catalystwan 0.41.2__py3-none-any.whl → 0.41.2.dev1__py3-none-any.whl

catalystwan/models/configuration/feature_profile/sdwan/policy_object/security/intrusion_prevention.py

@@ -0,0 +1,58 @@
+# Copyright 2024 Cisco Systems, Inc. and its affiliates
+
+from typing import Literal, Optional
+from uuid import UUID
+
+from pydantic import AliasPath, ConfigDict, Field
+
+from catalystwan.api.configuration_groups.parcel import Global, _ParcelBase
+from catalystwan.models.configuration.feature_profile.common import RefIdItem
+
+SignatureSet = Literal["balanced", "connectivity", "security"]
+InspectionMode = Literal["detection", "protection"]
+LogLevel = Literal["emergency", "alert", "critical", "error", "warning", "notice", "info", "debug"]
+
+
+class IntrusionPreventionParcel(_ParcelBase):
+    model_config = ConfigDict(populate_by_name=True)
+    type_: Literal["unified/intrusion-prevention"] = Field(default="unified/intrusion-prevention", exclude=True)
+    signature_set: Global[SignatureSet] = Field(
+        default=Global[SignatureSet](value="balanced"), validation_alias=AliasPath("data", "signatureSet")
+    )
+    inspection_mode: Global[InspectionMode] = Field(
+        default=Global[InspectionMode](value="detection"), validation_alias=AliasPath("data", "inspectionMode")
+    )
+    signature_allowed_list: Optional[RefIdItem] = Field(
+        default=None, validation_alias=AliasPath("data", "signatureAllowedList")
+    )
+    log_level: Global[LogLevel] = Field(
+        default=Global[LogLevel](value="error"), validation_alias=AliasPath("data", "logLevel")
+    )
+    custom_signature: Global[bool] = Field(
+        default=Global[bool](value=False), validation_alias=AliasPath("data", "customSignature")
+    )
+
+    @classmethod
+    def create(
+        cls,
+        parcel_name: str,
+        parcel_description: str,
+        signature_set: SignatureSet = "balanced",
+        inspection_mode: InspectionMode = "detection",
+        signature_allowed_list: Optional[UUID] = None,
+        log_level: LogLevel = "error",
+        custom_signature: bool = False,
+    ) -> "IntrusionPreventionParcel":
+        sal: Optional[RefIdItem] = None
+        if signature_allowed_list:
+            sal = RefIdItem(ref_id=Global[str](value=str(signature_allowed_list)))
+
+        return cls(
+            parcel_name=parcel_name,
+            parcel_description=parcel_description,
+            signature_set=Global[SignatureSet](value=signature_set),
+            inspection_mode=Global[InspectionMode](value=inspection_mode),
+            signature_allowed_list=sal,
+            log_level=Global[LogLevel](value=log_level),
+            custom_signature=Global[bool](value=custom_signature),
+        )

catalystwan/models/configuration/feature_profile/sdwan/policy_object/security/ips_signature.py

@@ -1,13 +1,13 @@
 # Copyright 2024 Cisco Systems, Inc. and its affiliates
 
-from typing import List
+from typing import List, Literal
 
-from pydantic import AliasPath, BaseModel, ConfigDict, Field, field_validator
+from pydantic import AliasPath, ConfigDict, Field, field_validator
 
-from catalystwan.api.configuration_groups.parcel import Global, _ParcelBase, as_global
+from catalystwan.api.configuration_groups.parcel import Global, _ParcelBase, _ParcelEntry, as_global
 
 
-class IPSSignatureListEntry(BaseModel):
+class IPSSignatureListEntry(_ParcelEntry):
     model_config = ConfigDict(populate_by_name=True)
     generator_id: Global[str] = Field(
         serialization_alias="generatorId", validation_alias="generatorId", description="Range 0 to 4294967295"
@@ -30,7 +30,9 @@ class IPSSignatureListEntry(BaseModel):
 
 
 class IPSSignatureParcel(_ParcelBase):
-    entries: List[IPSSignatureListEntry] = Field(default=[], validation_alias=AliasPath("data", "entries"))
+    model_config = ConfigDict(populate_by_name=True)
+    type_: Literal["security-ipssignature"] = Field(default="security-ipssignature", exclude=True)
+    entries: List[IPSSignatureListEntry] = Field(default_factory=list, validation_alias=AliasPath("data", "entries"))
 
     def add_signature(self, signature: str):
         generator_id, signature_id = signature.split(":")

catalystwan/models/configuration/feature_profile/sdwan/policy_object/security/local_domain.py

@@ -1,13 +1,13 @@
 # Copyright 2024 Cisco Systems, Inc. and its affiliates
 
-from typing import List
+from typing import List, Literal
 
-from pydantic import AliasPath, BaseModel, ConfigDict, Field
+from pydantic import AliasPath, ConfigDict, Field
 
-from catalystwan.api.configuration_groups.parcel import Global, _ParcelBase, as_global
+from catalystwan.api.configuration_groups.parcel import Global, _ParcelBase, _ParcelEntry, as_global
 
 
-class LocalDomainListEntry(BaseModel):
+class LocalDomainListEntry(_ParcelEntry):
     model_config = ConfigDict(populate_by_name=True)
     name_server: Global[str] = Field(
         serialization_alias="nameServer", validation_alias="nameServer", description="Ex: cisco.com, *.cisco.com"
@@ -15,7 +15,9 @@ class LocalDomainListEntry(BaseModel):
 
 
 class LocalDomainParcel(_ParcelBase):
-    entries: List[LocalDomainListEntry] = Field(default=[], validation_alias=AliasPath("data", "entries"))
+    model_config = ConfigDict(populate_by_name=True)
+    type_: Literal["security-localdomain"] = Field(default="security-localdomain", exclude=True)
+    entries: List[LocalDomainListEntry] = Field(default_factory=list, validation_alias=AliasPath("data", "entries"))
 
     def from_local_domains(self, domains: List[str]):
         for domain in domains:

catalystwan/models/configuration/feature_profile/sdwan/policy_object/security/object_group.py

@@ -0,0 +1,72 @@
+# Copyright 2025 Cisco Systems, Inc. and its affiliates
+
+from typing import List, Literal, Optional, Union
+
+from pydantic import AliasPath, BaseModel, Field
+
+from catalystwan.api.configuration_groups.parcel import Global, Variable, _ParcelBase, _ParcelEntry
+from catalystwan.models.common import GeoLocation
+from catalystwan.models.configuration.feature_profile.common import RefIdItem
+
+SequenceIpType = Literal[
+    "ipv4",
+    "ipv6",
+]
+
+
+class DataPrefix(BaseModel):
+    ipv4_value: Union[Global[List[str]], Variable] = Field(
+        validation_alias="ipv4Value", serialization_alias="ipv4Value"
+    )
+
+
+class DataPrefixIpv6(BaseModel):
+    ipv6_value: Union[Global[List[str]], Variable] = Field(
+        validation_alias="ipv6Value", serialization_alias="ipv6Value"
+    )
+
+
+class Fqdn(BaseModel):
+    fqdn_value: Union[Global[List[Union[str, Global[str]]]], Variable] = Field(
+        validation_alias="fqdnValue", serialization_alias="fqdnValue"
+    )
+
+
+class Port(BaseModel):
+    port_value: Union[Global[List[str]], Variable] = Field(
+        validation_alias="portValue", serialization_alias="portValue"
+    )
+
+
+class SecurityObjectGroupEntries(_ParcelEntry):
+    data_prefix: Optional[DataPrefix] = Field(
+        default=None, validation_alias="dataPrefix", serialization_alias="dataPrefix"
+    )
+    data_prefix_ipv6: Optional[DataPrefixIpv6] = Field(
+        default=None, validation_alias="dataPrefixIpv6", serialization_alias="dataPrefixIpv6"
+    )
+    data_prefix_ipv6_list: Optional[RefIdItem] = Field(
+        default=None, validation_alias="dataPrefixIpv6List", serialization_alias="dataPrefixIpv6List"
+    )
+    data_prefix_list: Optional[RefIdItem] = Field(
+        default=None, validation_alias="dataPrefixList", serialization_alias="dataPrefixList"
+    )
+    fqdn: Optional[Fqdn] = Field(default=None)
+    fqdn_list: Optional[RefIdItem] = Field(default=None, validation_alias="fqdnList", serialization_alias="fqdnList")
+    geo_location: Optional[Union[Variable, Global[List[GeoLocation]]]] = Field(
+        default=None, validation_alias="geoLocation", serialization_alias="geoLocation"
+    )
+    geo_location_list: Optional[RefIdItem] = Field(
+        default=None, validation_alias="geoLocationList", serialization_alias="geoLocationList"
+    )
+    port: Optional[Port] = Field(default=None)
+    port_list: Optional[RefIdItem] = Field(default=None, validation_alias="portList", serialization_alias="portList")
+
+
+class SecurityObjectGroupParcel(_ParcelBase):
+    entries: List[SecurityObjectGroupEntries] = Field(
+        validation_alias=AliasPath("data", "entries"), default_factory=list
+    )
+    sequence_ip_type: Optional[Global[SequenceIpType]] = Field(
+        default=None, validation_alias="sequenceIpType", serialization_alias="sequenceIpType"
+    )

catalystwan/models/configuration/feature_profile/sdwan/policy_object/security/protocol_list.py

@@ -1,19 +1,21 @@
 # Copyright 2024 Cisco Systems, Inc. and its affiliates
 
-from typing import List
+from typing import List, Literal
 
-from pydantic import AliasPath, BaseModel, ConfigDict, Field
+from pydantic import AliasPath, ConfigDict, Field
 
-from catalystwan.api.configuration_groups.parcel import Global, _ParcelBase, as_global
+from catalystwan.api.configuration_groups.parcel import Global, _ParcelBase, _ParcelEntry, as_global
 
 
-class ProtocolListEntry(BaseModel):
+class ProtocolListEntry(_ParcelEntry):
     model_config = ConfigDict(populate_by_name=True)
     protocol: Global[str] = Field(serialization_alias="protocolName", validation_alias="protocolName")
 
 
 class ProtocolListParcel(_ParcelBase):
-    entries: List[ProtocolListEntry] = Field(default=[], validation_alias=AliasPath("data", "entries"))
+    model_config = ConfigDict(populate_by_name=True)
+    type_: Literal["security-protocolname"] = Field(default="security-protocolname", exclude=True)
+    entries: List[ProtocolListEntry] = Field(default_factory=list, validation_alias=AliasPath("data", "entries"))
 
     def add_protocol(self, protocol: str):
         self.entries.append(ProtocolListEntry(protocol=as_global(protocol)))

catalystwan/models/configuration/feature_profile/sdwan/policy_object/security/rule_set.py

@@ -0,0 +1,137 @@
+# Copyright 2025 Cisco Systems, Inc. and its affiliates
+from ipaddress import IPv4Network, IPv6Network
+from typing import List, Optional, Union
+
+from pydantic import AliasPath, BaseModel, Field
+
+from catalystwan.api.configuration_groups.parcel import Global, Variable, _ParcelBase
+from catalystwan.models.common import GeoLocation, IntStr, ProtocolName, SecurityBaseAction, SecuritySequenceIpType
+from catalystwan.models.configuration.feature_profile.common import RefIdItem
+
+
+class SourceIp(BaseModel):
+    ipv4_value: Union[Global[List[IPv4Network]], Variable] = Field(
+        validation_alias="ipv4Value", serialization_alias="ipv4Value"
+    )
+
+
+class SourceIpv6(BaseModel):
+    ipv6_value: Union[Global[List[IPv6Network]], Variable] = Field(
+        validation_alias="ipv6Value", serialization_alias="ipv6Value"
+    )
+
+
+class DestinationIp(BaseModel):
+    ipv4_value: Union[Global[List[IPv4Network]], Variable] = Field(
+        validation_alias="ipv4Value", serialization_alias="ipv4Value"
+    )
+
+
+class DestinationIpv6(BaseModel):
+    ipv6_value: Union[Global[List[IPv6Network]], Variable] = Field(
+        validation_alias="ipv6Value", serialization_alias="ipv6Value"
+    )
+
+
+class DestinationFqdn(BaseModel):
+    fqdn_value: Union[Global[List[str]], Variable] = Field(
+        validation_alias="fqdnValue", serialization_alias="fqdnValue"
+    )
+
+
+class SourcePort(BaseModel):
+    port_value: Union[Global[List[str]], Variable] = Field(
+        validation_alias="portValue", serialization_alias="portValue"
+    )
+
+
+class DestinationPort(BaseModel):
+    port_value: Union[Global[List[str]], Variable] = Field(
+        validation_alias="portValue", serialization_alias="portValue"
+    )
+
+
+class Sequences(BaseModel):
+    action: Union[Global[SecurityBaseAction], Variable] = Field()
+    sequence_id: Union[Variable, Global[IntStr]] = Field(
+        validation_alias="sequenceId", serialization_alias="sequenceId"
+    )
+    sequence_name: Union[Variable, Global[str]] = Field(
+        validation_alias="sequenceName", serialization_alias="sequenceName"
+    )
+    destination_data_ipv6_prefix_list: Optional[RefIdItem] = Field(
+        default=None,
+        validation_alias="destinationDataIpv6PrefixList",
+        serialization_alias="destinationDataIpv6PrefixList",
+    )
+    destination_data_prefix_list: Optional[RefIdItem] = Field(
+        default=None, validation_alias="destinationDataPrefixList", serialization_alias="destinationDataPrefixList"
+    )
+    destination_fqdn: Optional[DestinationFqdn] = Field(
+        default=None, validation_alias="destinationFqdn", serialization_alias="destinationFqdn"
+    )
+    destination_fqdn_list: Optional[RefIdItem] = Field(
+        default=None, validation_alias="destinationFqdnList", serialization_alias="destinationFqdnList"
+    )
+    destination_geo_location: Optional[Union[Variable, Global[List[GeoLocation]]]] = Field(
+        default=None, validation_alias="destinationGeoLocation", serialization_alias="destinationGeoLocation"
+    )
+    destination_geo_location_list: Optional[RefIdItem] = Field(
+        default=None, validation_alias="destinationGeoLocationList", serialization_alias="destinationGeoLocationList"
+    )
+    destination_ip: Optional[DestinationIp] = Field(
+        default=None, validation_alias="destinationIp", serialization_alias="destinationIp"
+    )
+    destination_ipv6: Optional[DestinationIpv6] = Field(
+        default=None, validation_alias="destinationIpv6", serialization_alias="destinationIpv6"
+    )
+    destination_object_group: Optional[RefIdItem] = Field(
+        default=None, validation_alias="destinationObjectGroup", serialization_alias="destinationObjectGroup"
+    )
+    destination_port: Optional[DestinationPort] = Field(
+        default=None, validation_alias="destinationPort", serialization_alias="destinationPort"
+    )
+    destination_port_list: Optional[RefIdItem] = Field(
+        default=None, validation_alias="destinationPortList", serialization_alias="destinationPortList"
+    )
+    protocol: Optional[Global[List[str]]] = Field(default=None)
+    protocol_name: Optional[Union[Variable, Global[List[ProtocolName]]]] = Field(
+        default=None, validation_alias="protocolName", serialization_alias="protocolName"
+    )
+    protocol_name_list: Optional[RefIdItem] = Field(
+        default=None, validation_alias="protocolNameList", serialization_alias="protocolNameList"
+    )
+    sequence_ip_type: Optional[Global[SecuritySequenceIpType]] = Field(
+        default=None, validation_alias="sequenceIpType", serialization_alias="sequenceIpType"
+    )
+    source_data_ipv6_prefix_list: Optional[RefIdItem] = Field(
+        default=None, validation_alias="sourceDataIpv6PrefixList", serialization_alias="sourceDataIpv6PrefixList"
+    )
+    source_data_prefix_list: Optional[RefIdItem] = Field(
+        default=None, validation_alias="sourceDataPrefixList", serialization_alias="sourceDataPrefixList"
+    )
+    source_geo_location: Optional[Union[Variable, Global[List[ProtocolName]]]] = Field(
+        default=None, validation_alias="sourceGeoLocation", serialization_alias="sourceGeoLocation"
+    )
+    source_geo_location_list: Optional[RefIdItem] = Field(
+        default=None, validation_alias="sourceGeoLocationList", serialization_alias="sourceGeoLocationList"
+    )
+    source_ip: Optional[SourceIp] = Field(default=None, validation_alias="sourceIp", serialization_alias="sourceIp")
+    source_ipv6: Optional[SourceIpv6] = Field(
+        default=None, validation_alias="sourceIpv6", serialization_alias="sourceIpv6"
+    )
+    source_object_group: Optional[RefIdItem] = Field(
+        default=None, validation_alias="sourceObjectGroup", serialization_alias="sourceObjectGroup"
+    )
+    source_port: Optional[SourcePort] = Field(
+        default=None, validation_alias="sourcePort", serialization_alias="sourcePort"
+    )
+    source_port_list: Optional[RefIdItem] = Field(
+        default=None, validation_alias="sourcePortList", serialization_alias="sourcePortList"
+    )
+
+
+class SecurityRuleSetParcel(_ParcelBase):
+    sequences: List[Sequences] = Field(
+        validation_alias=AliasPath("data", "sequences"), description="select definition of rule"
+    )

catalystwan/models/configuration/feature_profile/sdwan/policy_object/security/scalable_group_tag.py

@@ -0,0 +1,26 @@
+# Copyright 2024 Cisco Systems, Inc. and its affiliates
+from typing import List, Literal
+
+from pydantic import AliasPath, ConfigDict, Field
+
+from catalystwan.api.configuration_groups.parcel import Global, _ParcelBase, _ParcelEntry
+
+
+class ScalableGroupTagEntry(_ParcelEntry):
+    model_config = ConfigDict(populate_by_name=True)
+    sgt_name: Global[str] = Field(validation_alias="sgtName", serialization_alias="sgtName")
+    tag: Global[str]
+
+
+class ScalableGroupTagParcel(_ParcelBase):
+    model_config = ConfigDict(populate_by_name=True)
+    type_: Literal["security-scalablegrouptag"] = Field(default="security-scalablegrouptag", exclude=True)
+    entries: List[ScalableGroupTagEntry] = Field(validation_alias=AliasPath("data", "entries"), default_factory=list)
+
+    def add_entry(self, sgt_name: str, tag: str):
+        self.entries.append(
+            ScalableGroupTagEntry(
+                sgt_name=Global[str](value=sgt_name),
+                tag=Global[str](value=tag),
+            )
+        )

catalystwan/models/configuration/feature_profile/sdwan/policy_object/security/security_port.py

@@ -1,35 +1,45 @@
 # Copyright 2024 Cisco Systems, Inc. and its affiliates
 
-from typing import List
+from typing import List, Literal
 
-from pydantic import AliasPath, BaseModel, ConfigDict, Field, field_validator
+from pydantic import AliasPath, ConfigDict, Field, field_validator
 
-from catalystwan.api.configuration_groups.parcel import Global, _ParcelBase, as_global
+from catalystwan.api.configuration_groups.parcel import Global, _ParcelBase, _ParcelEntry
 
 
-class SecurityPortListEntry(BaseModel):
+class SecurityPortListEntry(_ParcelEntry):
     model_config = ConfigDict(populate_by_name=True)
-    port: Global[str] = Field(description="Ex: 1 or 1-10 by range. Range 0 to 65530")
+    port: Global[str] = Field(
+        description="Ex: 1 or 1-10 by range. Range 0 to 65535"
+    )  # Not clear why UI validation accepts max 65530
 
     @field_validator("port")
     @classmethod
     def check_port(cls, port: Global[str]):
         value = port.value
         if value.count("-") == 0:
-            assert 0 <= int(value) <= 65530
+            assert 0 <= int(value) <= 65535
             return port
 
         start_port, end_port = value.split("-")
         start = int(start_port)
         end = int(end_port)
-        assert 0 <= start <= 65530
-        assert 0 <= end <= 65530
+        assert 0 <= start <= 65535
+        assert 0 <= end <= 65535
         assert start < end
         return port
 
 
 class SecurityPortParcel(_ParcelBase):
-    entries: List[SecurityPortListEntry] = Field(default=[], validation_alias=AliasPath("data", "entries"))
+    model_config = ConfigDict(populate_by_name=True)
+    type_: Literal["security-port"] = Field(default="security-port", exclude=True)
+    entries: List[SecurityPortListEntry] = Field(default_factory=list, validation_alias=AliasPath("data", "entries"))
+
+    def _add_port(self, port: str):
+        self.entries.append(SecurityPortListEntry(port=Global[str](value=port)))
+
+    def add_port(self, port: int):
+        self._add_port(str(port))
 
-    def add_port(self, port: str):
-        self.entries.append(SecurityPortListEntry(port=as_global(port)))
+    def add_port_range(self, start_port: int, end_port: int):
+        self._add_port(f"{start_port}-{end_port}")

catalystwan/models/configuration/feature_profile/sdwan/policy_object/security/ssl_decryption.py

@@ -0,0 +1,126 @@
+# Copyright 2024 Cisco Systems, Inc. and its affiliates
+
+from typing import Literal, Optional
+
+from pydantic import AliasPath, BaseModel, ConfigDict, Field
+
+from catalystwan.api.configuration_groups.parcel import Global, _ParcelBase
+
+Action = Literal["decrypt", "drop"]
+UnspportedModeAction = Literal["drop", "no-decrypt"]
+CertificateRevocationStatus = Literal["ocsp", "none"]
+FailureMode = Literal["close", "open"]
+KeyModulus = Literal["1024", "2048", "4096"]
+EckeyType = Literal["P256", "P384", "P521"]
+TlsVersion = Literal["TLSv1", "TLSv1.1", "TLSv1.2"]
+CaTpLabel = Literal["PROXY-SIGNING-CA"]
+
+
+class CaCertBundle(BaseModel):
+    model_config = ConfigDict(populate_by_name=True, extra="forbid")
+    default: Global[bool] = Field(default=Global[bool](value=True))
+    file_name: Optional[Global[str]] = Field(default=None, validation_alias="fileName", serialization_alias="fileName")
+    bundle_string: Optional[Global[str]] = Field(
+        default=None, validation_alias="bundleString", serialization_alias="bundleString"
+    )
+
+    @classmethod
+    def create(
+        cls,
+        default: bool = True,
+        file_name: Optional[str] = None,
+        bundle_string: Optional[str] = None,
+    ) -> "CaCertBundle":
+        return cls(
+            default=Global[bool](value=default),
+            file_name=Global[str](value=file_name) if file_name else None,
+            bundle_string=Global[str](value=bundle_string) if bundle_string else None,
+        )
+
+
+class SslDecryptionParcel(_ParcelBase):
+    type_: Literal["unified/ssl-decryption"] = Field(default="unified/ssl-decryption", exclude=True)
+    parcel_description: str = Field(
+        default="",
+        serialization_alias="description",
+        validation_alias="description",
+        description="Set the parcel description",
+    )
+    ssl_enable: Global[bool] = Field(default=Global[bool](value=True), validation_alias=AliasPath("data", "sslEnable"))
+    expired_certificate: Global[Action] = Field(
+        default=Global[Action](value="drop"), validation_alias=AliasPath("data", "expiredCertificate")
+    )
+    untrusted_certificate: Global[Action] = Field(
+        default=Global[Action](value="drop"), validation_alias=AliasPath("data", "untrustedCertificate")
+    )
+    certificate_revocation_status: Global[CertificateRevocationStatus] = Field(
+        default=Global[CertificateRevocationStatus](value="none"),
+        validation_alias=AliasPath("data", "certificateRevocationStatus"),
+    )
+    unknown_status: Optional[Global[Action]] = Field(default=None, validation_alias=AliasPath("data", "unknownStatus"))
+    unsupported_protocol_versions: Global[UnspportedModeAction] = Field(
+        default=Global[UnspportedModeAction](value="drop"),
+        validation_alias=AliasPath("data", "unsupportedProtocolVersions"),
+    )
+    unsupported_cipher_suites: Global[UnspportedModeAction] = Field(
+        default=Global[UnspportedModeAction](value="drop"),
+        validation_alias=AliasPath("data", "unsupportedCipherSuites"),
+    )
+    failure_mode: Global[FailureMode] = Field(
+        default=Global[FailureMode](value="close"), validation_alias=AliasPath("data", "failureMode")
+    )
+    ca_cert_bundle: CaCertBundle = Field(default=CaCertBundle(), validation_alias=AliasPath("data", "caCertBundle"))
+    key_modulus: Global[KeyModulus] = Field(
+        default=Global[KeyModulus](value="1024"), validation_alias=AliasPath("data", "keyModulus")
+    )
+    eckey_type: Global[EckeyType] = Field(
+        default=Global[EckeyType](value="P256"), validation_alias=AliasPath("data", "eckeyType")
+    )
+    certificate_lifetime: Global[str] = Field(
+        default=Global[str](value="1"), validation_alias=AliasPath("data", "certificateLifetime")
+    )
+    min_tls_ver: Global[TlsVersion] = Field(
+        default=Global[TlsVersion](value="TLSv1"), validation_alias=AliasPath("data", "minTlsVer")
+    )
+    ca_tp_label: Global[CaTpLabel] = Field(
+        default=Global[CaTpLabel](value="PROXY-SIGNING-CA"), validation_alias=AliasPath("data", "caTpLabel")
+    )
+
+    @classmethod
+    def create(
+        cls,
+        parcel_name: str,
+        parcel_description: str,
+        ssl_enable: bool = True,
+        expired_certificate: Action = "drop",
+        untrusted_certificate: Action = "drop",
+        certificate_revocation_status: CertificateRevocationStatus = "none",
+        unknown_status: Optional[Action] = None,
+        unsupported_protocol_versions: UnspportedModeAction = "drop",
+        unsupported_cipher_suites: UnspportedModeAction = "drop",
+        failure_mode: FailureMode = "close",
+        ca_cert_bundle: CaCertBundle = CaCertBundle(),
+        key_modulus: KeyModulus = "1024",
+        eckey_type: EckeyType = "P256",
+        certificate_lifetime: str = "1",
+        min_tls_ver: TlsVersion = "TLSv1",
+        ca_tp_label: CaTpLabel = "PROXY-SIGNING-CA",
+    ) -> "SslDecryptionParcel":
+        return cls(
+            parcel_name=parcel_name,
+            parcel_description=parcel_description,
+            ssl_enable=Global[bool](value=ssl_enable),
+            expired_certificate=Global[Action](value=expired_certificate),
+            untrusted_certificate=Global[Action](value=untrusted_certificate),
+            certificate_revocation_status=Global[CertificateRevocationStatus](value=certificate_revocation_status),
+            unknown_status=Global[Action](value=unknown_status) if unknown_status else None,
+            unsupported_protocol_versions=Global[UnspportedModeAction](value=unsupported_protocol_versions),
+            unsupported_cipher_suites=Global[UnspportedModeAction](value=unsupported_cipher_suites),
+            failure_mode=Global[FailureMode](value=failure_mode),
+            ca_cert_bundle=ca_cert_bundle,
+            key_modulus=Global[KeyModulus](value=key_modulus),
+            eckey_type=Global[EckeyType](value=eckey_type),
+            certificate_lifetime=Global[str](value=certificate_lifetime),
+            min_tls_ver=Global[TlsVersion](value=min_tls_ver),
+            ca_tp_label=Global[CaTpLabel](value=ca_tp_label),
+        )