catalystwan 0.41.2__py3-none-any.whl → 0.41.2.dev0__py3-none-any.whl

catalystwan/models/policy/{definitions → definition}/zone_based_firewall.py

@@ -7,25 +7,35 @@ from uuid import UUID
 from pydantic import BaseModel, ConfigDict, Field
 from typing_extensions import Annotated
 
+from catalystwan.models.common import PolicyModeType
 from catalystwan.models.misc.application_protocols import ApplicationProtocol
 from catalystwan.models.policy.policy_definition import (
+    AdvancedInspectionProfileAction,
     AppListEntry,
+    AppListFlatEntry,
+    ConnectionEventsAction,
     DefinitionWithSequencesCommonBase,
     DestinationDataPrefixListEntry,
     DestinationFQDNEntry,
+    DestinationFQDNListEntry,
     DestinationGeoLocationEntry,
     DestinationGeoLocationListEntry,
     DestinationIPEntry,
     DestinationPortEntry,
     DestinationPortListEntry,
+    DestinationScalableGroupTagListEntry,
+    DestinationSecurityGroupEntry,
     LogAction,
     Match,
-    PolicyActionType,
+    PolicyActionBase,
     PolicyDefinitionBase,
+    PolicyDefinitionGetResponse,
+    PolicyDefinitionId,
     PolicyDefinitionSequenceBase,
     ProtocolEntry,
     ProtocolNameEntry,
     ProtocolNameListEntry,
+    ReferenceWithId,
     RuleSetListEntry,
     SourceDataPrefixListEntry,
     SourceFQDNEntry,
@@ -35,18 +45,24 @@ from catalystwan.models.policy.policy_definition import (
     SourceIPEntry,
     SourcePortEntry,
     SourcePortListEntry,
+    SourceScalableGroupTagListEntry,
+    SourceSecurityGroupEntry,
 )
 
 ZoneBasedFWPolicySequenceEntry = Annotated[
     Union[
         AppListEntry,
+        AppListFlatEntry,
         DestinationDataPrefixListEntry,
         DestinationFQDNEntry,
+        DestinationFQDNListEntry,
         DestinationGeoLocationEntry,
         DestinationGeoLocationListEntry,
         DestinationIPEntry,
         DestinationPortEntry,
         DestinationPortListEntry,
+        DestinationScalableGroupTagListEntry,
+        DestinationSecurityGroupEntry,
         ProtocolEntry,
         ProtocolNameEntry,
         ProtocolNameListEntry,
@@ -59,10 +75,14 @@ ZoneBasedFWPolicySequenceEntry = Annotated[
         SourceIPEntry,
         SourcePortEntry,
         SourcePortListEntry,
+        SourceScalableGroupTagListEntry,
+        SourceSecurityGroupEntry,
     ],
     Field(discriminator="field"),
 ]
 
+ZonePair = Literal["self", "default"]
+
 ZoneBasedFWPolicySequenceEntryWithRuleSets = Annotated[
     Union[
         AppListEntry,
@@ -71,6 +91,22 @@ ZoneBasedFWPolicySequenceEntryWithRuleSets = Annotated[
     Field(discriminator="field"),
 ]
 
+ZoneBasedFWPolicyActions = Annotated[
+    Union[
+        AdvancedInspectionProfileAction,
+        ConnectionEventsAction,
+        LogAction,
+    ],
+    Field(discriminator="type"),
+]
+
+ZoneBasedFirewallDefaultActionType = Literal["drop", "pass"]
+ZoneBasedFirewallBaseActionType = Literal["drop", "pass", "inspect"]
+
+
+class ZoneBasedFirewallDefaultAction(PolicyActionBase):
+    type: ZoneBasedFirewallDefaultActionType
+
 
 class ZoneBasedFWPolicyMatches(Match):
     entries: List[ZoneBasedFWPolicySequenceEntry] = []
@@ -82,13 +118,13 @@ class ZoneBasedFWPolicySequenceWithRuleSets(PolicyDefinitionSequenceBase):
     )
     match: ZoneBasedFWPolicyMatches
     ruleset: bool = True
-    actions: List[LogAction] = []
+    actions: List[ZoneBasedFWPolicyActions] = []
     model_config = ConfigDict(populate_by_name=True)
 
     def match_rule_set_lists(self, rule_set_ids: Set[UUID]) -> None:
-        self._insert_match(RuleSetListEntry.from_rule_set_ids(rule_set_ids))
+        self._insert_match(RuleSetListEntry(ref=list(rule_set_ids)))
 
-    def match_app_list(self, app_list_id: UUID) -> None:
+    def match_app_list(self, app_list_id: List[UUID]) -> None:
         if self.base_action != "inspect":
             raise ValueError("Action must be inspect when Application/Application Family List is selected.")
         self._insert_match(AppListEntry(ref=app_list_id))
@@ -99,16 +135,25 @@ class ZoneBasedFWPolicySequence(PolicyDefinitionSequenceBase):
         default="zoneBasedFW", serialization_alias="sequenceType", validation_alias="sequenceType"
     )
     match: ZoneBasedFWPolicyMatches
-    actions: List[LogAction] = []
+    actions: List[Union[LogAction, AdvancedInspectionProfileAction, ConnectionEventsAction]] = []
     model_config = ConfigDict(populate_by_name=True)
 
-    def match_app_list(self, app_list_id: UUID) -> None:
+    def set_log_action(self):
+        self.actions.append(LogAction())
+
+    def set_advanced_inspection_profile_action(self, profile_id: UUID):
+        self.actions.append(AdvancedInspectionProfileAction(parameter=ReferenceWithId(ref=profile_id)))
+
+    def set_conection_events_action(self):
+        self.actions.append(ConnectionEventsAction())
+
+    def match_app_list(self, app_list_id: List[UUID]) -> None:
         if self.base_action != "inspect":
             raise ValueError("Action must be inspect when Application/Application Family List is selected.")
         self._insert_match(AppListEntry(ref=app_list_id))
 
-    def match_destination_data_prefix_list(self, data_prefix_list_id: UUID) -> None:
-        self._insert_match(DestinationDataPrefixListEntry(ref=data_prefix_list_id))
+    def match_destination_data_prefix_list(self, data_prefix_lists: List[UUID]) -> None:
+        self._insert_match(DestinationDataPrefixListEntry(ref=data_prefix_lists))
 
     def match_destination_fqdn(self, fqdn: str) -> None:
         self._insert_match(DestinationFQDNEntry(value=fqdn))
@@ -116,7 +161,7 @@ class ZoneBasedFWPolicySequence(PolicyDefinitionSequenceBase):
     def match_destination_geo_location(self, geo_location: str) -> None:
         self._insert_match(DestinationGeoLocationEntry(value=geo_location))
 
-    def match_destination_geo_location_list(self, geo_location_list_id: UUID) -> None:
+    def match_destination_geo_location_list(self, geo_location_list_id: List[UUID]) -> None:
         self._insert_match(DestinationGeoLocationListEntry(ref=geo_location_list_id))
 
     def match_destination_ip(self, networks: List[IPv4Network]) -> None:
@@ -125,8 +170,11 @@ class ZoneBasedFWPolicySequence(PolicyDefinitionSequenceBase):
     def match_destination_ports(self, ports: Set[int] = set(), port_ranges: List[Tuple[int, int]] = []) -> None:
         self._insert_match(DestinationPortEntry.from_port_set_and_ranges(ports, port_ranges))
 
-    def match_destination_port_list(self, port_list_id: UUID) -> None:
-        self._insert_match(DestinationPortListEntry(ref=port_list_id))
+    def match_destination_port_list(self, data_prefix_lists: List[UUID]) -> None:
+        self._insert_match(DestinationPortListEntry(ref=data_prefix_lists))
+
+    def match_destination_security_group_list(self, security_group_list: List[UUID]) -> None:
+        self._insert_match(DestinationSecurityGroupEntry(ref=security_group_list))
 
     def match_protocols(self, protocols: Set[int]) -> None:
         self._insert_match(ProtocolEntry.from_protocol_set(protocols))
@@ -136,17 +184,17 @@ class ZoneBasedFWPolicySequence(PolicyDefinitionSequenceBase):
         for name in names:
             app_protocol = protocol_map.get(name, None)
             if app_protocol is None:
-                raise ValueError(f"{name} not found in protocol map keys: {protocol_map.keys()}")
+                raise ValueError(f"{name} not found in protocol map keys: {protocol_map.keys()}")  # noqa: E713
             app_protocols.append(app_protocol)
         self._insert_match(ProtocolNameEntry.from_application_protocols(app_protocols))
         self._insert_match(DestinationPortEntry.from_application_protocols(app_protocols), False)
         self._insert_match(ProtocolEntry.from_application_protocols(app_protocols), False)
 
-    def match_protocol_name_list(self, protocol_name_list_id: UUID) -> None:
+    def match_protocol_name_list(self, protocol_name_list_id: List[UUID]) -> None:
         self._insert_match(ProtocolNameListEntry(ref=protocol_name_list_id))
 
-    def match_source_data_prefix_list(self, data_prefix_list_id: UUID) -> None:
-        self._insert_match(SourceDataPrefixListEntry(ref=data_prefix_list_id))
+    def match_source_data_prefix_list(self, data_prefix_lists: List[UUID]) -> None:
+        self._insert_match(SourceDataPrefixListEntry(ref=data_prefix_lists))
 
     def match_source_fqdn(self, fqdn: str) -> None:
         self._insert_match(SourceFQDNEntry(value=fqdn))
@@ -157,7 +205,7 @@ class ZoneBasedFWPolicySequence(PolicyDefinitionSequenceBase):
     def match_source_geo_location(self, geo_location: str) -> None:
         self._insert_match(SourceGeoLocationEntry(value=geo_location))
 
-    def match_source_geo_location_list(self, geo_location_list_id: UUID) -> None:
+    def match_source_geo_location_list(self, geo_location_list_id: List[UUID]) -> None:
         self._insert_match(SourceGeoLocationListEntry(ref=geo_location_list_id))
 
     def match_source_ip(self, networks: List[IPv4Network]) -> None:
@@ -166,36 +214,41 @@ class ZoneBasedFWPolicySequence(PolicyDefinitionSequenceBase):
     def match_source_port(self, ports: Set[int] = set(), port_ranges: List[Tuple[int, int]] = []) -> None:
         self._insert_match(SourcePortEntry.from_port_set_and_ranges(ports, port_ranges))
 
-    def match_source_port_list(self, port_list_id: UUID) -> None:
+    def match_source_port_list(self, port_list_id: List[UUID]) -> None:
         self._insert_match(SourcePortListEntry(ref=port_list_id))
 
+    def match_source_security_group_list(self, security_group_list: List[UUID]) -> None:
+        self._insert_match(SourceSecurityGroupEntry(ref=security_group_list))
+
 
 class ZoneBasedFWPolicyEntry(BaseModel):
-    source_zone_id: Union[UUID, Literal["self"]] = Field(
+    source_zone_id: Union[UUID, ZonePair] = Field(
         default="self", serialization_alias="sourceZone", validation_alias="sourceZone"
     )
-    destination_zone_id: UUID = Field(serialization_alias="destinationZone", validation_alias="destinationZone")
-    model_config = ConfigDict(populate_by_name=True)
-
-
-class ZoneBasedFWPolicyHeader(PolicyDefinitionBase):
-    type: Literal["zoneBasedFW"] = "zoneBasedFW"
-    mode: str = Field(default="security")
+    destination_zone_id: Union[UUID, ZonePair] = Field(
+        serialization_alias="destinationZone", validation_alias="destinationZone"
+    )
     model_config = ConfigDict(populate_by_name=True)
 
 
 class ZoneBasedFWPolicyDefinition(DefinitionWithSequencesCommonBase):
+    default_action: ZoneBasedFirewallDefaultAction = Field(
+        default=ZoneBasedFirewallDefaultAction(type="drop"),
+        serialization_alias="defaultAction",
+        validation_alias="defaultAction",
+    )
     sequences: List[Union[ZoneBasedFWPolicySequence, ZoneBasedFWPolicySequenceWithRuleSets]] = []
     entries: List[ZoneBasedFWPolicyEntry] = []
 
 
-class ZoneBasedFWPolicy(ZoneBasedFWPolicyHeader):
+class ZoneBasedFWPolicy(PolicyDefinitionBase):
+    model_config = ConfigDict(populate_by_name=True)
     type: Literal["zoneBasedFW"] = "zoneBasedFW"
-    mode: Literal["security"] = "security"
+    mode: PolicyModeType = "security"
     definition: ZoneBasedFWPolicyDefinition = ZoneBasedFWPolicyDefinition()
 
     def add_ipv4_rule(
-        self, name: str, base_action: PolicyActionType = "drop", log: bool = False
+        self, name: str, base_action: ZoneBasedFirewallBaseActionType = "drop", log: bool = False
     ) -> ZoneBasedFWPolicySequence:
         """Adds new IPv4 Rule to Zone Based Firewall Policy
 
@@ -219,7 +272,7 @@ class ZoneBasedFWPolicy(ZoneBasedFWPolicyHeader):
         return sequence
 
     def add_ipv4_rule_sets(
-        self, name: str, base_action: PolicyActionType = "drop", log: bool = False
+        self, name: str, base_action: ZoneBasedFirewallBaseActionType = "drop", log: bool = False
     ) -> ZoneBasedFWPolicySequenceWithRuleSets:
         sequence = ZoneBasedFWPolicySequenceWithRuleSets(
             sequence_name=name,
@@ -232,9 +285,17 @@ class ZoneBasedFWPolicy(ZoneBasedFWPolicyHeader):
         self.definition.add(sequence)
         return sequence
 
-    def add_zone_pair(self, source_zone_id: UUID, destination_zone_id: UUID) -> None:
+    def add_zone_pair(self, source_zone: Union[UUID, ZonePair], destination_zone: Union[UUID, ZonePair]) -> None:
         entry = ZoneBasedFWPolicyEntry(
-            source_zone_id=source_zone_id,
-            destination_zone_id=destination_zone_id,
+            source_zone_id=source_zone,
+            destination_zone_id=destination_zone,
         )
         self.definition.entries.append(entry)
+
+
+class ZoneBasedFWPolicyEditPayload(ZoneBasedFWPolicy, PolicyDefinitionId):
+    pass
+
+
+class ZoneBasedFWPolicyGetResponse(ZoneBasedFWPolicy, PolicyDefinitionGetResponse):
+    pass

catalystwan/models/policy/list/app.py

@@ -0,0 +1,44 @@
+# Copyright 2024 Cisco Systems, Inc. and its affiliates
+from typing import List, Literal, Optional
+
+from pydantic import BaseModel, ConfigDict, Field, model_validator
+
+from catalystwan.models.common import check_fields_exclusive
+from catalystwan.models.policy.policy_list import PolicyListBase, PolicyListId, PolicyListInfo
+
+
+class AppListEntry(BaseModel):
+    model_config = ConfigDict(populate_by_name=True)
+
+    app_family: Optional[str] = Field(default=None, serialization_alias="appFamily", validation_alias="appFamily")
+    app: Optional[str] = None
+
+    @model_validator(mode="after")
+    def check_app_xor_appfamily(self):
+        check_fields_exclusive(self.__dict__, {"app", "app_family"}, True)
+        return self
+
+
+class AppList(PolicyListBase):
+    type: Literal["app"] = "app"
+    entries: List[AppListEntry] = []
+
+    def add_app(self, app: str) -> None:
+        self._add_entry(AppListEntry(app=app))
+
+    def add_app_family(self, app_family: str) -> None:
+        self._add_entry(AppListEntry(app_family=app_family))
+
+    def list_all_app(self) -> List[str]:
+        return [e.app for e in self.entries if e.app is not None]
+
+    def list_all_app_family(self) -> List[str]:
+        return [e.app_family for e in self.entries if e.app_family is not None]
+
+
+class AppListEditPayload(AppList, PolicyListId):
+    pass
+
+
+class AppListInfo(AppList, PolicyListInfo):
+    pass

catalystwan/models/policy/list/app_probe.py

@@ -0,0 +1,42 @@
+# Copyright 2024 Cisco Systems, Inc. and its affiliates
+
+from typing import List, Literal, Optional
+
+from pydantic import BaseModel, ConfigDict, Field
+
+from catalystwan.models.common import TLOCColor
+from catalystwan.models.policy.policy_list import PolicyListBase, PolicyListId, PolicyListInfo
+
+
+class ColorDSCPMap(BaseModel):
+    color: TLOCColor
+    dscp: Optional[int] = Field(default=None, ge=0, le=63)
+
+
+class AppProbeClassListEntry(BaseModel):
+    model_config = ConfigDict(populate_by_name=True)
+
+    forwarding_class: str = Field(serialization_alias="forwardingClass", validation_alias="forwardingClass")
+    map: List[ColorDSCPMap] = []
+
+    def add_color_mapping(self, color: TLOCColor, dscp: Optional[int] = None) -> None:
+        self.map.append(ColorDSCPMap(color=color, dscp=dscp))
+
+
+class AppProbeClassList(PolicyListBase):
+    type: Literal["appProbe"] = "appProbe"
+    entries: List[AppProbeClassListEntry] = []
+
+    def assign_forwarding_class(self, name: str) -> AppProbeClassListEntry:
+        # App probe class list must have only one entry!
+        entry = AppProbeClassListEntry(forwarding_class=name)
+        self._add_entry(entry, single=True)
+        return entry
+
+
+class AppProbeClassListEditPayload(AppProbeClassList, PolicyListId):
+    pass
+
+
+class AppProbeClassListInfo(AppProbeClassList, PolicyListInfo):
+    pass

catalystwan/models/policy/list/as_path.py

@@ -0,0 +1,30 @@
+# Copyright 2022 Cisco Systems, Inc. and its affiliates
+
+from typing import List, Literal
+
+from pydantic import BaseModel, ConfigDict, Field
+
+from catalystwan.models.policy.policy_list import PolicyListBase, PolicyListId, PolicyListInfo
+
+
+class ASPathListEntry(BaseModel):
+    model_config = ConfigDict(populate_by_name=True)
+
+    as_path: str = Field(serialization_alias="asPath", validation_alias="asPath")
+
+
+class ASPathList(PolicyListBase):
+    type: Literal["asPath"] = "asPath"
+    entries: List[ASPathListEntry] = []
+
+    def add_as_path(self, as_path: str):
+        as_path_entry = ASPathListEntry(as_path=as_path)
+        self._add_entry(entry=as_path_entry)
+
+
+class ASPathListEditPayload(ASPathList, PolicyListId):
+    pass
+
+
+class ASPathListInfo(ASPathList, PolicyListInfo):
+    pass

catalystwan/models/policy/list/class_map.py

@@ -0,0 +1,30 @@
+# Copyright 2022 Cisco Systems, Inc. and its affiliates
+
+from typing import List, Literal
+
+from pydantic import BaseModel, Field
+
+from catalystwan.models.common import IntStr
+from catalystwan.models.policy.policy_list import PolicyListBase, PolicyListId, PolicyListInfo
+
+
+class ClassMapListEntry(BaseModel):
+    queue: IntStr = Field(ge=0, le=7)
+
+
+class ClassMapList(PolicyListBase):
+    type: Literal["class"] = "class"
+    entries: List[ClassMapListEntry] = []
+
+    def assign_queue(self, queue: int) -> None:
+        # Class map list must have only one entry!
+        entry = ClassMapListEntry(queue=queue)
+        self._add_entry(entry, single=True)
+
+
+class ClassMapListEditPayload(ClassMapList, PolicyListId):
+    pass
+
+
+class ClassMapListInfo(ClassMapList, PolicyListInfo):
+    pass

catalystwan/models/policy/list/color.py

@@ -0,0 +1,28 @@
+# Copyright 2022 Cisco Systems, Inc. and its affiliates
+
+from typing import List, Literal
+
+from pydantic import BaseModel
+
+from catalystwan.models.common import TLOCColor
+from catalystwan.models.policy.policy_list import PolicyListBase, PolicyListId, PolicyListInfo
+
+
+class ColorListEntry(BaseModel):
+    color: TLOCColor
+
+
+class ColorList(PolicyListBase):
+    type: Literal["color"] = "color"
+    entries: List[ColorListEntry] = []
+
+    def add_color(self, color: TLOCColor) -> None:
+        self._add_entry(ColorListEntry(color=color))
+
+
+class ColorListEditPayload(ColorList, PolicyListId):
+    pass
+
+
+class ColorListInfo(ColorList, PolicyListInfo):
+    pass

catalystwan/models/policy/list/communities.py

@@ -0,0 +1,83 @@
+# Copyright 2024 Cisco Systems, Inc. and its affiliates
+
+from ipaddress import IPv4Address, IPv6Address
+from typing import List, Literal, Optional, Union
+
+from pydantic import BaseModel, ConfigDict, Field
+
+from catalystwan.models.common import WellKnownBGPCommunities
+from catalystwan.models.policy.policy_list import PolicyListBase, PolicyListId, PolicyListInfo
+
+
+class CommunityListEntry(BaseModel):
+    model_config = ConfigDict(populate_by_name=True)
+
+    community: str = Field(examples=["1000:10000", "internet", "local-AS"])
+
+
+class ExtendedCommunityListEntry(BaseModel):
+    model_config = ConfigDict(populate_by_name=True)
+    community: str = Field(examples=["soo 1.2.3.4:1000", "rt 10:100"])
+
+
+class CommunityListBase(PolicyListBase):
+    entries: List[CommunityListEntry] = []
+
+    def add_well_known_community(self, community: WellKnownBGPCommunities) -> None:
+        self._add_entry(CommunityListEntry(community=community))
+
+    def add_community(self, as_number: int, community_number: int) -> None:
+        self._add_entry(CommunityListEntry(community=f"{as_number}:{community_number}"))
+
+
+class CommunityList(CommunityListBase):
+    type: Literal["community"] = "community"
+
+
+class CommunityListEditPayload(CommunityList, PolicyListId):
+    pass
+
+
+class CommunityListInfo(CommunityList, PolicyListInfo):
+    pass
+
+
+class ExpandedCommunityList(CommunityListBase):
+    type: Literal["expandedCommunity"] = "expandedCommunity"
+
+
+class ExpandedCommunityListEditPayload(ExpandedCommunityList, PolicyListId):
+    pass
+
+
+class ExpandedCommunityListInfo(ExpandedCommunityList, PolicyListInfo):
+    pass
+
+
+class ExtendedCommunityList(PolicyListBase):
+    entries: List[ExtendedCommunityListEntry] = []
+    type: Literal["extCommunity"] = "extCommunity"
+
+    def add_site_of_origin_community(
+        self, ip_address: Union[IPv4Address, IPv6Address], port: int, name: Optional[str] = None
+    ):
+        entry = f"soo {ip_address}:{port}"
+        self.entries.append(ExtendedCommunityListEntry(community=self._append_name(entry, name)))
+
+    def add_route_target_community(self, as_number: int, community_number: int, name: Optional[str] = None):
+        entry = f"rt {as_number}:{community_number}"
+        self.entries.append(ExtendedCommunityListEntry(community=self._append_name(entry, name)))
+
+    def _append_name(self, entry: str, name: Optional[str] = None) -> str:
+        if not name:
+            return entry
+
+        return f"{name} {entry}"
+
+
+class ExtendedCommunityListEditPayload(ExtendedCommunityList, PolicyListId):
+    pass
+
+
+class ExtendedCommunityListInfo(ExtendedCommunityList, PolicyListInfo):
+    pass

catalystwan/models/policy/list/data_ipv6_prefix.py

@@ -0,0 +1,30 @@
+# Copyright 2022 Cisco Systems, Inc. and its affiliates
+
+from ipaddress import IPv6Interface
+from typing import List, Literal
+
+from pydantic import BaseModel, ConfigDict, Field
+
+from catalystwan.models.policy.policy_list import PolicyListBase, PolicyListId, PolicyListInfo
+
+
+class DataIPv6PrefixListEntry(BaseModel):
+    model_config = ConfigDict(populate_by_name=True)
+
+    ipv6_prefix: IPv6Interface = Field(serialization_alias="ipv6Prefix", validation_alias="ipv6Prefix")
+
+
+class DataIPv6PrefixList(PolicyListBase):
+    type: Literal["dataIpv6Prefix"] = "dataIpv6Prefix"
+    entries: List[DataIPv6PrefixListEntry] = []
+
+    def add_prefix(self, ipv6_prefix: IPv6Interface) -> None:
+        self._add_entry(DataIPv6PrefixListEntry(ipv6_prefix=ipv6_prefix))
+
+
+class DataIPv6PrefixListEditPayload(DataIPv6PrefixList, PolicyListId):
+    pass
+
+
+class DataIPv6PrefixListInfo(DataIPv6PrefixList, PolicyListInfo):
+    pass

catalystwan/models/policy/list/data_prefix.py

@@ -0,0 +1,30 @@
+# Copyright 2022 Cisco Systems, Inc. and its affiliates
+
+from ipaddress import IPv4Network
+from typing import List, Literal
+
+from pydantic import BaseModel, ConfigDict, Field
+
+from catalystwan.models.policy.policy_list import PolicyListBase, PolicyListId, PolicyListInfo
+
+
+class DataPrefixListEntry(BaseModel):
+    model_config = ConfigDict(populate_by_name=True)
+
+    ip_prefix: IPv4Network = Field(serialization_alias="ipPrefix", validation_alias="ipPrefix")
+
+
+class DataPrefixList(PolicyListBase):
+    type: Literal["dataPrefix"] = "dataPrefix"
+    entries: List[DataPrefixListEntry] = []
+
+    def add_prefix(self, ip_prefix: IPv4Network) -> None:
+        self._add_entry(DataPrefixListEntry(ip_prefix=ip_prefix))
+
+
+class DataPrefixListEditPayload(DataPrefixList, PolicyListId):
+    pass
+
+
+class DataPrefixListInfo(DataPrefixList, PolicyListInfo):
+    pass

catalystwan/models/policy/list/fax_protocol.py

@@ -0,0 +1,45 @@
+# Copyright 2024 Cisco Systems, Inc. and its affiliates
+
+from typing import List, Literal, Optional
+
+from pydantic import BaseModel, ConfigDict, Field
+
+from catalystwan.models.common import FaxFallBackProtocols, FaxPrimaryProtocols
+from catalystwan.models.policy.policy_list import PolicyListBase, PolicyListId, PolicyListInfo
+
+
+class T38Options(BaseModel):
+    model_config = ConfigDict(populate_by_name=True)
+    version: int = Field(ge=0)
+    rate: str
+    nse: str
+    lowSpeed: int = Field(ge=0, validation_alias="lowSpeed", serialization_alias="lowSpeed")
+    highSpeed: int = Field(ge=0, validation_alias="highSpeed", serialization_alias="highSpeed")
+    fallbackProtocol: FaxFallBackProtocols = Field(
+        validation_alias="fallbackProtocol", serialization_alias="fallbackProtocol"
+    )
+
+
+class FaxProtocolListEntry(BaseModel):
+    model_config = ConfigDict(populate_by_name=True)
+    primary_protocol: FaxPrimaryProtocols = Field(
+        validation_alias="primaryProtocol", serialization_alias="primaryProtocol"
+    )
+    ecm: bool = Field(default=False)
+    t38_options: Optional[T38Options] = Field(
+        default=None, serialization_alias="t38Options", validation_alias="t38Options"
+    )
+
+
+class FaxProtocolList(PolicyListBase):
+    model_config = ConfigDict(populate_by_name=True)
+    type: Literal["faxProtocol", "faxprotocol"] = "faxProtocol"
+    entries: List[FaxProtocolListEntry] = Field(default_factory=list)
+
+
+class FaxProtocolListEditPayload(FaxProtocolList, PolicyListId):
+    pass
+
+
+class FaxProtocolListInfo(FaxProtocolList, PolicyListInfo):
+    pass

catalystwan/models/policy/list/fqdn.py

@@ -0,0 +1,24 @@
+# Copyright 2022 Cisco Systems, Inc. and its affiliates
+
+from typing import List, Literal
+
+from pydantic import BaseModel
+
+from catalystwan.models.policy.policy_list import PolicyListBase, PolicyListId, PolicyListInfo
+
+
+class FQDNListEntry(BaseModel):
+    pattern: str
+
+
+class FQDNList(PolicyListBase):
+    type: Literal["fqdn"] = "fqdn"
+    entries: List[FQDNListEntry] = []
+
+
+class FQDNListEditPayload(FQDNList, PolicyListId):
+    pass
+
+
+class FQDNListInfo(FQDNList, PolicyListInfo):
+    pass