/ldapServerProfile.d.ts +12 -0
- package/ldapServerProfile.js.map +1 -1
- package/linkTag.d.ts +12 -0
- package/linkTag.js.map +1 -1
- package/localUser.d.ts +12 -0
- package/localUser.js.map +1 -1
- package/localUserGroup.d.ts +12 -0
- package/localUserGroup.js.map +1 -1
- package/logForwardingProfile.d.ts +12 -0
- package/logForwardingProfile.js.map +1 -1
- package/logicalRouter.d.ts +162 -0
- package/logicalRouter.js +150 -0
- package/logicalRouter.js.map +1 -1
- package/loopbackInterface.d.ts +70 -15
- package/loopbackInterface.js +35 -2
- package/loopbackInterface.js.map +1 -1
- package/mfaServer.d.ts +12 -0
- package/mfaServer.js.map +1 -1
- package/natRule.d.ts +135 -42
- package/natRule.js +121 -8
- package/natRule.js.map +1 -1
- package/ospfAuthProfile.d.ts +24 -0
- package/ospfAuthProfile.js.map +1 -1
- package/package.json +2 -2
- package/pbfRule.d.ts +101 -0
- package/pbfRule.js +89 -0
- package/pbfRule.js.map +1 -1
- package/profileGroup.d.ts +12 -0
- package/profileGroup.js.map +1 -1
- package/qosPolicyRule.d.ts +107 -0
- package/qosPolicyRule.js +75 -0
- package/qosPolicyRule.js.map +1 -1
- package/qosProfile.d.ts +12 -0
- package/qosProfile.js.map +1 -1
- package/radiusServerProfile.d.ts +50 -0
- package/radiusServerProfile.js +38 -0
- package/radiusServerProfile.js.map +1 -1
- package/region.d.ts +12 -0
- package/region.js.map +1 -1
- package/remoteNetwork.d.ts +81 -0
- package/remoteNetwork.js +81 -0
- package/remoteNetwork.js.map +1 -1
- package/routeAccessList.d.ts +12 -0
- package/routeAccessList.js.map +1 -1
- package/routeCommunityList.d.ts +12 -0
- package/routeCommunityList.js.map +1 -1
- package/routePathAccessList.d.ts +12 -0
- package/routePathAccessList.js.map +1 -1
- package/routePrefixList.d.ts +49 -12
- package/routePrefixList.js +27 -2
- package/routePrefixList.js.map +1 -1
- package/samlServerProfile.d.ts +12 -0
- package/samlServerProfile.js.map +1 -1
- package/scepProfile.d.ts +12 -0
- package/scepProfile.js.map +1 -1
- package/schedule.d.ts +12 -0
- package/schedule.js.map +1 -1
- package/sdwanErrorCorrectionProfile.d.ts +12 -0
- package/sdwanErrorCorrectionProfile.js.map +1 -1
- package/sdwanPathQualityProfile.d.ts +12 -0
- package/sdwanPathQualityProfile.js.map +1 -1
- package/sdwanRule.d.ts +12 -0
- package/sdwanRule.js.map +1 -1
- package/sdwanSaasQualityProfile.d.ts +12 -0
- package/sdwanSaasQualityProfile.js.map +1 -1
- package/sdwanTrafficDistributionProfile.d.ts +16 -4
- package/sdwanTrafficDistributionProfile.js.map +1 -1
- package/securityRule.d.ts +207 -0
- package/securityRule.js +187 -0
- package/securityRule.js.map +1 -1
- package/service.d.ts +12 -0
- package/service.js.map +1 -1
- package/serviceConnection.d.ts +82 -3
- package/serviceConnection.js +81 -2
- package/serviceConnection.js.map +1 -1
- package/serviceConnectionGroup.d.ts +100 -0
- package/serviceConnectionGroup.js +100 -0
- package/serviceConnectionGroup.js.map +1 -1
- package/serviceGroup.d.ts +14 -2
- package/serviceGroup.js +2 -2
- package/serviceGroup.js.map +1 -1
- package/site.d.ts +298 -0
- package/site.js +177 -0
- package/site.js.map +1 -0
- package/snippet.d.ts +24 -5
- package/snippet.js +24 -1
- package/snippet.js.map +1 -1
- package/syslogServerProfile.d.ts +12 -0
- package/syslogServerProfile.js.map +1 -1
- package/tacacsServerProfile.d.ts +12 -0
- package/tacacsServerProfile.js.map +1 -1
- package/tag.d.ts +15 -3
- package/tag.js +3 -3
- package/tag.js.map +1 -1
- package/tlsServiceProfile.d.ts +12 -0
- package/tlsServiceProfile.js.map +1 -1
- package/tunnelInterface.d.ts +54 -12
- package/tunnelInterface.js +32 -2
- package/tunnelInterface.js.map +1 -1
- package/types/input.d.ts +1621 -471
- package/types/output.d.ts +5592 -2091
- package/urlAccessProfile.d.ts +12 -0
- package/urlAccessProfile.js.map +1 -1
- package/urlCategory.d.ts +12 -0
- package/urlCategory.js.map +1 -1
- package/variable.d.ts +13 -5
- package/variable.js +1 -1
- package/variable.js.map +1 -1
- package/vlanInterface.d.ts +64 -20
- package/vlanInterface.js +20 -0
- package/vlanInterface.js.map +1 -1
- package/vulnerabilityProtectionProfile.d.ts +263 -0
- package/vulnerabilityProtectionProfile.js +251 -0
- package/vulnerabilityProtectionProfile.js.map +1 -1
- package/vulnerabilityProtectionSignature.d.ts +214 -10
- package/vulnerabilityProtectionSignature.js +204 -0
- package/vulnerabilityProtectionSignature.js.map +1 -1
- package/wildfireAntiVirusProfile.d.ts +12 -0
- package/wildfireAntiVirusProfile.js.map +1 -1
- package/zone.d.ts +83 -0
- package/zone.js +71 -0
- package/zone.js.map +1 -1
- package/zoneProtectionProfile.d.ts +18 -0
- package/zoneProtectionProfile.js.map +1 -1
- package/aggregateEthernetInterface.d.ts +0 -139
- package/aggregateEthernetInterface.js +0 -68
- package/aggregateEthernetInterface.js.map +0 -1
- package/getAggregateEthernetInterface.d.ts +0 -78
- package/getAggregateEthernetInterface.js +0 -30
- package/getAggregateEthernetInterface.js.map +0 -1
- package/getAggregateEthernetInterfaceList.js +0 -40
- package/getAggregateEthernetInterfaceList.js.map +0 -1
|
@@ -5,6 +5,257 @@ import * as outputs from "./types/output";
|
|
|
5
5
|
* VulnerabilityProtectionProfile resource
|
|
6
6
|
*
|
|
7
7
|
* ## Example Usage
|
|
8
|
+
*
|
|
9
|
+
* ```typescript
|
|
10
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
11
|
+
* import * as scm from "@pulumi/scm";
|
|
12
|
+
*
|
|
13
|
+
* const scmVpProfile1Test = new scm.VulnerabilityProtectionProfile("scm_vp_profile_1_test", {
|
|
14
|
+
* folder: "Shared",
|
|
15
|
+
* name: "vp-profile-1-test",
|
|
16
|
+
* description: "basic profile",
|
|
17
|
+
* });
|
|
18
|
+
* const scmVpProfile2Test = new scm.VulnerabilityProtectionProfile("scm_vp_profile_2_test", {
|
|
19
|
+
* folder: "Shared",
|
|
20
|
+
* name: "vp-profile-2-test",
|
|
21
|
+
* description: "rules: allow, alert, and drop",
|
|
22
|
+
* rules: [
|
|
23
|
+
* {
|
|
24
|
+
* name: "Rule-Informational-Allow",
|
|
25
|
+
* action: {
|
|
26
|
+
* allow: {},
|
|
27
|
+
* },
|
|
28
|
+
* packetCapture: "extended-capture",
|
|
29
|
+
* severity: ["informational"],
|
|
30
|
+
* category: "scan",
|
|
31
|
+
* cve: ["N/A"],
|
|
32
|
+
* host: "client",
|
|
33
|
+
* vendorId: ["Match Any Vendor"],
|
|
34
|
+
* threatName: "30000",
|
|
35
|
+
* },
|
|
36
|
+
* {
|
|
37
|
+
* name: "Rule-Medium-Alert",
|
|
38
|
+
* action: {
|
|
39
|
+
* alert: {},
|
|
40
|
+
* },
|
|
41
|
+
* packetCapture: "single-packet",
|
|
42
|
+
* severity: ["medium"],
|
|
43
|
+
* category: "info-leak",
|
|
44
|
+
* cve: ["Match Any CVE"],
|
|
45
|
+
* host: "server",
|
|
46
|
+
* vendorId: ["MS08-037"],
|
|
47
|
+
* threatName: "OpenSSL Threat",
|
|
48
|
+
* },
|
|
49
|
+
* {
|
|
50
|
+
* name: "Rule-Critical-High-Drop",
|
|
51
|
+
* action: {
|
|
52
|
+
* drop: {},
|
|
53
|
+
* },
|
|
54
|
+
* packetCapture: "disable",
|
|
55
|
+
* severity: [
|
|
56
|
+
* "critical",
|
|
57
|
+
* "high",
|
|
58
|
+
* ],
|
|
59
|
+
* category: "overflow",
|
|
60
|
+
* cve: ["CVE-2008-1147"],
|
|
61
|
+
* host: "any",
|
|
62
|
+
* vendorId: ["Match Any Vendor"],
|
|
63
|
+
* threatName: "any",
|
|
64
|
+
* },
|
|
65
|
+
* ],
|
|
66
|
+
* });
|
|
67
|
+
* const scmVpProfile3Test = new scm.VulnerabilityProtectionProfile("scm_vp_profile_3_test", {
|
|
68
|
+
* folder: "Shared",
|
|
69
|
+
* name: "vp-profile-3-test",
|
|
70
|
+
* description: "rules: reset client, reset server, reset both",
|
|
71
|
+
* rules: [
|
|
72
|
+
* {
|
|
73
|
+
* name: "Rule-Low-Reset_Client",
|
|
74
|
+
* action: {
|
|
75
|
+
* resetClient: {},
|
|
76
|
+
* },
|
|
77
|
+
* severity: ["low"],
|
|
78
|
+
* category: "protocol-anomaly",
|
|
79
|
+
* cve: [
|
|
80
|
+
* "CVE-2010-3332",
|
|
81
|
+
* "CVE-2019-14537",
|
|
82
|
+
* ],
|
|
83
|
+
* host: "client",
|
|
84
|
+
* vendorId: [
|
|
85
|
+
* "MSO5-032",
|
|
86
|
+
* "IZ18434",
|
|
87
|
+
* ],
|
|
88
|
+
* threatName: "30261",
|
|
89
|
+
* },
|
|
90
|
+
* {
|
|
91
|
+
* name: "Rule-Info-Low-Reset_Server",
|
|
92
|
+
* action: {
|
|
93
|
+
* resetServer: {},
|
|
94
|
+
* },
|
|
95
|
+
* packetCapture: "disable",
|
|
96
|
+
* severity: [
|
|
97
|
+
* "informational",
|
|
98
|
+
* "low",
|
|
99
|
+
* ],
|
|
100
|
+
* category: "insecure-credentials",
|
|
101
|
+
* cve: ["N/A"],
|
|
102
|
+
* host: "server",
|
|
103
|
+
* vendorId: ["Match Any Vendor"],
|
|
104
|
+
* threatName: "Zone Bypass",
|
|
105
|
+
* },
|
|
106
|
+
* {
|
|
107
|
+
* name: "Rule-Medium-Reset_Both",
|
|
108
|
+
* action: {
|
|
109
|
+
* resetBoth: {},
|
|
110
|
+
* },
|
|
111
|
+
* packetCapture: "single-packet",
|
|
112
|
+
* severity: ["medium"],
|
|
113
|
+
* category: "brute-force",
|
|
114
|
+
* cve: [
|
|
115
|
+
* "CVE-2012-0175",
|
|
116
|
+
* "CVE-2024-6387",
|
|
117
|
+
* "CVE-2017-14473",
|
|
118
|
+
* ],
|
|
119
|
+
* host: "any",
|
|
120
|
+
* vendorId: [
|
|
121
|
+
* "CORE-1009-0227",
|
|
122
|
+
* "SHIRO-550",
|
|
123
|
+
* "AST-2012-008",
|
|
124
|
+
* ],
|
|
125
|
+
* threatName: "any",
|
|
126
|
+
* },
|
|
127
|
+
* ],
|
|
128
|
+
* });
|
|
129
|
+
* const scmVpProfile4Test = new scm.VulnerabilityProtectionProfile("scm_vp_profile_4_test", {
|
|
130
|
+
* folder: "Shared",
|
|
131
|
+
* name: "vp-profile-4-test",
|
|
132
|
+
* description: "rules: block ip",
|
|
133
|
+
* rules: [
|
|
134
|
+
* {
|
|
135
|
+
* name: "Rule-High-Critical-Block_IP",
|
|
136
|
+
* action: {
|
|
137
|
+
* blockIp: {
|
|
138
|
+
* duration: 3600,
|
|
139
|
+
* trackBy: "source-and-destination",
|
|
140
|
+
* },
|
|
141
|
+
* },
|
|
142
|
+
* severity: [
|
|
143
|
+
* "high",
|
|
144
|
+
* "critical",
|
|
145
|
+
* ],
|
|
146
|
+
* category: "insecure-credentials",
|
|
147
|
+
* cve: ["N/A"],
|
|
148
|
+
* host: "server",
|
|
149
|
+
* vendorId: ["Match Any Vendor"],
|
|
150
|
+
* threatName: "Zone Credentials",
|
|
151
|
+
* },
|
|
152
|
+
* {
|
|
153
|
+
* name: "Rule-Low-Medium-Block_IP",
|
|
154
|
+
* action: {
|
|
155
|
+
* blockIp: {
|
|
156
|
+
* duration: 2400,
|
|
157
|
+
* trackBy: "source-and-destination",
|
|
158
|
+
* },
|
|
159
|
+
* },
|
|
160
|
+
* severity: [
|
|
161
|
+
* "low",
|
|
162
|
+
* "medium",
|
|
163
|
+
* ],
|
|
164
|
+
* category: "command-execution",
|
|
165
|
+
* cve: ["N/A"],
|
|
166
|
+
* host: "server",
|
|
167
|
+
* vendorId: ["Match Any Vendor"],
|
|
168
|
+
* threatName: "any",
|
|
169
|
+
* },
|
|
170
|
+
* ],
|
|
171
|
+
* });
|
|
172
|
+
* const scmVpProfile5Test = new scm.VulnerabilityProtectionProfile("scm_vp_profile_5_test", {
|
|
173
|
+
* folder: "Shared",
|
|
174
|
+
* name: "vp-profile-5-test",
|
|
175
|
+
* description: "override",
|
|
176
|
+
* threatExceptions: [{
|
|
177
|
+
* name: "12345",
|
|
178
|
+
* action: {
|
|
179
|
+
* allow: {},
|
|
180
|
+
* },
|
|
181
|
+
* severity: ["informational"],
|
|
182
|
+
* category: "command-execution",
|
|
183
|
+
* exemptIp: [{
|
|
184
|
+
* name: "192.14.3.100",
|
|
185
|
+
* }],
|
|
186
|
+
* timeAttribute: {
|
|
187
|
+
* interval: 3600,
|
|
188
|
+
* threshold: 24000,
|
|
189
|
+
* trackBy: "source",
|
|
190
|
+
* },
|
|
191
|
+
* }],
|
|
192
|
+
* });
|
|
193
|
+
* const scmVpProfile6Test = new scm.VulnerabilityProtectionProfile("scm_vp_profile_6_test", {
|
|
194
|
+
* folder: "Shared",
|
|
195
|
+
* name: "vp-profile-6-test",
|
|
196
|
+
* description: "mixed",
|
|
197
|
+
* rules: [
|
|
198
|
+
* {
|
|
199
|
+
* name: "Rule-Info-Rest_Both",
|
|
200
|
+
* action: {
|
|
201
|
+
* allow: {},
|
|
202
|
+
* },
|
|
203
|
+
* packetCapture: "disable",
|
|
204
|
+
* severity: ["informational"],
|
|
205
|
+
* category: "exploit-kit",
|
|
206
|
+
* cve: ["N/A"],
|
|
207
|
+
* host: "client",
|
|
208
|
+
* vendorId: ["Match Any Vendor"],
|
|
209
|
+
* threatName: "30000",
|
|
210
|
+
* },
|
|
211
|
+
* {
|
|
212
|
+
* name: "Rule-Low-Alert",
|
|
213
|
+
* action: {
|
|
214
|
+
* alert: {},
|
|
215
|
+
* },
|
|
216
|
+
* packetCapture: "single-packet",
|
|
217
|
+
* severity: ["low"],
|
|
218
|
+
* category: "dos",
|
|
219
|
+
* cve: ["CVE-2020-8790"],
|
|
220
|
+
* host: "server",
|
|
221
|
+
* vendorId: ["MS09-036"],
|
|
222
|
+
* threatName: "Memory Corruption",
|
|
223
|
+
* },
|
|
224
|
+
* {
|
|
225
|
+
* name: "Rule-Medium-Drop",
|
|
226
|
+
* action: {
|
|
227
|
+
* drop: {},
|
|
228
|
+
* },
|
|
229
|
+
* packetCapture: "disable",
|
|
230
|
+
* severity: [
|
|
231
|
+
* "medium",
|
|
232
|
+
* "high",
|
|
233
|
+
* ],
|
|
234
|
+
* category: "insecure-credentials",
|
|
235
|
+
* cve: ["N/A"],
|
|
236
|
+
* host: "any",
|
|
237
|
+
* vendorId: ["Match Any Vendor"],
|
|
238
|
+
* threatName: "any",
|
|
239
|
+
* },
|
|
240
|
+
* ],
|
|
241
|
+
* threatExceptions: [{
|
|
242
|
+
* name: "12345",
|
|
243
|
+
* action: {
|
|
244
|
+
* drop: {},
|
|
245
|
+
* },
|
|
246
|
+
* packetCapture: "single-packet",
|
|
247
|
+
* host: "any",
|
|
248
|
+
* category: "scan",
|
|
249
|
+
* cve: [
|
|
250
|
+
* "CVE-2011-2663",
|
|
251
|
+
* "CVE-2016-9949",
|
|
252
|
+
* ],
|
|
253
|
+
* exemptIp: [{
|
|
254
|
+
* name: "192.14.3.100",
|
|
255
|
+
* }],
|
|
256
|
+
* }],
|
|
257
|
+
* });
|
|
258
|
+
* ```
|
|
8
259
|
*/
|
|
9
260
|
export declare class VulnerabilityProtectionProfile extends pulumi.CustomResource {
|
|
10
261
|
/**
|
|
@@ -32,6 +283,8 @@ export declare class VulnerabilityProtectionProfile extends pulumi.CustomResourc
|
|
|
32
283
|
readonly device: pulumi.Output<string | undefined>;
|
|
33
284
|
/**
|
|
34
285
|
* The folder in which the resource is defined
|
|
286
|
+
*
|
|
287
|
+
* > ℹ️ **Note:** You must specify exactly one of `device`, `folder`, and `snippet`.
|
|
35
288
|
*/
|
|
36
289
|
readonly folder: pulumi.Output<string | undefined>;
|
|
37
290
|
/**
|
|
@@ -44,6 +297,8 @@ export declare class VulnerabilityProtectionProfile extends pulumi.CustomResourc
|
|
|
44
297
|
readonly rules: pulumi.Output<outputs.VulnerabilityProtectionProfileRule[] | undefined>;
|
|
45
298
|
/**
|
|
46
299
|
* The snippet in which the resource is defined
|
|
300
|
+
*
|
|
301
|
+
* > ℹ️ **Note:** You must specify exactly one of `device`, `folder`, and `snippet`.
|
|
47
302
|
*/
|
|
48
303
|
readonly snippet: pulumi.Output<string | undefined>;
|
|
49
304
|
readonly tfid: pulumi.Output<string>;
|
|
@@ -74,6 +329,8 @@ export interface VulnerabilityProtectionProfileState {
|
|
|
74
329
|
device?: pulumi.Input<string>;
|
|
75
330
|
/**
|
|
76
331
|
* The folder in which the resource is defined
|
|
332
|
+
*
|
|
333
|
+
* > ℹ️ **Note:** You must specify exactly one of `device`, `folder`, and `snippet`.
|
|
77
334
|
*/
|
|
78
335
|
folder?: pulumi.Input<string>;
|
|
79
336
|
/**
|
|
@@ -86,6 +343,8 @@ export interface VulnerabilityProtectionProfileState {
|
|
|
86
343
|
rules?: pulumi.Input<pulumi.Input<inputs.VulnerabilityProtectionProfileRule>[]>;
|
|
87
344
|
/**
|
|
88
345
|
* The snippet in which the resource is defined
|
|
346
|
+
*
|
|
347
|
+
* > ℹ️ **Note:** You must specify exactly one of `device`, `folder`, and `snippet`.
|
|
89
348
|
*/
|
|
90
349
|
snippet?: pulumi.Input<string>;
|
|
91
350
|
tfid?: pulumi.Input<string>;
|
|
@@ -108,6 +367,8 @@ export interface VulnerabilityProtectionProfileArgs {
|
|
|
108
367
|
device?: pulumi.Input<string>;
|
|
109
368
|
/**
|
|
110
369
|
* The folder in which the resource is defined
|
|
370
|
+
*
|
|
371
|
+
* > ℹ️ **Note:** You must specify exactly one of `device`, `folder`, and `snippet`.
|
|
111
372
|
*/
|
|
112
373
|
folder?: pulumi.Input<string>;
|
|
113
374
|
/**
|
|
@@ -120,6 +381,8 @@ export interface VulnerabilityProtectionProfileArgs {
|
|
|
120
381
|
rules?: pulumi.Input<pulumi.Input<inputs.VulnerabilityProtectionProfileRule>[]>;
|
|
121
382
|
/**
|
|
122
383
|
* The snippet in which the resource is defined
|
|
384
|
+
*
|
|
385
|
+
* > ℹ️ **Note:** You must specify exactly one of `device`, `folder`, and `snippet`.
|
|
123
386
|
*/
|
|
124
387
|
snippet?: pulumi.Input<string>;
|
|
125
388
|
/**
|
|
@@ -9,6 +9,257 @@ const utilities = require("./utilities");
|
|
|
9
9
|
* VulnerabilityProtectionProfile resource
|
|
10
10
|
*
|
|
11
11
|
* ## Example Usage
|
|
12
|
+
*
|
|
13
|
+
* ```typescript
|
|
14
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
15
|
+
* import * as scm from "@pulumi/scm";
|
|
16
|
+
*
|
|
17
|
+
* const scmVpProfile1Test = new scm.VulnerabilityProtectionProfile("scm_vp_profile_1_test", {
|
|
18
|
+
* folder: "Shared",
|
|
19
|
+
* name: "vp-profile-1-test",
|
|
20
|
+
* description: "basic profile",
|
|
21
|
+
* });
|
|
22
|
+
* const scmVpProfile2Test = new scm.VulnerabilityProtectionProfile("scm_vp_profile_2_test", {
|
|
23
|
+
* folder: "Shared",
|
|
24
|
+
* name: "vp-profile-2-test",
|
|
25
|
+
* description: "rules: allow, alert, and drop",
|
|
26
|
+
* rules: [
|
|
27
|
+
* {
|
|
28
|
+
* name: "Rule-Informational-Allow",
|
|
29
|
+
* action: {
|
|
30
|
+
* allow: {},
|
|
31
|
+
* },
|
|
32
|
+
* packetCapture: "extended-capture",
|
|
33
|
+
* severity: ["informational"],
|
|
34
|
+
* category: "scan",
|
|
35
|
+
* cve: ["N/A"],
|
|
36
|
+
* host: "client",
|
|
37
|
+
* vendorId: ["Match Any Vendor"],
|
|
38
|
+
* threatName: "30000",
|
|
39
|
+
* },
|
|
40
|
+
* {
|
|
41
|
+
* name: "Rule-Medium-Alert",
|
|
42
|
+
* action: {
|
|
43
|
+
* alert: {},
|
|
44
|
+
* },
|
|
45
|
+
* packetCapture: "single-packet",
|
|
46
|
+
* severity: ["medium"],
|
|
47
|
+
* category: "info-leak",
|
|
48
|
+
* cve: ["Match Any CVE"],
|
|
49
|
+
* host: "server",
|
|
50
|
+
* vendorId: ["MS08-037"],
|
|
51
|
+
* threatName: "OpenSSL Threat",
|
|
52
|
+
* },
|
|
53
|
+
* {
|
|
54
|
+
* name: "Rule-Critical-High-Drop",
|
|
55
|
+
* action: {
|
|
56
|
+
* drop: {},
|
|
57
|
+
* },
|
|
58
|
+
* packetCapture: "disable",
|
|
59
|
+
* severity: [
|
|
60
|
+
* "critical",
|
|
61
|
+
* "high",
|
|
62
|
+
* ],
|
|
63
|
+
* category: "overflow",
|
|
64
|
+
* cve: ["CVE-2008-1147"],
|
|
65
|
+
* host: "any",
|
|
66
|
+
* vendorId: ["Match Any Vendor"],
|
|
67
|
+
* threatName: "any",
|
|
68
|
+
* },
|
|
69
|
+
* ],
|
|
70
|
+
* });
|
|
71
|
+
* const scmVpProfile3Test = new scm.VulnerabilityProtectionProfile("scm_vp_profile_3_test", {
|
|
72
|
+
* folder: "Shared",
|
|
73
|
+
* name: "vp-profile-3-test",
|
|
74
|
+
* description: "rules: reset client, reset server, reset both",
|
|
75
|
+
* rules: [
|
|
76
|
+
* {
|
|
77
|
+
* name: "Rule-Low-Reset_Client",
|
|
78
|
+
* action: {
|
|
79
|
+
* resetClient: {},
|
|
80
|
+
* },
|
|
81
|
+
* severity: ["low"],
|
|
82
|
+
* category: "protocol-anomaly",
|
|
83
|
+
* cve: [
|
|
84
|
+
* "CVE-2010-3332",
|
|
85
|
+
* "CVE-2019-14537",
|
|
86
|
+
* ],
|
|
87
|
+
* host: "client",
|
|
88
|
+
* vendorId: [
|
|
89
|
+
* "MSO5-032",
|
|
90
|
+
* "IZ18434",
|
|
91
|
+
* ],
|
|
92
|
+
* threatName: "30261",
|
|
93
|
+
* },
|
|
94
|
+
* {
|
|
95
|
+
* name: "Rule-Info-Low-Reset_Server",
|
|
96
|
+
* action: {
|
|
97
|
+
* resetServer: {},
|
|
98
|
+
* },
|
|
99
|
+
* packetCapture: "disable",
|
|
100
|
+
* severity: [
|
|
101
|
+
* "informational",
|
|
102
|
+
* "low",
|
|
103
|
+
* ],
|
|
104
|
+
* category: "insecure-credentials",
|
|
105
|
+
* cve: ["N/A"],
|
|
106
|
+
* host: "server",
|
|
107
|
+
* vendorId: ["Match Any Vendor"],
|
|
108
|
+
* threatName: "Zone Bypass",
|
|
109
|
+
* },
|
|
110
|
+
* {
|
|
111
|
+
* name: "Rule-Medium-Reset_Both",
|
|
112
|
+
* action: {
|
|
113
|
+
* resetBoth: {},
|
|
114
|
+
* },
|
|
115
|
+
* packetCapture: "single-packet",
|
|
116
|
+
* severity: ["medium"],
|
|
117
|
+
* category: "brute-force",
|
|
118
|
+
* cve: [
|
|
119
|
+
* "CVE-2012-0175",
|
|
120
|
+
* "CVE-2024-6387",
|
|
121
|
+
* "CVE-2017-14473",
|
|
122
|
+
* ],
|
|
123
|
+
* host: "any",
|
|
124
|
+
* vendorId: [
|
|
125
|
+
* "CORE-1009-0227",
|
|
126
|
+
* "SHIRO-550",
|
|
127
|
+
* "AST-2012-008",
|
|
128
|
+
* ],
|
|
129
|
+
* threatName: "any",
|
|
130
|
+
* },
|
|
131
|
+
* ],
|
|
132
|
+
* });
|
|
133
|
+
* const scmVpProfile4Test = new scm.VulnerabilityProtectionProfile("scm_vp_profile_4_test", {
|
|
134
|
+
* folder: "Shared",
|
|
135
|
+
* name: "vp-profile-4-test",
|
|
136
|
+
* description: "rules: block ip",
|
|
137
|
+
* rules: [
|
|
138
|
+
* {
|
|
139
|
+
* name: "Rule-High-Critical-Block_IP",
|
|
140
|
+
* action: {
|
|
141
|
+
* blockIp: {
|
|
142
|
+
* duration: 3600,
|
|
143
|
+
* trackBy: "source-and-destination",
|
|
144
|
+
* },
|
|
145
|
+
* },
|
|
146
|
+
* severity: [
|
|
147
|
+
* "high",
|
|
148
|
+
* "critical",
|
|
149
|
+
* ],
|
|
150
|
+
* category: "insecure-credentials",
|
|
151
|
+
* cve: ["N/A"],
|
|
152
|
+
* host: "server",
|
|
153
|
+
* vendorId: ["Match Any Vendor"],
|
|
154
|
+
* threatName: "Zone Credentials",
|
|
155
|
+
* },
|
|
156
|
+
* {
|
|
157
|
+
* name: "Rule-Low-Medium-Block_IP",
|
|
158
|
+
* action: {
|
|
159
|
+
* blockIp: {
|
|
160
|
+
* duration: 2400,
|
|
161
|
+
* trackBy: "source-and-destination",
|
|
162
|
+
* },
|
|
163
|
+
* },
|
|
164
|
+
* severity: [
|
|
165
|
+
* "low",
|
|
166
|
+
* "medium",
|
|
167
|
+
* ],
|
|
168
|
+
* category: "command-execution",
|
|
169
|
+
* cve: ["N/A"],
|
|
170
|
+
* host: "server",
|
|
171
|
+
* vendorId: ["Match Any Vendor"],
|
|
172
|
+
* threatName: "any",
|
|
173
|
+
* },
|
|
174
|
+
* ],
|
|
175
|
+
* });
|
|
176
|
+
* const scmVpProfile5Test = new scm.VulnerabilityProtectionProfile("scm_vp_profile_5_test", {
|
|
177
|
+
* folder: "Shared",
|
|
178
|
+
* name: "vp-profile-5-test",
|
|
179
|
+
* description: "override",
|
|
180
|
+
* threatExceptions: [{
|
|
181
|
+
* name: "12345",
|
|
182
|
+
* action: {
|
|
183
|
+
* allow: {},
|
|
184
|
+
* },
|
|
185
|
+
* severity: ["informational"],
|
|
186
|
+
* category: "command-execution",
|
|
187
|
+
* exemptIp: [{
|
|
188
|
+
* name: "192.14.3.100",
|
|
189
|
+
* }],
|
|
190
|
+
* timeAttribute: {
|
|
191
|
+
* interval: 3600,
|
|
192
|
+
* threshold: 24000,
|
|
193
|
+
* trackBy: "source",
|
|
194
|
+
* },
|
|
195
|
+
* }],
|
|
196
|
+
* });
|
|
197
|
+
* const scmVpProfile6Test = new scm.VulnerabilityProtectionProfile("scm_vp_profile_6_test", {
|
|
198
|
+
* folder: "Shared",
|
|
199
|
+
* name: "vp-profile-6-test",
|
|
200
|
+
* description: "mixed",
|
|
201
|
+
* rules: [
|
|
202
|
+
* {
|
|
203
|
+
* name: "Rule-Info-Rest_Both",
|
|
204
|
+
* action: {
|
|
205
|
+
* allow: {},
|
|
206
|
+
* },
|
|
207
|
+
* packetCapture: "disable",
|
|
208
|
+
* severity: ["informational"],
|
|
209
|
+
* category: "exploit-kit",
|
|
210
|
+
* cve: ["N/A"],
|
|
211
|
+
* host: "client",
|
|
212
|
+
* vendorId: ["Match Any Vendor"],
|
|
213
|
+
* threatName: "30000",
|
|
214
|
+
* },
|
|
215
|
+
* {
|
|
216
|
+
* name: "Rule-Low-Alert",
|
|
217
|
+
* action: {
|
|
218
|
+
* alert: {},
|
|
219
|
+
* },
|
|
220
|
+
* packetCapture: "single-packet",
|
|
221
|
+
* severity: ["low"],
|
|
222
|
+
* category: "dos",
|
|
223
|
+
* cve: ["CVE-2020-8790"],
|
|
224
|
+
* host: "server",
|
|
225
|
+
* vendorId: ["MS09-036"],
|
|
226
|
+
* threatName: "Memory Corruption",
|
|
227
|
+
* },
|
|
228
|
+
* {
|
|
229
|
+
* name: "Rule-Medium-Drop",
|
|
230
|
+
* action: {
|
|
231
|
+
* drop: {},
|
|
232
|
+
* },
|
|
233
|
+
* packetCapture: "disable",
|
|
234
|
+
* severity: [
|
|
235
|
+
* "medium",
|
|
236
|
+
* "high",
|
|
237
|
+
* ],
|
|
238
|
+
* category: "insecure-credentials",
|
|
239
|
+
* cve: ["N/A"],
|
|
240
|
+
* host: "any",
|
|
241
|
+
* vendorId: ["Match Any Vendor"],
|
|
242
|
+
* threatName: "any",
|
|
243
|
+
* },
|
|
244
|
+
* ],
|
|
245
|
+
* threatExceptions: [{
|
|
246
|
+
* name: "12345",
|
|
247
|
+
* action: {
|
|
248
|
+
* drop: {},
|
|
249
|
+
* },
|
|
250
|
+
* packetCapture: "single-packet",
|
|
251
|
+
* host: "any",
|
|
252
|
+
* category: "scan",
|
|
253
|
+
* cve: [
|
|
254
|
+
* "CVE-2011-2663",
|
|
255
|
+
* "CVE-2016-9949",
|
|
256
|
+
* ],
|
|
257
|
+
* exemptIp: [{
|
|
258
|
+
* name: "192.14.3.100",
|
|
259
|
+
* }],
|
|
260
|
+
* }],
|
|
261
|
+
* });
|
|
262
|
+
* ```
|
|
12
263
|
*/
|
|
13
264
|
class VulnerabilityProtectionProfile extends pulumi.CustomResource {
|
|
14
265
|
/**
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"vulnerabilityProtectionProfile.js","sourceRoot":"","sources":["../vulnerabilityProtectionProfile.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC
|
|
1
|
+
{"version":3,"file":"vulnerabilityProtectionProfile.js","sourceRoot":"","sources":["../vulnerabilityProtectionProfile.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+PG;AACH,MAAa,8BAA+B,SAAQ,MAAM,CAAC,cAAc;IACrE;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA2C,EAAE,IAAmC;QACzI,OAAO,IAAI,8BAA8B,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACrF,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,8BAA8B,CAAC,YAAY,CAAC;IAC/E,CAAC;IA4CD,YAAY,IAAY,EAAE,WAAsF,EAAE,IAAmC;QACjJ,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA8D,CAAC;YAC7E,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC;YACvC,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YAC3C,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,EAAE,gBAAgB,CAAC;SAChE;aAAM;YACH,MAAM,IAAI,GAAG,WAA6D,CAAC;YAC3E,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,WAAW,CAAC;YAClD,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC;YACtC,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC;YAC1C,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,EAAE,gBAAgB,CAAC;YAC5D,cAAc,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SAC9C;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,8BAA8B,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACnF,CAAC;;AAhGL,wEAiGC;AAnFG,gBAAgB;AACO,2CAAY,GAAG,yEAAyE,CAAC"}
|