catalystwan 0.40.2.dev1__py3-none-any.whl → 2.0.0a1__py3-none-any.whl

catalystwan/models/configuration/feature_profile/sdwan/policy_object/security/intrusion_prevention.py

@@ -1,58 +0,0 @@
-# Copyright 2024 Cisco Systems, Inc. and its affiliates
-
-from typing import Literal, Optional
-from uuid import UUID
-
-from pydantic import AliasPath, ConfigDict, Field
-
-from catalystwan.api.configuration_groups.parcel import Global, _ParcelBase
-from catalystwan.models.configuration.feature_profile.common import RefIdItem
-
-SignatureSet = Literal["balanced", "connectivity", "security"]
-InspectionMode = Literal["detection", "protection"]
-LogLevel = Literal["emergency", "alert", "critical", "error", "warning", "notice", "info", "debug"]
-
-
-class IntrusionPreventionParcel(_ParcelBase):
-    model_config = ConfigDict(populate_by_name=True)
-    type_: Literal["unified/intrusion-prevention"] = Field(default="unified/intrusion-prevention", exclude=True)
-    signature_set: Global[SignatureSet] = Field(
-        default=Global[SignatureSet](value="balanced"), validation_alias=AliasPath("data", "signatureSet")
-    )
-    inspection_mode: Global[InspectionMode] = Field(
-        default=Global[InspectionMode](value="detection"), validation_alias=AliasPath("data", "inspectionMode")
-    )
-    signature_allowed_list: Optional[RefIdItem] = Field(
-        default=None, validation_alias=AliasPath("data", "signatureAllowedList")
-    )
-    log_level: Global[LogLevel] = Field(
-        default=Global[LogLevel](value="error"), validation_alias=AliasPath("data", "logLevel")
-    )
-    custom_signature: Global[bool] = Field(
-        default=Global[bool](value=False), validation_alias=AliasPath("data", "customSignature")
-    )
-
-    @classmethod
-    def create(
-        cls,
-        parcel_name: str,
-        parcel_description: str,
-        signature_set: SignatureSet = "balanced",
-        inspection_mode: InspectionMode = "detection",
-        signature_allowed_list: Optional[UUID] = None,
-        log_level: LogLevel = "error",
-        custom_signature: bool = False,
-    ) -> "IntrusionPreventionParcel":
-        sal: Optional[RefIdItem] = None
-        if signature_allowed_list:
-            sal = RefIdItem(ref_id=Global[str](value=str(signature_allowed_list)))
-
-        return cls(
-            parcel_name=parcel_name,
-            parcel_description=parcel_description,
-            signature_set=Global[SignatureSet](value=signature_set),
-            inspection_mode=Global[InspectionMode](value=inspection_mode),
-            signature_allowed_list=sal,
-            log_level=Global[LogLevel](value=log_level),
-            custom_signature=Global[bool](value=custom_signature),
-        )

catalystwan/models/configuration/feature_profile/sdwan/policy_object/security/ips_signature.py

@@ -1,44 +0,0 @@
-# Copyright 2024 Cisco Systems, Inc. and its affiliates
-
-from typing import List, Literal
-
-from pydantic import AliasPath, ConfigDict, Field, field_validator
-
-from catalystwan.api.configuration_groups.parcel import Global, _ParcelBase, _ParcelEntry, as_global
-
-
-class IPSSignatureListEntry(_ParcelEntry):
-    model_config = ConfigDict(populate_by_name=True)
-    generator_id: Global[str] = Field(
-        serialization_alias="generatorId", validation_alias="generatorId", description="Range 0 to 4294967295"
-    )
-    signature_id: Global[str] = Field(
-        serialization_alias="signatureId", validation_alias="signatureId", description="Range 0 to 4294967295"
-    )
-
-    @field_validator("generator_id")
-    @classmethod
-    def check_generator_id(cls, generator_id: Global):
-        assert 0 <= int(generator_id.value) <= 4294967295
-        return generator_id
-
-    @field_validator("signature_id")
-    @classmethod
-    def check_signature_id(cls, signature_id: Global):
-        assert 0 <= int(signature_id.value) <= 4294967295
-        return signature_id
-
-
-class IPSSignatureParcel(_ParcelBase):
-    model_config = ConfigDict(populate_by_name=True)
-    type_: Literal["security-ipssignature"] = Field(default="security-ipssignature", exclude=True)
-    entries: List[IPSSignatureListEntry] = Field(default_factory=list, validation_alias=AliasPath("data", "entries"))
-
-    def add_signature(self, signature: str):
-        generator_id, signature_id = signature.split(":")
-        self.entries.append(
-            IPSSignatureListEntry(
-                generator_id=as_global(generator_id),
-                signature_id=as_global(signature_id),
-            )
-        )

catalystwan/models/configuration/feature_profile/sdwan/policy_object/security/local_domain.py

@@ -1,24 +0,0 @@
-# Copyright 2024 Cisco Systems, Inc. and its affiliates
-
-from typing import List, Literal
-
-from pydantic import AliasPath, ConfigDict, Field
-
-from catalystwan.api.configuration_groups.parcel import Global, _ParcelBase, _ParcelEntry, as_global
-
-
-class LocalDomainListEntry(_ParcelEntry):
-    model_config = ConfigDict(populate_by_name=True)
-    name_server: Global[str] = Field(
-        serialization_alias="nameServer", validation_alias="nameServer", description="Ex: cisco.com, *.cisco.com"
-    )
-
-
-class LocalDomainParcel(_ParcelBase):
-    model_config = ConfigDict(populate_by_name=True)
-    type_: Literal["security-localdomain"] = Field(default="security-localdomain", exclude=True)
-    entries: List[LocalDomainListEntry] = Field(default_factory=list, validation_alias=AliasPath("data", "entries"))
-
-    def from_local_domains(self, domains: List[str]):
-        for domain in domains:
-            self.entries.append(LocalDomainListEntry(name_server=as_global(domain)))

catalystwan/models/configuration/feature_profile/sdwan/policy_object/security/protocol_list.py

@@ -1,21 +0,0 @@
-# Copyright 2024 Cisco Systems, Inc. and its affiliates
-
-from typing import List, Literal
-
-from pydantic import AliasPath, ConfigDict, Field
-
-from catalystwan.api.configuration_groups.parcel import Global, _ParcelBase, _ParcelEntry, as_global
-
-
-class ProtocolListEntry(_ParcelEntry):
-    model_config = ConfigDict(populate_by_name=True)
-    protocol: Global[str] = Field(serialization_alias="protocolName", validation_alias="protocolName")
-
-
-class ProtocolListParcel(_ParcelBase):
-    model_config = ConfigDict(populate_by_name=True)
-    type_: Literal["security-protocolname"] = Field(default="security-protocolname", exclude=True)
-    entries: List[ProtocolListEntry] = Field(default_factory=list, validation_alias=AliasPath("data", "entries"))
-
-    def add_protocol(self, protocol: str):
-        self.entries.append(ProtocolListEntry(protocol=as_global(protocol)))

catalystwan/models/configuration/feature_profile/sdwan/policy_object/security/scalable_group_tag.py

@@ -1,26 +0,0 @@
-# Copyright 2024 Cisco Systems, Inc. and its affiliates
-from typing import List, Literal
-
-from pydantic import AliasPath, ConfigDict, Field
-
-from catalystwan.api.configuration_groups.parcel import Global, _ParcelBase, _ParcelEntry
-
-
-class ScalableGroupTagEntry(_ParcelEntry):
-    model_config = ConfigDict(populate_by_name=True)
-    sgt_name: Global[str] = Field(validation_alias="sgtName", serialization_alias="sgtName")
-    tag: Global[str]
-
-
-class ScalableGroupTagParcel(_ParcelBase):
-    model_config = ConfigDict(populate_by_name=True)
-    type_: Literal["security-scalablegrouptag"] = Field(default="security-scalablegrouptag", exclude=True)
-    entries: List[ScalableGroupTagEntry] = Field(validation_alias=AliasPath("data", "entries"), default_factory=list)
-
-    def add_entry(self, sgt_name: str, tag: str):
-        self.entries.append(
-            ScalableGroupTagEntry(
-                sgt_name=Global[str](value=sgt_name),
-                tag=Global[str](value=tag),
-            )
-        )

catalystwan/models/configuration/feature_profile/sdwan/policy_object/security/security_port.py

@@ -1,45 +0,0 @@
-# Copyright 2024 Cisco Systems, Inc. and its affiliates
-
-from typing import List, Literal
-
-from pydantic import AliasPath, ConfigDict, Field, field_validator
-
-from catalystwan.api.configuration_groups.parcel import Global, _ParcelBase, _ParcelEntry
-
-
-class SecurityPortListEntry(_ParcelEntry):
-    model_config = ConfigDict(populate_by_name=True)
-    port: Global[str] = Field(
-        description="Ex: 1 or 1-10 by range. Range 0 to 65535"
-    )  # Not clear why UI validation accepts max 65530
-
-    @field_validator("port")
-    @classmethod
-    def check_port(cls, port: Global[str]):
-        value = port.value
-        if value.count("-") == 0:
-            assert 0 <= int(value) <= 65535
-            return port
-
-        start_port, end_port = value.split("-")
-        start = int(start_port)
-        end = int(end_port)
-        assert 0 <= start <= 65535
-        assert 0 <= end <= 65535
-        assert start < end
-        return port
-
-
-class SecurityPortParcel(_ParcelBase):
-    model_config = ConfigDict(populate_by_name=True)
-    type_: Literal["security-port"] = Field(default="security-port", exclude=True)
-    entries: List[SecurityPortListEntry] = Field(default_factory=list, validation_alias=AliasPath("data", "entries"))
-
-    def _add_port(self, port: str):
-        self.entries.append(SecurityPortListEntry(port=Global[str](value=port)))
-
-    def add_port(self, port: int):
-        self._add_port(str(port))
-
-    def add_port_range(self, start_port: int, end_port: int):
-        self._add_port(f"{start_port}-{end_port}")

catalystwan/models/configuration/feature_profile/sdwan/policy_object/security/ssl_decryption.py

@@ -1,126 +0,0 @@
-# Copyright 2024 Cisco Systems, Inc. and its affiliates
-
-from typing import Literal, Optional
-
-from pydantic import AliasPath, BaseModel, ConfigDict, Field
-
-from catalystwan.api.configuration_groups.parcel import Global, _ParcelBase
-
-Action = Literal["decrypt", "drop"]
-UnspportedModeAction = Literal["drop", "no-decrypt"]
-CertificateRevocationStatus = Literal["ocsp", "none"]
-FailureMode = Literal["close", "open"]
-KeyModulus = Literal["1024", "2048", "4096"]
-EckeyType = Literal["P256", "P384", "P521"]
-TlsVersion = Literal["TLSv1", "TLSv1.1", "TLSv1.2"]
-CaTpLabel = Literal["PROXY-SIGNING-CA"]
-
-
-class CaCertBundle(BaseModel):
-    model_config = ConfigDict(populate_by_name=True, extra="forbid")
-    default: Global[bool] = Field(default=Global[bool](value=True))
-    file_name: Optional[Global[str]] = Field(default=None, validation_alias="fileName", serialization_alias="fileName")
-    bundle_string: Optional[Global[str]] = Field(
-        default=None, validation_alias="bundleString", serialization_alias="bundleString"
-    )
-
-    @classmethod
-    def create(
-        cls,
-        default: bool = True,
-        file_name: Optional[str] = None,
-        bundle_string: Optional[str] = None,
-    ) -> "CaCertBundle":
-        return cls(
-            default=Global[bool](value=default),
-            file_name=Global[str](value=file_name) if file_name else None,
-            bundle_string=Global[str](value=bundle_string) if bundle_string else None,
-        )
-
-
-class SslDecryptionParcel(_ParcelBase):
-    type_: Literal["unified/ssl-decryption"] = Field(default="unified/ssl-decryption", exclude=True)
-    parcel_description: str = Field(
-        default="",
-        serialization_alias="description",
-        validation_alias="description",
-        description="Set the parcel description",
-    )
-    ssl_enable: Global[bool] = Field(default=Global[bool](value=True), validation_alias=AliasPath("data", "sslEnable"))
-    expired_certificate: Global[Action] = Field(
-        default=Global[Action](value="drop"), validation_alias=AliasPath("data", "expiredCertificate")
-    )
-    untrusted_certificate: Global[Action] = Field(
-        default=Global[Action](value="drop"), validation_alias=AliasPath("data", "untrustedCertificate")
-    )
-    certificate_revocation_status: Global[CertificateRevocationStatus] = Field(
-        default=Global[CertificateRevocationStatus](value="none"),
-        validation_alias=AliasPath("data", "certificateRevocationStatus"),
-    )
-    unknown_status: Optional[Global[Action]] = Field(default=None, validation_alias=AliasPath("data", "unknownStatus"))
-    unsupported_protocol_versions: Global[UnspportedModeAction] = Field(
-        default=Global[UnspportedModeAction](value="drop"),
-        validation_alias=AliasPath("data", "unsupportedProtocolVersions"),
-    )
-    unsupported_cipher_suites: Global[UnspportedModeAction] = Field(
-        default=Global[UnspportedModeAction](value="drop"),
-        validation_alias=AliasPath("data", "unsupportedCipherSuites"),
-    )
-    failure_mode: Global[FailureMode] = Field(
-        default=Global[FailureMode](value="close"), validation_alias=AliasPath("data", "failureMode")
-    )
-    ca_cert_bundle: CaCertBundle = Field(default=CaCertBundle(), validation_alias=AliasPath("data", "caCertBundle"))
-    key_modulus: Global[KeyModulus] = Field(
-        default=Global[KeyModulus](value="1024"), validation_alias=AliasPath("data", "keyModulus")
-    )
-    eckey_type: Global[EckeyType] = Field(
-        default=Global[EckeyType](value="P256"), validation_alias=AliasPath("data", "eckeyType")
-    )
-    certificate_lifetime: Global[str] = Field(
-        default=Global[str](value="1"), validation_alias=AliasPath("data", "certificateLifetime")
-    )
-    min_tls_ver: Global[TlsVersion] = Field(
-        default=Global[TlsVersion](value="TLSv1"), validation_alias=AliasPath("data", "minTlsVer")
-    )
-    ca_tp_label: Global[CaTpLabel] = Field(
-        default=Global[CaTpLabel](value="PROXY-SIGNING-CA"), validation_alias=AliasPath("data", "caTpLabel")
-    )
-
-    @classmethod
-    def create(
-        cls,
-        parcel_name: str,
-        parcel_description: str,
-        ssl_enable: bool = True,
-        expired_certificate: Action = "drop",
-        untrusted_certificate: Action = "drop",
-        certificate_revocation_status: CertificateRevocationStatus = "none",
-        unknown_status: Optional[Action] = None,
-        unsupported_protocol_versions: UnspportedModeAction = "drop",
-        unsupported_cipher_suites: UnspportedModeAction = "drop",
-        failure_mode: FailureMode = "close",
-        ca_cert_bundle: CaCertBundle = CaCertBundle(),
-        key_modulus: KeyModulus = "1024",
-        eckey_type: EckeyType = "P256",
-        certificate_lifetime: str = "1",
-        min_tls_ver: TlsVersion = "TLSv1",
-        ca_tp_label: CaTpLabel = "PROXY-SIGNING-CA",
-    ) -> "SslDecryptionParcel":
-        return cls(
-            parcel_name=parcel_name,
-            parcel_description=parcel_description,
-            ssl_enable=Global[bool](value=ssl_enable),
-            expired_certificate=Global[Action](value=expired_certificate),
-            untrusted_certificate=Global[Action](value=untrusted_certificate),
-            certificate_revocation_status=Global[CertificateRevocationStatus](value=certificate_revocation_status),
-            unknown_status=Global[Action](value=unknown_status) if unknown_status else None,
-            unsupported_protocol_versions=Global[UnspportedModeAction](value=unsupported_protocol_versions),
-            unsupported_cipher_suites=Global[UnspportedModeAction](value=unsupported_cipher_suites),
-            failure_mode=Global[FailureMode](value=failure_mode),
-            ca_cert_bundle=ca_cert_bundle,
-            key_modulus=Global[KeyModulus](value=key_modulus),
-            eckey_type=Global[EckeyType](value=eckey_type),
-            certificate_lifetime=Global[str](value=certificate_lifetime),
-            min_tls_ver=Global[TlsVersion](value=min_tls_ver),
-            ca_tp_label=Global[CaTpLabel](value=ca_tp_label),
-        )

catalystwan/models/configuration/feature_profile/sdwan/policy_object/security/ssl_decryption_profile.py

@@ -1,165 +0,0 @@
-# Copyright 2024 Cisco Systems, Inc. and its affiliates
-
-from typing import List, Literal, Optional
-from uuid import UUID
-
-from pydantic import AliasPath, ConfigDict, Field
-
-from catalystwan.api.configuration_groups.parcel import Global, _ParcelBase
-from catalystwan.models.configuration.feature_profile.common import RefIdItem
-
-Categories = Literal[
-    "abortion",
-    "abused-drugs",
-    "adult-and-pornography",
-    "alcohol-and-tobacco",
-    "auctions",
-    "bot-nets",
-    "business-and-economy",
-    "cdns",
-    "cheating",
-    "computer-and-internet-info",
-    "computer-and-internet-security",
-    "confirmed-spam-sources",
-    "cult-and-occult",
-    "dating",
-    "dead-sites",
-    "dynamic-content",
-    "educational-institutions",
-    "entertainment-and-arts",
-    "fashion-and-beauty",
-    "financial-services",
-    "gambling",
-    "games",
-    "government",
-    "gross",
-    "hacking",
-    "hate-and-racism",
-    "health-and-medicine",
-    "home",
-    "hunting-and-fishing",
-    "illegal",
-    "image-and-video-search",
-    "individual-stock-advice-and-tools",
-    "internet-communications",
-    "internet-portals",
-    "job-search",
-    "keyloggers-and-monitoring",
-    "kids",
-    "legal",
-    "local-information",
-    "malware-sites",
-    "marijuana",
-    "military",
-    "motor-vehicles",
-    "music",
-    "news-and-media",
-    "nudity",
-    "online-greeting-cards",
-    "online-personal-storage",
-    "open-http-proxies",
-    "p2p",
-    "parked-sites",
-    "pay-to-surf",
-    "personal-sites-and-blogs",
-    "philosophy-and-political-advocacy",
-    "phishing-and-other-frauds",
-    "private-ip-addresses",
-    "proxy-avoid-and-anonymizers",
-    "questionable",
-    "real-estate",
-    "recreation-and-hobbies",
-    "reference-and-research",
-    "religion",
-    "search-engines",
-    "sex-education",
-    "shareware-and-freeware",
-    "shopping",
-    "social-network",
-    "society",
-    "spam-urls",
-    "sports",
-    "spyware-and-adware",
-    "streaming-media",
-    "swimsuits-and-intimate-apparel",
-    "training-and-tools",
-    "translation",
-    "travel",
-    "uncategorized",
-    "unconfirmed-spam-sources",
-    "violence",
-    "weapons",
-    "web-advertisements",
-    "web-based-email",
-    "web-hosting",
-]
-
-DecryptThreshold = Literal["high-risk", "low-risk", "moderate-risk", "suspicious", "trustworthy"]
-
-
-class SslDecryptionProfileParcel(_ParcelBase):
-    model_config = ConfigDict(populate_by_name=True)
-    type_: Literal["unified/ssl-decryption-profile"] = Field(default="unified/ssl-decryption-profile", exclude=True)
-    parcel_description: str = Field(
-        default="",
-        serialization_alias="description",
-        validation_alias="description",
-        description="Set the parcel description",
-    )
-    decrypt_categories: Global[List[Categories]] = Field(
-        default=Global[List[Categories]](value=[]), validation_alias=AliasPath("data", "decryptCategories")
-    )
-    never_decrypt_categories: Global[List[Categories]] = Field(
-        default=Global[List[Categories]](value=[]), validation_alias=AliasPath("data", "neverDecryptCategories")
-    )
-    skip_decrypt_categories: Global[List[Categories]] = Field(
-        default=Global[List[Categories]](value=[]), validation_alias=AliasPath("data", "skipDecryptCategories")
-    )
-    reputation: Global[bool] = Field(
-        default=Global[bool](value=False), validation_alias=AliasPath("data", "reputation")
-    )
-    decrypt_threshold: Optional[Global[DecryptThreshold]] = Field(
-        default=None, validation_alias=AliasPath("data", "decryptThreshold")
-    )
-    skip_decrypt_threshold: Optional[Global[DecryptThreshold]] = Field(
-        default=None, validation_alias=AliasPath("data", "skipDecryptThreshold")
-    )
-    fail_decrypt: Global[bool] = Field(
-        default=Global[bool](value=False), validation_alias=AliasPath("data", "failDecrypt")
-    )
-    url_allowed_list: Optional[RefIdItem] = Field(default=None, validation_alias=AliasPath("data", "urlAllowedList"))
-    url_blocked_list: Optional[RefIdItem] = Field(default=None, validation_alias=AliasPath("data", "urlBlockedList"))
-
-    @classmethod
-    def create(
-        cls,
-        parcel_name: str,
-        parcel_description: str,
-        decrypt_categories: List[Categories],
-        never_decrypt_categories: List[Categories],
-        skip_decrypt_categories: List[Categories],
-        reputation: bool,
-        fail_decrypt: bool,
-        skip_decrypt_threshold: Optional[DecryptThreshold] = None,
-        decrypt_threshold: Optional[DecryptThreshold] = None,
-        url_allowed_list: Optional[UUID] = None,
-        url_blocked_list: Optional[UUID] = None,
-    ) -> "SslDecryptionProfileParcel":
-        ual = RefIdItem.from_uuid(url_allowed_list) if url_allowed_list else None
-        ubl = RefIdItem.from_uuid(url_blocked_list) if url_blocked_list else None
-        dt = Global[DecryptThreshold](value=decrypt_threshold) if decrypt_threshold else None
-        sdt = Global[DecryptThreshold](value=skip_decrypt_threshold) if skip_decrypt_threshold else None
-
-        return cls(
-            parcel_name=parcel_name,
-            parcel_description=parcel_description,
-            decrypt_categories=Global[List[Categories]](value=decrypt_categories),
-            never_decrypt_categories=Global[List[Categories]](value=never_decrypt_categories),
-            skip_decrypt_categories=Global[List[Categories]](value=skip_decrypt_categories),
-            reputation=Global[bool](value=reputation),
-            fail_decrypt=Global[bool](value=fail_decrypt),
-            decrypt_threshold=dt,
-            skip_decrypt_threshold=sdt,
-            url_allowed_list=ual,
-            url_blocked_list=ubl,
-        )

catalystwan/models/configuration/feature_profile/sdwan/policy_object/security/url.py

@@ -1,32 +0,0 @@
-# Copyright 2024 Cisco Systems, Inc. and its affiliates
-
-from typing import List, Literal
-
-from pydantic import AliasPath, ConfigDict, Field
-
-from catalystwan.api.configuration_groups.parcel import Global, _ParcelBase, _ParcelEntry, as_global
-
-
-class BaseURLListEntry(_ParcelEntry):
-    model_config = ConfigDict(populate_by_name=True)
-    pattern: Global[str]
-
-
-class URLParcel(_ParcelBase):
-    model_config = ConfigDict(populate_by_name=True)
-    type_: Literal["security-urllist"] = Field(default="security-urllist", exclude=True)
-    type: Literal["urlallowed", "urlblocked"]
-    entries: List[BaseURLListEntry] = Field(default_factory=list, validation_alias=AliasPath("data", "entries"))
-
-    def add_url(self, pattern: str):
-        self.entries.append(BaseURLListEntry(pattern=as_global(pattern)))
-
-
-class URLAllowParcel(URLParcel):
-    model_config = ConfigDict(populate_by_name=True)
-    type: Literal["urlallowed"] = "urlallowed"
-
-
-class URLBlockParcel(URLParcel):
-    model_config = ConfigDict(populate_by_name=True)
-    type: Literal["urlblocked"] = "urlblocked"