pulumi-sdwan 0.3.0a1743057086__py3-none-any.whl → 0.3.1__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_sdwan/__init__.py +21 -0
- pulumi_sdwan/_inputs.py +18211 -17969
- pulumi_sdwan/activate_centralized_policy.py +15 -14
- pulumi_sdwan/advanced_inspection_profile_policy_definition.py +162 -161
- pulumi_sdwan/advanced_malware_protection_policy_definition.py +176 -175
- pulumi_sdwan/allow_url_list_policy_object.py +22 -21
- pulumi_sdwan/app_probe_class_policy_object.py +36 -35
- pulumi_sdwan/application_aware_routing_policy_definition.py +43 -42
- pulumi_sdwan/application_list_policy_object.py +22 -21
- pulumi_sdwan/application_priority_feature_profile.py +29 -28
- pulumi_sdwan/application_priority_qos_policy.py +78 -77
- pulumi_sdwan/application_priority_traffic_policy_policy.py +88 -87
- pulumi_sdwan/as_path_list_policy_object.py +22 -21
- pulumi_sdwan/attach_feature_device_template.py +15 -14
- pulumi_sdwan/block_url_list_policy_object.py +22 -21
- pulumi_sdwan/cedge_aaa_feature_template.py +337 -336
- pulumi_sdwan/cedge_global_feature_template.py +701 -700
- pulumi_sdwan/cedge_igmp_feature_template.py +57 -56
- pulumi_sdwan/cedge_multicast_feature_template.py +141 -140
- pulumi_sdwan/cedge_pim_feature_template.py +337 -336
- pulumi_sdwan/cellular_cedge_profile_feature_template.py +253 -252
- pulumi_sdwan/cellular_controller_feature_template.py +197 -196
- pulumi_sdwan/cellular_profile_feature_template.py +365 -364
- pulumi_sdwan/centralized_policy.py +36 -35
- pulumi_sdwan/cflowd_policy_definition.py +141 -140
- pulumi_sdwan/cisco_banner_feature_template.py +113 -112
- pulumi_sdwan/cisco_bfd_feature_template.py +141 -140
- pulumi_sdwan/cisco_bgp_feature_template.py +477 -476
- pulumi_sdwan/cisco_dhcp_server_feature_template.py +281 -280
- pulumi_sdwan/cisco_logging_feature_template.py +141 -140
- pulumi_sdwan/cisco_ntp_feature_template.py +169 -168
- pulumi_sdwan/cisco_omp_feature_template.py +421 -420
- pulumi_sdwan/cisco_ospf_feature_template.py +407 -406
- pulumi_sdwan/cisco_ospfv3_feature_template.py +925 -924
- pulumi_sdwan/cisco_secure_internet_gateway_feature_template.py +99 -98
- pulumi_sdwan/cisco_security_feature_template.py +225 -224
- pulumi_sdwan/cisco_sig_credentials_feature_template.py +365 -364
- pulumi_sdwan/cisco_snmp_feature_template.py +141 -140
- pulumi_sdwan/cisco_system_feature_template.py +981 -980
- pulumi_sdwan/cisco_thousandeyes_feature_template.py +57 -56
- pulumi_sdwan/cisco_trustsec_feature_template.py +477 -476
- pulumi_sdwan/cisco_vpn_feature_template.py +211 -210
- pulumi_sdwan/cisco_vpn_interface_feature_template.py +2717 -2716
- pulumi_sdwan/cisco_vpn_interface_gre_feature_template.py +449 -448
- pulumi_sdwan/cisco_vpn_interface_ipsec_feature_template.py +799 -798
- pulumi_sdwan/cisco_wireless_lan_feature_template.py +281 -280
- pulumi_sdwan/class_map_policy_object.py +36 -35
- pulumi_sdwan/cli_config_feature.py +70 -65
- pulumi_sdwan/cli_device_template.py +78 -77
- pulumi_sdwan/cli_feature_profile.py +29 -28
- pulumi_sdwan/cli_template_feature_template.py +71 -70
- pulumi_sdwan/color_list_policy_object.py +22 -21
- pulumi_sdwan/config/__init__.py +1 -0
- pulumi_sdwan/config/__init__.pyi +1 -0
- pulumi_sdwan/config/vars.py +1 -0
- pulumi_sdwan/configuration_group.py +106 -109
- pulumi_sdwan/custom_control_topology_policy_definition.py +57 -56
- pulumi_sdwan/data_fqdn_prefix_list_policy_object.py +22 -21
- pulumi_sdwan/data_ipv4_prefix_list_policy_object.py +22 -21
- pulumi_sdwan/data_ipv6_prefix_list_policy_object.py +22 -21
- pulumi_sdwan/dns_security_feature_profile.py +29 -28
- pulumi_sdwan/dns_security_policy.py +702 -0
- pulumi_sdwan/dns_security_policy_definition.py +162 -161
- pulumi_sdwan/domain_list_policy_object.py +22 -21
- pulumi_sdwan/eigrp_feature_template.py +253 -252
- pulumi_sdwan/embedded_security_feature_profile.py +29 -28
- pulumi_sdwan/expanded_community_list_policy_object.py +22 -21
- pulumi_sdwan/extended_community_list_policy_object.py +22 -21
- pulumi_sdwan/feature_device_template.py +120 -119
- pulumi_sdwan/geo_location_list_policy_object.py +22 -21
- pulumi_sdwan/get_advanced_inspection_profile_policy_definition.py +18 -17
- pulumi_sdwan/get_advanced_malware_protection_policy_definition.py +19 -18
- pulumi_sdwan/get_allow_url_list_policy_object.py +8 -7
- pulumi_sdwan/get_app_probe_class_policy_object.py +9 -8
- pulumi_sdwan/get_application_aware_routing_policy_definition.py +10 -9
- pulumi_sdwan/get_application_list_policy_object.py +8 -7
- pulumi_sdwan/get_application_priority_feature_profile.py +8 -7
- pulumi_sdwan/get_application_priority_qos_policy.py +16 -15
- pulumi_sdwan/get_application_priority_traffic_policy_policy.py +17 -16
- pulumi_sdwan/get_as_path_list_policy_object.py +8 -7
- pulumi_sdwan/get_block_url_list_policy_object.py +8 -7
- pulumi_sdwan/get_cedge_aaa_feature_template.py +35 -34
- pulumi_sdwan/get_cedge_global_feature_template.py +61 -60
- pulumi_sdwan/get_cedge_igmp_feature_template.py +15 -14
- pulumi_sdwan/get_cedge_multicast_feature_template.py +21 -20
- pulumi_sdwan/get_cedge_pim_feature_template.py +35 -34
- pulumi_sdwan/get_cellular_cedge_profile_feature_template.py +29 -28
- pulumi_sdwan/get_cellular_controller_feature_template.py +25 -24
- pulumi_sdwan/get_cellular_profile_feature_template.py +37 -36
- pulumi_sdwan/get_centralized_policy.py +9 -8
- pulumi_sdwan/get_cflowd_policy_definition.py +17 -16
- pulumi_sdwan/get_cisco_banner_feature_template.py +19 -18
- pulumi_sdwan/get_cisco_bfd_feature_template.py +21 -20
- pulumi_sdwan/get_cisco_bgp_feature_template.py +45 -44
- pulumi_sdwan/get_cisco_dhcp_server_feature_template.py +31 -30
- pulumi_sdwan/get_cisco_logging_feature_template.py +21 -20
- pulumi_sdwan/get_cisco_ntp_feature_template.py +23 -22
- pulumi_sdwan/get_cisco_omp_feature_template.py +41 -40
- pulumi_sdwan/get_cisco_ospf_feature_template.py +40 -39
- pulumi_sdwan/get_cisco_ospfv3_feature_template.py +77 -76
- pulumi_sdwan/get_cisco_secure_internet_gateway_feature_template.py +18 -17
- pulumi_sdwan/get_cisco_security_feature_template.py +27 -26
- pulumi_sdwan/get_cisco_sig_credentials_feature_template.py +37 -36
- pulumi_sdwan/get_cisco_snmp_feature_template.py +21 -20
- pulumi_sdwan/get_cisco_system_feature_template.py +81 -80
- pulumi_sdwan/get_cisco_thousandeyes_feature_template.py +15 -14
- pulumi_sdwan/get_cisco_trustsec_feature_template.py +45 -44
- pulumi_sdwan/get_cisco_vpn_feature_template.py +26 -25
- pulumi_sdwan/get_cisco_vpn_interface_feature_template.py +205 -204
- pulumi_sdwan/get_cisco_vpn_interface_gre_feature_template.py +43 -42
- pulumi_sdwan/get_cisco_vpn_interface_ipsec_feature_template.py +68 -67
- pulumi_sdwan/get_cisco_wireless_lan_feature_template.py +31 -30
- pulumi_sdwan/get_class_map_policy_object.py +9 -8
- pulumi_sdwan/get_cli_config_feature.py +15 -14
- pulumi_sdwan/get_cli_device_template.py +12 -11
- pulumi_sdwan/get_cli_feature_profile.py +8 -7
- pulumi_sdwan/get_cli_template_feature_template.py +16 -15
- pulumi_sdwan/get_color_list_policy_object.py +8 -7
- pulumi_sdwan/get_configuration_group.py +22 -21
- pulumi_sdwan/get_custom_control_topology_policy_definition.py +11 -10
- pulumi_sdwan/get_data_fqdn_prefix_list_policy_object.py +8 -7
- pulumi_sdwan/get_data_ipv4_prefix_list_policy_object.py +8 -7
- pulumi_sdwan/get_data_ipv6_prefix_list_policy_object.py +8 -7
- pulumi_sdwan/get_device.py +12 -11
- pulumi_sdwan/get_dns_security_feature_profile.py +8 -7
- pulumi_sdwan/get_dns_security_policy.py +273 -0
- pulumi_sdwan/get_dns_security_policy_definition.py +18 -17
- pulumi_sdwan/get_domain_list_policy_object.py +8 -7
- pulumi_sdwan/get_eigrp_feature_template.py +29 -28
- pulumi_sdwan/get_embedded_security_feature_profile.py +8 -7
- pulumi_sdwan/get_expanded_community_list_policy_object.py +8 -7
- pulumi_sdwan/get_extended_community_list_policy_object.py +8 -7
- pulumi_sdwan/get_feature_device_template.py +15 -14
- pulumi_sdwan/get_geo_location_list_policy_object.py +8 -7
- pulumi_sdwan/get_gps_feature_template.py +27 -26
- pulumi_sdwan/get_hub_and_spoke_topology_policy_definition.py +12 -11
- pulumi_sdwan/get_intrusion_prevention_policy_definition.py +43 -16
- pulumi_sdwan/get_ips_signature_list_policy_object.py +8 -7
- pulumi_sdwan/get_ipv4_acl_policy_definition.py +11 -10
- pulumi_sdwan/get_ipv4_device_acl_policy_definition.py +11 -10
- pulumi_sdwan/get_ipv4_prefix_list_policy_object.py +8 -7
- pulumi_sdwan/get_ipv6_acl_policy_definition.py +11 -10
- pulumi_sdwan/get_ipv6_device_acl_policy_definition.py +11 -10
- pulumi_sdwan/get_ipv6_prefix_list_policy_object.py +8 -7
- pulumi_sdwan/get_local_application_list_policy_object.py +8 -7
- pulumi_sdwan/get_localized_policy.py +19 -18
- pulumi_sdwan/get_mesh_topology_policy_definition.py +12 -11
- pulumi_sdwan/get_mirror_policy_object.py +10 -9
- pulumi_sdwan/get_object_group_policy_definition.py +22 -21
- pulumi_sdwan/get_other_feature_profile.py +8 -7
- pulumi_sdwan/get_other_thousandeyes_feature.py +14 -13
- pulumi_sdwan/get_other_ucse_feature.py +27 -26
- pulumi_sdwan/get_policer_policy_object.py +11 -10
- pulumi_sdwan/get_policy_object_app_probe_class.py +14 -13
- pulumi_sdwan/get_policy_object_application_list.py +14 -13
- pulumi_sdwan/get_policy_object_as_path_list.py +15 -14
- pulumi_sdwan/get_policy_object_class_map.py +14 -13
- pulumi_sdwan/get_policy_object_color_list.py +14 -13
- pulumi_sdwan/get_policy_object_data_ipv4_prefix_list.py +14 -13
- pulumi_sdwan/get_policy_object_data_ipv6_prefix_list.py +14 -13
- pulumi_sdwan/get_policy_object_expanded_community_list.py +16 -15
- pulumi_sdwan/get_policy_object_extended_community_list.py +14 -13
- pulumi_sdwan/get_policy_object_feature_profile.py +8 -7
- pulumi_sdwan/get_policy_object_ipv4_prefix_list.py +14 -13
- pulumi_sdwan/get_policy_object_ipv6_prefix_list.py +14 -13
- pulumi_sdwan/get_policy_object_mirror.py +14 -13
- pulumi_sdwan/get_policy_object_policer.py +14 -13
- pulumi_sdwan/get_policy_object_preferred_color_group.py +14 -13
- pulumi_sdwan/get_policy_object_security_data_ipv4_prefix_list.py +14 -13
- pulumi_sdwan/get_policy_object_security_fqdn_list.py +14 -13
- pulumi_sdwan/get_policy_object_security_geolocation_list.py +14 -13
- pulumi_sdwan/get_policy_object_security_identity_list.py +14 -13
- pulumi_sdwan/get_policy_object_security_ips_signature.py +14 -13
- pulumi_sdwan/get_policy_object_security_local_application_list.py +14 -13
- pulumi_sdwan/get_policy_object_security_local_domain_list.py +14 -13
- pulumi_sdwan/get_policy_object_security_port_list.py +14 -13
- pulumi_sdwan/get_policy_object_security_scalable_group_tag_list.py +14 -13
- pulumi_sdwan/get_policy_object_security_url_allow_list.py +14 -13
- pulumi_sdwan/get_policy_object_security_url_block_list.py +14 -13
- pulumi_sdwan/get_policy_object_sla_class_list.py +14 -13
- pulumi_sdwan/get_policy_object_standard_community_list.py +14 -13
- pulumi_sdwan/get_policy_object_tloc_list.py +14 -13
- pulumi_sdwan/get_policy_object_vpn_group.py +14 -13
- pulumi_sdwan/get_port_list_policy_object.py +8 -7
- pulumi_sdwan/get_preferred_color_group_policy_object.py +14 -13
- pulumi_sdwan/get_protocol_list_policy_object.py +8 -7
- pulumi_sdwan/get_qos_map_policy_definition.py +10 -9
- pulumi_sdwan/get_region_list_policy_object.py +8 -7
- pulumi_sdwan/get_rewrite_rule_policy_definition.py +10 -9
- pulumi_sdwan/get_route_policy_definition.py +11 -10
- pulumi_sdwan/get_rule_set_policy_definition.py +9 -8
- pulumi_sdwan/get_security_app_hosting_feature_template.py +15 -14
- pulumi_sdwan/get_security_policy.py +118 -19
- pulumi_sdwan/get_service_dhcp_server_feature.py +32 -31
- pulumi_sdwan/get_service_feature_profile.py +8 -7
- pulumi_sdwan/get_service_ipv4_acl_feature.py +15 -14
- pulumi_sdwan/get_service_ipv6_acl_feature.py +15 -14
- pulumi_sdwan/get_service_lan_vpn_feature.py +31 -30
- pulumi_sdwan/get_service_lan_vpn_feature_associate_multicast_feature.py +35 -20
- pulumi_sdwan/get_service_lan_vpn_feature_associate_routing_bgp_feature.py +35 -20
- pulumi_sdwan/get_service_lan_vpn_feature_associate_routing_eigrp_feature.py +35 -20
- pulumi_sdwan/get_service_lan_vpn_feature_associate_routing_ospf_feature.py +35 -20
- pulumi_sdwan/get_service_lan_vpn_feature_associate_routing_ospfv3_ipv4_feature.py +35 -20
- pulumi_sdwan/get_service_lan_vpn_feature_associate_routing_ospfv3_ipv6_feature.py +35 -20
- pulumi_sdwan/get_service_lan_vpn_interface_ethernet_feature.py +96 -95
- pulumi_sdwan/get_service_lan_vpn_interface_ethernet_feature_associate_dhcp_server_feature.py +40 -25
- pulumi_sdwan/get_service_lan_vpn_interface_ethernet_feature_associate_tracker_feature.py +40 -25
- pulumi_sdwan/get_service_lan_vpn_interface_ethernet_feature_associate_tracker_group_feature.py +40 -25
- pulumi_sdwan/get_service_lan_vpn_interface_gre_feature.py +47 -46
- pulumi_sdwan/get_service_lan_vpn_interface_ipsec_feature.py +78 -77
- pulumi_sdwan/get_service_lan_vpn_interface_ipsec_feature_associate_dhcp_server_feature.py +40 -25
- pulumi_sdwan/get_service_lan_vpn_interface_svi_feature.py +51 -50
- pulumi_sdwan/get_service_lan_vpn_interface_svi_feature_associate_dhcp_server_feature.py +40 -25
- pulumi_sdwan/get_service_multicast_feature.py +31 -30
- pulumi_sdwan/get_service_object_tracker_feature.py +25 -24
- pulumi_sdwan/get_service_object_tracker_group_feature.py +18 -17
- pulumi_sdwan/get_service_route_policy_feature.py +15 -14
- pulumi_sdwan/get_service_routing_bgp_feature.py +56 -55
- pulumi_sdwan/get_service_routing_eigrp_feature.py +27 -26
- pulumi_sdwan/get_service_routing_ospf_feature.py +40 -39
- pulumi_sdwan/get_service_routing_ospfv3_ipv4_feature.py +47 -46
- pulumi_sdwan/get_service_routing_ospfv3_ipv6_feature.py +47 -46
- pulumi_sdwan/get_service_switchport_feature.py +16 -15
- pulumi_sdwan/get_service_tracker_feature.py +36 -35
- pulumi_sdwan/get_service_tracker_group_feature.py +16 -15
- pulumi_sdwan/get_service_wireless_lan_feature.py +31 -30
- pulumi_sdwan/get_sig_security_feature_profile.py +8 -7
- pulumi_sdwan/get_site_list_policy_object.py +8 -7
- pulumi_sdwan/get_sla_class_policy_object.py +17 -16
- pulumi_sdwan/get_standard_community_list_policy_object.py +8 -7
- pulumi_sdwan/get_switchport_feature_template.py +20 -19
- pulumi_sdwan/get_system_aaa_feature.py +23 -22
- pulumi_sdwan/get_system_banner_feature.py +18 -17
- pulumi_sdwan/get_system_basic_feature.py +72 -71
- pulumi_sdwan/get_system_bfd_feature.py +20 -19
- pulumi_sdwan/get_system_feature_profile.py +8 -7
- pulumi_sdwan/get_system_flexible_port_speed_feature.py +16 -15
- pulumi_sdwan/get_system_global_feature.py +60 -59
- pulumi_sdwan/get_system_ipv4_device_access_feature.py +15 -14
- pulumi_sdwan/get_system_ipv6_device_access_feature.py +15 -14
- pulumi_sdwan/get_system_logging_feature.py +20 -19
- pulumi_sdwan/get_system_mrf_feature.py +21 -20
- pulumi_sdwan/get_system_ntp_feature.py +22 -21
- pulumi_sdwan/get_system_omp_feature.py +72 -71
- pulumi_sdwan/get_system_performance_monitoring_feature.py +20 -19
- pulumi_sdwan/get_system_remote_access_feature.py +54 -53
- pulumi_sdwan/get_system_security_feature.py +24 -23
- pulumi_sdwan/get_system_snmp_feature.py +20 -19
- pulumi_sdwan/get_tag.py +141 -0
- pulumi_sdwan/get_tloc_list_policy_object.py +8 -7
- pulumi_sdwan/get_tls_ssl_decryption_policy_definition.py +24 -23
- pulumi_sdwan/get_tls_ssl_profile_policy_definition.py +20 -19
- pulumi_sdwan/get_traffic_data_policy_definition.py +11 -10
- pulumi_sdwan/get_transport_cellular_controller_feature.py +24 -23
- pulumi_sdwan/get_transport_cellular_profile_feature.py +43 -42
- pulumi_sdwan/get_transport_feature_profile.py +8 -7
- pulumi_sdwan/get_transport_gps_feature.py +26 -25
- pulumi_sdwan/get_transport_ipv4_acl_feature.py +15 -14
- pulumi_sdwan/get_transport_ipv6_acl_feature.py +15 -14
- pulumi_sdwan/get_transport_ipv6_tracker_feature.py +32 -31
- pulumi_sdwan/get_transport_ipv6_tracker_group_feature.py +18 -17
- pulumi_sdwan/get_transport_management_vpn_feature.py +24 -23
- pulumi_sdwan/get_transport_management_vpn_interface_ethernet_feature.py +66 -65
- pulumi_sdwan/get_transport_route_policy_feature.py +15 -14
- pulumi_sdwan/get_transport_routing_bgp_feature.py +56 -55
- pulumi_sdwan/get_transport_routing_ospf_feature.py +40 -39
- pulumi_sdwan/get_transport_routing_ospfv3_ipv4_feature.py +47 -46
- pulumi_sdwan/get_transport_routing_ospfv3_ipv6_feature.py +47 -46
- pulumi_sdwan/get_transport_t1_e1_controller_feature.py +17 -16
- pulumi_sdwan/get_transport_tracker_feature.py +32 -31
- pulumi_sdwan/get_transport_tracker_group_feature.py +16 -15
- pulumi_sdwan/get_transport_wan_vpn_feature.py +25 -24
- pulumi_sdwan/get_transport_wan_vpn_feature_associate_routing_bgp_feature.py +35 -20
- pulumi_sdwan/get_transport_wan_vpn_feature_associate_routing_ospf_feature.py +35 -20
- pulumi_sdwan/get_transport_wan_vpn_feature_associate_routing_ospfv3_ipv4_feature.py +35 -20
- pulumi_sdwan/get_transport_wan_vpn_feature_associate_routing_ospfv3_ipv6_feature.py +35 -20
- pulumi_sdwan/get_transport_wan_vpn_interface_cellular_feature.py +145 -144
- pulumi_sdwan/get_transport_wan_vpn_interface_cellular_feature_associate_tracker_feature.py +40 -25
- pulumi_sdwan/get_transport_wan_vpn_interface_cellular_feature_associate_tracker_group_feature.py +40 -25
- pulumi_sdwan/get_transport_wan_vpn_interface_ethernet_feature.py +202 -201
- pulumi_sdwan/get_transport_wan_vpn_interface_ethernet_feature_associate_ipv6_tracker_feature.py +40 -25
- pulumi_sdwan/get_transport_wan_vpn_interface_ethernet_feature_associate_ipv6_tracker_group_feature.py +40 -25
- pulumi_sdwan/get_transport_wan_vpn_interface_ethernet_feature_associate_tracker_feature.py +40 -25
- pulumi_sdwan/get_transport_wan_vpn_interface_ethernet_feature_associate_tracker_group_feature.py +40 -25
- pulumi_sdwan/get_transport_wan_vpn_interface_gre_feature.py +47 -46
- pulumi_sdwan/get_transport_wan_vpn_interface_gre_feature_associate_tracker_feature.py +40 -25
- pulumi_sdwan/get_transport_wan_vpn_interface_ipsec_feature.py +78 -77
- pulumi_sdwan/get_transport_wan_vpn_interface_ipsec_feature_associate_tracker_feature.py +40 -25
- pulumi_sdwan/get_transport_wan_vpn_interface_t1_e1_serial_feature.py +122 -121
- pulumi_sdwan/get_url_filtering_policy_definition.py +34 -21
- pulumi_sdwan/get_vedge_inventory.py +2 -1
- pulumi_sdwan/get_vpn_interface_cellular_feature_template.py +154 -153
- pulumi_sdwan/get_vpn_interface_dsl_ipoe_feature_template.py +168 -167
- pulumi_sdwan/get_vpn_interface_dsl_pppoa_feature_template.py +156 -155
- pulumi_sdwan/get_vpn_interface_dsl_pppoe_feature_template.py +165 -164
- pulumi_sdwan/get_vpn_interface_ethernet_pppoe_feature_template.py +165 -164
- pulumi_sdwan/get_vpn_interface_multilink_feature_template.py +144 -143
- pulumi_sdwan/get_vpn_interface_svi_feature_template.py +43 -42
- pulumi_sdwan/get_vpn_interface_t1_e1_serial_feature_template.py +129 -128
- pulumi_sdwan/get_vpn_list_policy_object.py +8 -7
- pulumi_sdwan/get_vpn_membership_policy_definition.py +10 -9
- pulumi_sdwan/get_zone_based_firewall_policy_definition.py +11 -10
- pulumi_sdwan/get_zone_list_policy_object.py +8 -7
- pulumi_sdwan/gps_feature_template.py +225 -224
- pulumi_sdwan/hub_and_spoke_topology_policy_definition.py +71 -70
- pulumi_sdwan/intrusion_prevention_policy_definition.py +218 -166
- pulumi_sdwan/ips_signature_list_policy_object.py +22 -21
- pulumi_sdwan/ipv4_acl_policy_definition.py +57 -56
- pulumi_sdwan/ipv4_device_acl_policy_definition.py +57 -56
- pulumi_sdwan/ipv4_prefix_list_policy_object.py +22 -21
- pulumi_sdwan/ipv6_acl_policy_definition.py +57 -56
- pulumi_sdwan/ipv6_device_acl_policy_definition.py +57 -56
- pulumi_sdwan/ipv6_prefix_list_policy_object.py +22 -21
- pulumi_sdwan/local_application_list_policy_object.py +22 -21
- pulumi_sdwan/localized_policy.py +176 -175
- pulumi_sdwan/mesh_topology_policy_definition.py +71 -70
- pulumi_sdwan/mirror_policy_object.py +50 -49
- pulumi_sdwan/object_group_policy_definition.py +218 -217
- pulumi_sdwan/other_feature_profile.py +29 -28
- pulumi_sdwan/other_thousandeyes_feature.py +50 -49
- pulumi_sdwan/other_ucse_feature.py +232 -231
- pulumi_sdwan/outputs.py +21450 -21092
- pulumi_sdwan/policer_policy_object.py +64 -63
- pulumi_sdwan/policy_object_app_probe_class.py +50 -49
- pulumi_sdwan/policy_object_application_list.py +50 -49
- pulumi_sdwan/policy_object_as_path_list.py +64 -63
- pulumi_sdwan/policy_object_class_map.py +50 -49
- pulumi_sdwan/policy_object_color_list.py +50 -49
- pulumi_sdwan/policy_object_data_ipv4_prefix_list.py +50 -49
- pulumi_sdwan/policy_object_data_ipv6_prefix_list.py +50 -49
- pulumi_sdwan/policy_object_expanded_community_list.py +78 -77
- pulumi_sdwan/policy_object_extended_community_list.py +50 -49
- pulumi_sdwan/policy_object_feature_profile.py +29 -28
- pulumi_sdwan/policy_object_ipv4_prefix_list.py +50 -49
- pulumi_sdwan/policy_object_ipv6_prefix_list.py +50 -49
- pulumi_sdwan/policy_object_mirror.py +50 -49
- pulumi_sdwan/policy_object_policer.py +50 -49
- pulumi_sdwan/policy_object_preferred_color_group.py +50 -49
- pulumi_sdwan/policy_object_security_data_ipv4_prefix_list.py +50 -49
- pulumi_sdwan/policy_object_security_fqdn_list.py +50 -49
- pulumi_sdwan/policy_object_security_geolocation_list.py +50 -49
- pulumi_sdwan/policy_object_security_identity_list.py +50 -49
- pulumi_sdwan/policy_object_security_ips_signature.py +50 -49
- pulumi_sdwan/policy_object_security_local_application_list.py +50 -49
- pulumi_sdwan/policy_object_security_local_domain_list.py +50 -49
- pulumi_sdwan/policy_object_security_port_list.py +50 -49
- pulumi_sdwan/policy_object_security_scalable_group_tag_list.py +50 -49
- pulumi_sdwan/policy_object_security_url_allow_list.py +50 -49
- pulumi_sdwan/policy_object_security_url_block_list.py +50 -49
- pulumi_sdwan/policy_object_sla_class_list.py +50 -49
- pulumi_sdwan/policy_object_standard_community_list.py +50 -49
- pulumi_sdwan/policy_object_tloc_list.py +50 -49
- pulumi_sdwan/policy_object_vpn_group.py +50 -49
- pulumi_sdwan/port_list_policy_object.py +22 -21
- pulumi_sdwan/preferred_color_group_policy_object.py +106 -105
- pulumi_sdwan/protocol_list_policy_object.py +22 -21
- pulumi_sdwan/provider.py +39 -38
- pulumi_sdwan/pulumi-plugin.json +1 -1
- pulumi_sdwan/qos_map_policy_definition.py +43 -42
- pulumi_sdwan/region_list_policy_object.py +22 -21
- pulumi_sdwan/rewrite_rule_policy_definition.py +43 -42
- pulumi_sdwan/route_policy_definition.py +57 -56
- pulumi_sdwan/rule_set_policy_definition.py +36 -35
- pulumi_sdwan/security_app_hosting_feature_template.py +57 -56
- pulumi_sdwan/security_policy.py +505 -175
- pulumi_sdwan/service_dhcp_server_feature.py +302 -301
- pulumi_sdwan/service_feature_profile.py +29 -28
- pulumi_sdwan/service_ipv4_acl_feature.py +64 -63
- pulumi_sdwan/service_ipv6_acl_feature.py +64 -63
- pulumi_sdwan/service_lan_vpn_feature.py +288 -287
- pulumi_sdwan/service_lan_vpn_feature_associate_multicast_feature.py +77 -44
- pulumi_sdwan/service_lan_vpn_feature_associate_routing_bgp_feature.py +77 -44
- pulumi_sdwan/service_lan_vpn_feature_associate_routing_eigrp_feature.py +77 -44
- pulumi_sdwan/service_lan_vpn_feature_associate_routing_ospf_feature.py +77 -44
- pulumi_sdwan/service_lan_vpn_feature_associate_routing_ospfv3_ipv4_feature.py +77 -44
- pulumi_sdwan/service_lan_vpn_feature_associate_routing_ospfv3_ipv6_feature.py +77 -44
- pulumi_sdwan/service_lan_vpn_interface_ethernet_feature.py +1118 -1117
- pulumi_sdwan/service_lan_vpn_interface_ethernet_feature_associate_dhcp_server_feature.py +91 -58
- pulumi_sdwan/service_lan_vpn_interface_ethernet_feature_associate_tracker_feature.py +91 -58
- pulumi_sdwan/service_lan_vpn_interface_ethernet_feature_associate_tracker_group_feature.py +91 -58
- pulumi_sdwan/service_lan_vpn_interface_gre_feature.py +452 -451
- pulumi_sdwan/service_lan_vpn_interface_ipsec_feature.py +878 -877
- pulumi_sdwan/service_lan_vpn_interface_ipsec_feature_associate_dhcp_server_feature.py +91 -58
- pulumi_sdwan/service_lan_vpn_interface_svi_feature.py +496 -495
- pulumi_sdwan/service_lan_vpn_interface_svi_feature_associate_dhcp_server_feature.py +91 -58
- pulumi_sdwan/service_multicast_feature.py +288 -287
- pulumi_sdwan/service_object_tracker_feature.py +204 -203
- pulumi_sdwan/service_object_tracker_group_feature.py +106 -105
- pulumi_sdwan/service_route_policy_feature.py +64 -63
- pulumi_sdwan/service_routing_bgp_feature.py +630 -629
- pulumi_sdwan/service_routing_eigrp_feature.py +231 -230
- pulumi_sdwan/service_routing_ospf_feature.py +410 -409
- pulumi_sdwan/service_routing_ospfv3_ipv4_feature.py +508 -507
- pulumi_sdwan/service_routing_ospfv3_ipv6_feature.py +508 -507
- pulumi_sdwan/service_switchport_feature.py +78 -77
- pulumi_sdwan/service_tracker_feature.py +358 -357
- pulumi_sdwan/service_tracker_group_feature.py +78 -77
- pulumi_sdwan/service_wireless_lan_feature.py +288 -287
- pulumi_sdwan/sig_security_feature_profile.py +29 -28
- pulumi_sdwan/site_list_policy_object.py +22 -21
- pulumi_sdwan/sla_class_policy_object.py +148 -147
- pulumi_sdwan/standard_community_list_policy_object.py +22 -21
- pulumi_sdwan/switchport_feature_template.py +127 -126
- pulumi_sdwan/system_aaa_feature.py +176 -175
- pulumi_sdwan/system_banner_feature.py +98 -97
- pulumi_sdwan/system_basic_feature.py +862 -861
- pulumi_sdwan/system_bfd_feature.py +134 -133
- pulumi_sdwan/system_feature_profile.py +29 -28
- pulumi_sdwan/system_flexible_port_speed_feature.py +78 -77
- pulumi_sdwan/system_global_feature.py +694 -693
- pulumi_sdwan/system_ipv4_device_access_feature.py +64 -63
- pulumi_sdwan/system_ipv6_device_access_feature.py +64 -63
- pulumi_sdwan/system_logging_feature.py +134 -133
- pulumi_sdwan/system_mrf_feature.py +148 -147
- pulumi_sdwan/system_ntp_feature.py +162 -161
- pulumi_sdwan/system_omp_feature.py +862 -861
- pulumi_sdwan/system_performance_monitoring_feature.py +134 -133
- pulumi_sdwan/system_remote_access_feature.py +634 -633
- pulumi_sdwan/system_security_feature.py +190 -189
- pulumi_sdwan/system_snmp_feature.py +134 -133
- pulumi_sdwan/tag.py +284 -0
- pulumi_sdwan/tloc_list_policy_object.py +22 -21
- pulumi_sdwan/tls_ssl_decryption_policy_definition.py +246 -245
- pulumi_sdwan/tls_ssl_profile_policy_definition.py +190 -189
- pulumi_sdwan/traffic_data_policy_definition.py +57 -56
- pulumi_sdwan/transport_cellular_controller_feature.py +190 -189
- pulumi_sdwan/transport_cellular_profile_feature.py +340 -332
- pulumi_sdwan/transport_feature_profile.py +29 -28
- pulumi_sdwan/transport_gps_feature.py +218 -217
- pulumi_sdwan/transport_ipv4_acl_feature.py +64 -63
- pulumi_sdwan/transport_ipv6_acl_feature.py +64 -63
- pulumi_sdwan/transport_ipv6_tracker_feature.py +302 -301
- pulumi_sdwan/transport_ipv6_tracker_group_feature.py +106 -105
- pulumi_sdwan/transport_management_vpn_feature.py +190 -189
- pulumi_sdwan/transport_management_vpn_interface_ethernet_feature.py +726 -725
- pulumi_sdwan/transport_route_policy_feature.py +64 -63
- pulumi_sdwan/transport_routing_bgp_feature.py +630 -629
- pulumi_sdwan/transport_routing_ospf_feature.py +410 -409
- pulumi_sdwan/transport_routing_ospfv3_ipv4_feature.py +508 -507
- pulumi_sdwan/transport_routing_ospfv3_ipv6_feature.py +508 -507
- pulumi_sdwan/transport_t1_e1_controller_feature.py +92 -91
- pulumi_sdwan/transport_tracker_feature.py +302 -301
- pulumi_sdwan/transport_tracker_group_feature.py +78 -77
- pulumi_sdwan/transport_wan_vpn_feature.py +204 -203
- pulumi_sdwan/transport_wan_vpn_feature_associate_routing_bgp_feature.py +77 -44
- pulumi_sdwan/transport_wan_vpn_feature_associate_routing_ospf_feature.py +77 -44
- pulumi_sdwan/transport_wan_vpn_feature_associate_routing_ospfv3_ipv4_feature.py +77 -44
- pulumi_sdwan/transport_wan_vpn_feature_associate_routing_ospfv3_ipv6_feature.py +77 -44
- pulumi_sdwan/transport_wan_vpn_interface_cellular_feature.py +1804 -1803
- pulumi_sdwan/transport_wan_vpn_interface_cellular_feature_associate_tracker_feature.py +91 -58
- pulumi_sdwan/transport_wan_vpn_interface_cellular_feature_associate_tracker_group_feature.py +91 -58
- pulumi_sdwan/transport_wan_vpn_interface_ethernet_feature.py +2614 -2613
- pulumi_sdwan/transport_wan_vpn_interface_ethernet_feature_associate_ipv6_tracker_feature.py +91 -58
- pulumi_sdwan/transport_wan_vpn_interface_ethernet_feature_associate_ipv6_tracker_group_feature.py +91 -58
- pulumi_sdwan/transport_wan_vpn_interface_ethernet_feature_associate_tracker_feature.py +91 -58
- pulumi_sdwan/transport_wan_vpn_interface_ethernet_feature_associate_tracker_group_feature.py +91 -58
- pulumi_sdwan/transport_wan_vpn_interface_gre_feature.py +452 -451
- pulumi_sdwan/transport_wan_vpn_interface_gre_feature_associate_tracker_feature.py +91 -58
- pulumi_sdwan/transport_wan_vpn_interface_ipsec_feature.py +878 -877
- pulumi_sdwan/transport_wan_vpn_interface_ipsec_feature_associate_tracker_feature.py +91 -58
- pulumi_sdwan/transport_wan_vpn_interface_t1_e1_serial_feature.py +1486 -1485
- pulumi_sdwan/url_filtering_policy_definition.py +240 -241
- pulumi_sdwan/vpn_interface_cellular_feature_template.py +2003 -2002
- pulumi_sdwan/vpn_interface_dsl_ipoe_feature_template.py +2199 -2198
- pulumi_sdwan/vpn_interface_dsl_pppoa_feature_template.py +2031 -2030
- pulumi_sdwan/vpn_interface_dsl_pppoe_feature_template.py +2157 -2156
- pulumi_sdwan/vpn_interface_ethernet_pppoe_feature_template.py +2157 -2156
- pulumi_sdwan/vpn_interface_multilink_feature_template.py +1863 -1862
- pulumi_sdwan/vpn_interface_svi_feature_template.py +449 -448
- pulumi_sdwan/vpn_interface_t1_e1_serial_feature_template.py +1653 -1652
- pulumi_sdwan/vpn_list_policy_object.py +22 -21
- pulumi_sdwan/vpn_membership_policy_definition.py +43 -42
- pulumi_sdwan/zone_based_firewall_policy_definition.py +90 -77
- pulumi_sdwan/zone_list_policy_object.py +22 -21
- {pulumi_sdwan-0.3.0a1743057086.dist-info → pulumi_sdwan-0.3.1.dist-info}/METADATA +1 -1
- pulumi_sdwan-0.3.1.dist-info/RECORD +480 -0
- {pulumi_sdwan-0.3.0a1743057086.dist-info → pulumi_sdwan-0.3.1.dist-info}/WHEEL +1 -1
- pulumi_sdwan-0.3.0a1743057086.dist-info/RECORD +0 -476
- {pulumi_sdwan-0.3.0a1743057086.dist-info → pulumi_sdwan-0.3.1.dist-info}/top_level.txt +0 -0
pulumi_sdwan/security_policy.py
CHANGED
|
@@ -2,6 +2,7 @@
|
|
|
2
2
|
# *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
|
|
3
3
|
# *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
4
|
|
|
5
|
+
import builtins
|
|
5
6
|
import copy
|
|
6
7
|
import warnings
|
|
7
8
|
import sys
|
|
@@ -22,34 +23,48 @@ __all__ = ['SecurityPolicyArgs', 'SecurityPolicy']
|
|
|
22
23
|
class SecurityPolicyArgs:
|
|
23
24
|
def __init__(__self__, *,
|
|
24
25
|
definitions: pulumi.Input[Sequence[pulumi.Input['SecurityPolicyDefinitionArgs']]],
|
|
25
|
-
description: pulumi.Input[str],
|
|
26
|
-
audit_trail: Optional[pulumi.Input[str]] = None,
|
|
27
|
-
direct_internet_applications: Optional[pulumi.Input[str]] = None,
|
|
28
|
-
failure_mode: Optional[pulumi.Input[str]] = None,
|
|
29
|
-
high_speed_logging_server_ip: Optional[pulumi.Input[str]] = None,
|
|
30
|
-
high_speed_logging_server_port: Optional[pulumi.Input[str]] = None,
|
|
31
|
-
|
|
26
|
+
description: pulumi.Input[builtins.str],
|
|
27
|
+
audit_trail: Optional[pulumi.Input[builtins.str]] = None,
|
|
28
|
+
direct_internet_applications: Optional[pulumi.Input[builtins.str]] = None,
|
|
29
|
+
failure_mode: Optional[pulumi.Input[builtins.str]] = None,
|
|
30
|
+
high_speed_logging_server_ip: Optional[pulumi.Input[builtins.str]] = None,
|
|
31
|
+
high_speed_logging_server_port: Optional[pulumi.Input[builtins.str]] = None,
|
|
32
|
+
high_speed_logging_server_source_interface: Optional[pulumi.Input[builtins.str]] = None,
|
|
33
|
+
high_speed_logging_vpn: Optional[pulumi.Input[builtins.str]] = None,
|
|
34
|
+
imcp_unreachable_allow: Optional[pulumi.Input[builtins.bool]] = None,
|
|
32
35
|
loggings: Optional[pulumi.Input[Sequence[pulumi.Input['SecurityPolicyLoggingArgs']]]] = None,
|
|
33
|
-
match_statistics_per_filter: Optional[pulumi.Input[str]] = None,
|
|
34
|
-
|
|
35
|
-
|
|
36
|
-
|
|
37
|
-
|
|
36
|
+
match_statistics_per_filter: Optional[pulumi.Input[builtins.str]] = None,
|
|
37
|
+
max_incomplete_icmp_limit: Optional[pulumi.Input[builtins.int]] = None,
|
|
38
|
+
max_incomplete_tcp_limit: Optional[pulumi.Input[builtins.int]] = None,
|
|
39
|
+
max_incomplete_udp_limit: Optional[pulumi.Input[builtins.int]] = None,
|
|
40
|
+
mode: Optional[pulumi.Input[builtins.str]] = None,
|
|
41
|
+
name: Optional[pulumi.Input[builtins.str]] = None,
|
|
42
|
+
session_reclassify_allow: Optional[pulumi.Input[builtins.bool]] = None,
|
|
43
|
+
tcp_syn_flood_limit: Optional[pulumi.Input[builtins.str]] = None,
|
|
44
|
+
unified_logging: Optional[pulumi.Input[builtins.bool]] = None,
|
|
45
|
+
use_case: Optional[pulumi.Input[builtins.str]] = None):
|
|
38
46
|
"""
|
|
39
47
|
The set of arguments for constructing a SecurityPolicy resource.
|
|
40
48
|
:param pulumi.Input[Sequence[pulumi.Input['SecurityPolicyDefinitionArgs']]] definitions: List of policy definitions
|
|
41
|
-
:param pulumi.Input[str] description: The description of the security policy
|
|
42
|
-
:param pulumi.Input[str] audit_trail: Audit trail - Choices: `on`, `off`
|
|
43
|
-
:param pulumi.Input[str] direct_internet_applications: Bypass firewall policy and allow all Internet traffic to/from VPN 0 - Choices: `allow`, `deny`
|
|
44
|
-
:param pulumi.Input[str] failure_mode: Failure mode - Choices: `open`, `close`
|
|
45
|
-
:param pulumi.Input[str] high_speed_logging_server_ip: High Speed Logging Server IP
|
|
46
|
-
:param pulumi.Input[str] high_speed_logging_server_port: High Speed Logging Port
|
|
47
|
-
:param pulumi.Input[str]
|
|
48
|
-
:param pulumi.Input[str]
|
|
49
|
-
:param pulumi.Input[
|
|
50
|
-
:param pulumi.Input[str]
|
|
51
|
-
:param pulumi.Input[
|
|
52
|
-
:param pulumi.Input[
|
|
49
|
+
:param pulumi.Input[builtins.str] description: The description of the security policy
|
|
50
|
+
:param pulumi.Input[builtins.str] audit_trail: Audit trail - Choices: `on`, `off`
|
|
51
|
+
:param pulumi.Input[builtins.str] direct_internet_applications: Bypass firewall policy and allow all Internet traffic to/from VPN 0 - Choices: `allow`, `deny`
|
|
52
|
+
:param pulumi.Input[builtins.str] failure_mode: Failure mode - Choices: `open`, `close`
|
|
53
|
+
:param pulumi.Input[builtins.str] high_speed_logging_server_ip: High Speed Logging Server IP
|
|
54
|
+
:param pulumi.Input[builtins.str] high_speed_logging_server_port: High Speed Logging Port
|
|
55
|
+
:param pulumi.Input[builtins.str] high_speed_logging_server_source_interface: High Speed Logging Source Interface
|
|
56
|
+
:param pulumi.Input[builtins.str] high_speed_logging_vpn: High Speed Logging VPN
|
|
57
|
+
:param pulumi.Input[builtins.bool] imcp_unreachable_allow: ICMP Unreachable Allow
|
|
58
|
+
:param pulumi.Input[builtins.str] match_statistics_per_filter: Match Statistics per-filter - Choices: `on`, `off`
|
|
59
|
+
:param pulumi.Input[builtins.int] max_incomplete_icmp_limit: Max Incomplete ICMP Limit
|
|
60
|
+
:param pulumi.Input[builtins.int] max_incomplete_tcp_limit: Max Incomplete TCP Limit
|
|
61
|
+
:param pulumi.Input[builtins.int] max_incomplete_udp_limit: Max Incomplete UDP Limit
|
|
62
|
+
:param pulumi.Input[builtins.str] mode: The policy mode - Choices: `security`, `unified` - Default value: `security`
|
|
63
|
+
:param pulumi.Input[builtins.str] name: The name of the security policy
|
|
64
|
+
:param pulumi.Input[builtins.bool] session_reclassify_allow: Session Reclassify Allow
|
|
65
|
+
:param pulumi.Input[builtins.str] tcp_syn_flood_limit: TCP SYN Flood Limit, value from 1 to 4294967295
|
|
66
|
+
:param pulumi.Input[builtins.bool] unified_logging: Unified Logging
|
|
67
|
+
:param pulumi.Input[builtins.str] use_case: The use case of the security policy - Choices: `custom`, `compliance`, `guestAccess`, `directCloudAccess`,
|
|
53
68
|
`directInternetAccess`, `directCloudAccess` - Default value: `custom`
|
|
54
69
|
"""
|
|
55
70
|
pulumi.set(__self__, "definitions", definitions)
|
|
@@ -64,18 +79,32 @@ class SecurityPolicyArgs:
|
|
|
64
79
|
pulumi.set(__self__, "high_speed_logging_server_ip", high_speed_logging_server_ip)
|
|
65
80
|
if high_speed_logging_server_port is not None:
|
|
66
81
|
pulumi.set(__self__, "high_speed_logging_server_port", high_speed_logging_server_port)
|
|
82
|
+
if high_speed_logging_server_source_interface is not None:
|
|
83
|
+
pulumi.set(__self__, "high_speed_logging_server_source_interface", high_speed_logging_server_source_interface)
|
|
67
84
|
if high_speed_logging_vpn is not None:
|
|
68
85
|
pulumi.set(__self__, "high_speed_logging_vpn", high_speed_logging_vpn)
|
|
86
|
+
if imcp_unreachable_allow is not None:
|
|
87
|
+
pulumi.set(__self__, "imcp_unreachable_allow", imcp_unreachable_allow)
|
|
69
88
|
if loggings is not None:
|
|
70
89
|
pulumi.set(__self__, "loggings", loggings)
|
|
71
90
|
if match_statistics_per_filter is not None:
|
|
72
91
|
pulumi.set(__self__, "match_statistics_per_filter", match_statistics_per_filter)
|
|
92
|
+
if max_incomplete_icmp_limit is not None:
|
|
93
|
+
pulumi.set(__self__, "max_incomplete_icmp_limit", max_incomplete_icmp_limit)
|
|
94
|
+
if max_incomplete_tcp_limit is not None:
|
|
95
|
+
pulumi.set(__self__, "max_incomplete_tcp_limit", max_incomplete_tcp_limit)
|
|
96
|
+
if max_incomplete_udp_limit is not None:
|
|
97
|
+
pulumi.set(__self__, "max_incomplete_udp_limit", max_incomplete_udp_limit)
|
|
73
98
|
if mode is not None:
|
|
74
99
|
pulumi.set(__self__, "mode", mode)
|
|
75
100
|
if name is not None:
|
|
76
101
|
pulumi.set(__self__, "name", name)
|
|
102
|
+
if session_reclassify_allow is not None:
|
|
103
|
+
pulumi.set(__self__, "session_reclassify_allow", session_reclassify_allow)
|
|
77
104
|
if tcp_syn_flood_limit is not None:
|
|
78
105
|
pulumi.set(__self__, "tcp_syn_flood_limit", tcp_syn_flood_limit)
|
|
106
|
+
if unified_logging is not None:
|
|
107
|
+
pulumi.set(__self__, "unified_logging", unified_logging)
|
|
79
108
|
if use_case is not None:
|
|
80
109
|
pulumi.set(__self__, "use_case", use_case)
|
|
81
110
|
|
|
@@ -93,88 +122,112 @@ class SecurityPolicyArgs:
|
|
|
93
122
|
|
|
94
123
|
@property
|
|
95
124
|
@pulumi.getter
|
|
96
|
-
def description(self) -> pulumi.Input[str]:
|
|
125
|
+
def description(self) -> pulumi.Input[builtins.str]:
|
|
97
126
|
"""
|
|
98
127
|
The description of the security policy
|
|
99
128
|
"""
|
|
100
129
|
return pulumi.get(self, "description")
|
|
101
130
|
|
|
102
131
|
@description.setter
|
|
103
|
-
def description(self, value: pulumi.Input[str]):
|
|
132
|
+
def description(self, value: pulumi.Input[builtins.str]):
|
|
104
133
|
pulumi.set(self, "description", value)
|
|
105
134
|
|
|
106
135
|
@property
|
|
107
136
|
@pulumi.getter(name="auditTrail")
|
|
108
|
-
def audit_trail(self) -> Optional[pulumi.Input[str]]:
|
|
137
|
+
def audit_trail(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
109
138
|
"""
|
|
110
139
|
Audit trail - Choices: `on`, `off`
|
|
111
140
|
"""
|
|
112
141
|
return pulumi.get(self, "audit_trail")
|
|
113
142
|
|
|
114
143
|
@audit_trail.setter
|
|
115
|
-
def audit_trail(self, value: Optional[pulumi.Input[str]]):
|
|
144
|
+
def audit_trail(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
116
145
|
pulumi.set(self, "audit_trail", value)
|
|
117
146
|
|
|
118
147
|
@property
|
|
119
148
|
@pulumi.getter(name="directInternetApplications")
|
|
120
|
-
def direct_internet_applications(self) -> Optional[pulumi.Input[str]]:
|
|
149
|
+
def direct_internet_applications(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
121
150
|
"""
|
|
122
151
|
Bypass firewall policy and allow all Internet traffic to/from VPN 0 - Choices: `allow`, `deny`
|
|
123
152
|
"""
|
|
124
153
|
return pulumi.get(self, "direct_internet_applications")
|
|
125
154
|
|
|
126
155
|
@direct_internet_applications.setter
|
|
127
|
-
def direct_internet_applications(self, value: Optional[pulumi.Input[str]]):
|
|
156
|
+
def direct_internet_applications(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
128
157
|
pulumi.set(self, "direct_internet_applications", value)
|
|
129
158
|
|
|
130
159
|
@property
|
|
131
160
|
@pulumi.getter(name="failureMode")
|
|
132
|
-
def failure_mode(self) -> Optional[pulumi.Input[str]]:
|
|
161
|
+
def failure_mode(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
133
162
|
"""
|
|
134
163
|
Failure mode - Choices: `open`, `close`
|
|
135
164
|
"""
|
|
136
165
|
return pulumi.get(self, "failure_mode")
|
|
137
166
|
|
|
138
167
|
@failure_mode.setter
|
|
139
|
-
def failure_mode(self, value: Optional[pulumi.Input[str]]):
|
|
168
|
+
def failure_mode(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
140
169
|
pulumi.set(self, "failure_mode", value)
|
|
141
170
|
|
|
142
171
|
@property
|
|
143
172
|
@pulumi.getter(name="highSpeedLoggingServerIp")
|
|
144
|
-
def high_speed_logging_server_ip(self) -> Optional[pulumi.Input[str]]:
|
|
173
|
+
def high_speed_logging_server_ip(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
145
174
|
"""
|
|
146
175
|
High Speed Logging Server IP
|
|
147
176
|
"""
|
|
148
177
|
return pulumi.get(self, "high_speed_logging_server_ip")
|
|
149
178
|
|
|
150
179
|
@high_speed_logging_server_ip.setter
|
|
151
|
-
def high_speed_logging_server_ip(self, value: Optional[pulumi.Input[str]]):
|
|
180
|
+
def high_speed_logging_server_ip(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
152
181
|
pulumi.set(self, "high_speed_logging_server_ip", value)
|
|
153
182
|
|
|
154
183
|
@property
|
|
155
184
|
@pulumi.getter(name="highSpeedLoggingServerPort")
|
|
156
|
-
def high_speed_logging_server_port(self) -> Optional[pulumi.Input[str]]:
|
|
185
|
+
def high_speed_logging_server_port(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
157
186
|
"""
|
|
158
187
|
High Speed Logging Port
|
|
159
188
|
"""
|
|
160
189
|
return pulumi.get(self, "high_speed_logging_server_port")
|
|
161
190
|
|
|
162
191
|
@high_speed_logging_server_port.setter
|
|
163
|
-
def high_speed_logging_server_port(self, value: Optional[pulumi.Input[str]]):
|
|
192
|
+
def high_speed_logging_server_port(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
164
193
|
pulumi.set(self, "high_speed_logging_server_port", value)
|
|
165
194
|
|
|
195
|
+
@property
|
|
196
|
+
@pulumi.getter(name="highSpeedLoggingServerSourceInterface")
|
|
197
|
+
def high_speed_logging_server_source_interface(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
198
|
+
"""
|
|
199
|
+
High Speed Logging Source Interface
|
|
200
|
+
"""
|
|
201
|
+
return pulumi.get(self, "high_speed_logging_server_source_interface")
|
|
202
|
+
|
|
203
|
+
@high_speed_logging_server_source_interface.setter
|
|
204
|
+
def high_speed_logging_server_source_interface(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
205
|
+
pulumi.set(self, "high_speed_logging_server_source_interface", value)
|
|
206
|
+
|
|
166
207
|
@property
|
|
167
208
|
@pulumi.getter(name="highSpeedLoggingVpn")
|
|
168
|
-
def high_speed_logging_vpn(self) -> Optional[pulumi.Input[str]]:
|
|
209
|
+
def high_speed_logging_vpn(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
169
210
|
"""
|
|
170
211
|
High Speed Logging VPN
|
|
171
212
|
"""
|
|
172
213
|
return pulumi.get(self, "high_speed_logging_vpn")
|
|
173
214
|
|
|
174
215
|
@high_speed_logging_vpn.setter
|
|
175
|
-
def high_speed_logging_vpn(self, value: Optional[pulumi.Input[str]]):
|
|
216
|
+
def high_speed_logging_vpn(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
176
217
|
pulumi.set(self, "high_speed_logging_vpn", value)
|
|
177
218
|
|
|
219
|
+
@property
|
|
220
|
+
@pulumi.getter(name="imcpUnreachableAllow")
|
|
221
|
+
def imcp_unreachable_allow(self) -> Optional[pulumi.Input[builtins.bool]]:
|
|
222
|
+
"""
|
|
223
|
+
ICMP Unreachable Allow
|
|
224
|
+
"""
|
|
225
|
+
return pulumi.get(self, "imcp_unreachable_allow")
|
|
226
|
+
|
|
227
|
+
@imcp_unreachable_allow.setter
|
|
228
|
+
def imcp_unreachable_allow(self, value: Optional[pulumi.Input[builtins.bool]]):
|
|
229
|
+
pulumi.set(self, "imcp_unreachable_allow", value)
|
|
230
|
+
|
|
178
231
|
@property
|
|
179
232
|
@pulumi.getter
|
|
180
233
|
def loggings(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['SecurityPolicyLoggingArgs']]]]:
|
|
@@ -186,55 +239,115 @@ class SecurityPolicyArgs:
|
|
|
186
239
|
|
|
187
240
|
@property
|
|
188
241
|
@pulumi.getter(name="matchStatisticsPerFilter")
|
|
189
|
-
def match_statistics_per_filter(self) -> Optional[pulumi.Input[str]]:
|
|
242
|
+
def match_statistics_per_filter(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
190
243
|
"""
|
|
191
244
|
Match Statistics per-filter - Choices: `on`, `off`
|
|
192
245
|
"""
|
|
193
246
|
return pulumi.get(self, "match_statistics_per_filter")
|
|
194
247
|
|
|
195
248
|
@match_statistics_per_filter.setter
|
|
196
|
-
def match_statistics_per_filter(self, value: Optional[pulumi.Input[str]]):
|
|
249
|
+
def match_statistics_per_filter(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
197
250
|
pulumi.set(self, "match_statistics_per_filter", value)
|
|
198
251
|
|
|
252
|
+
@property
|
|
253
|
+
@pulumi.getter(name="maxIncompleteIcmpLimit")
|
|
254
|
+
def max_incomplete_icmp_limit(self) -> Optional[pulumi.Input[builtins.int]]:
|
|
255
|
+
"""
|
|
256
|
+
Max Incomplete ICMP Limit
|
|
257
|
+
"""
|
|
258
|
+
return pulumi.get(self, "max_incomplete_icmp_limit")
|
|
259
|
+
|
|
260
|
+
@max_incomplete_icmp_limit.setter
|
|
261
|
+
def max_incomplete_icmp_limit(self, value: Optional[pulumi.Input[builtins.int]]):
|
|
262
|
+
pulumi.set(self, "max_incomplete_icmp_limit", value)
|
|
263
|
+
|
|
264
|
+
@property
|
|
265
|
+
@pulumi.getter(name="maxIncompleteTcpLimit")
|
|
266
|
+
def max_incomplete_tcp_limit(self) -> Optional[pulumi.Input[builtins.int]]:
|
|
267
|
+
"""
|
|
268
|
+
Max Incomplete TCP Limit
|
|
269
|
+
"""
|
|
270
|
+
return pulumi.get(self, "max_incomplete_tcp_limit")
|
|
271
|
+
|
|
272
|
+
@max_incomplete_tcp_limit.setter
|
|
273
|
+
def max_incomplete_tcp_limit(self, value: Optional[pulumi.Input[builtins.int]]):
|
|
274
|
+
pulumi.set(self, "max_incomplete_tcp_limit", value)
|
|
275
|
+
|
|
276
|
+
@property
|
|
277
|
+
@pulumi.getter(name="maxIncompleteUdpLimit")
|
|
278
|
+
def max_incomplete_udp_limit(self) -> Optional[pulumi.Input[builtins.int]]:
|
|
279
|
+
"""
|
|
280
|
+
Max Incomplete UDP Limit
|
|
281
|
+
"""
|
|
282
|
+
return pulumi.get(self, "max_incomplete_udp_limit")
|
|
283
|
+
|
|
284
|
+
@max_incomplete_udp_limit.setter
|
|
285
|
+
def max_incomplete_udp_limit(self, value: Optional[pulumi.Input[builtins.int]]):
|
|
286
|
+
pulumi.set(self, "max_incomplete_udp_limit", value)
|
|
287
|
+
|
|
199
288
|
@property
|
|
200
289
|
@pulumi.getter
|
|
201
|
-
def mode(self) -> Optional[pulumi.Input[str]]:
|
|
290
|
+
def mode(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
202
291
|
"""
|
|
203
292
|
The policy mode - Choices: `security`, `unified` - Default value: `security`
|
|
204
293
|
"""
|
|
205
294
|
return pulumi.get(self, "mode")
|
|
206
295
|
|
|
207
296
|
@mode.setter
|
|
208
|
-
def mode(self, value: Optional[pulumi.Input[str]]):
|
|
297
|
+
def mode(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
209
298
|
pulumi.set(self, "mode", value)
|
|
210
299
|
|
|
211
300
|
@property
|
|
212
301
|
@pulumi.getter
|
|
213
|
-
def name(self) -> Optional[pulumi.Input[str]]:
|
|
302
|
+
def name(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
214
303
|
"""
|
|
215
304
|
The name of the security policy
|
|
216
305
|
"""
|
|
217
306
|
return pulumi.get(self, "name")
|
|
218
307
|
|
|
219
308
|
@name.setter
|
|
220
|
-
def name(self, value: Optional[pulumi.Input[str]]):
|
|
309
|
+
def name(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
221
310
|
pulumi.set(self, "name", value)
|
|
222
311
|
|
|
312
|
+
@property
|
|
313
|
+
@pulumi.getter(name="sessionReclassifyAllow")
|
|
314
|
+
def session_reclassify_allow(self) -> Optional[pulumi.Input[builtins.bool]]:
|
|
315
|
+
"""
|
|
316
|
+
Session Reclassify Allow
|
|
317
|
+
"""
|
|
318
|
+
return pulumi.get(self, "session_reclassify_allow")
|
|
319
|
+
|
|
320
|
+
@session_reclassify_allow.setter
|
|
321
|
+
def session_reclassify_allow(self, value: Optional[pulumi.Input[builtins.bool]]):
|
|
322
|
+
pulumi.set(self, "session_reclassify_allow", value)
|
|
323
|
+
|
|
223
324
|
@property
|
|
224
325
|
@pulumi.getter(name="tcpSynFloodLimit")
|
|
225
|
-
def tcp_syn_flood_limit(self) -> Optional[pulumi.Input[str]]:
|
|
326
|
+
def tcp_syn_flood_limit(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
226
327
|
"""
|
|
227
328
|
TCP SYN Flood Limit, value from 1 to 4294967295
|
|
228
329
|
"""
|
|
229
330
|
return pulumi.get(self, "tcp_syn_flood_limit")
|
|
230
331
|
|
|
231
332
|
@tcp_syn_flood_limit.setter
|
|
232
|
-
def tcp_syn_flood_limit(self, value: Optional[pulumi.Input[str]]):
|
|
333
|
+
def tcp_syn_flood_limit(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
233
334
|
pulumi.set(self, "tcp_syn_flood_limit", value)
|
|
234
335
|
|
|
336
|
+
@property
|
|
337
|
+
@pulumi.getter(name="unifiedLogging")
|
|
338
|
+
def unified_logging(self) -> Optional[pulumi.Input[builtins.bool]]:
|
|
339
|
+
"""
|
|
340
|
+
Unified Logging
|
|
341
|
+
"""
|
|
342
|
+
return pulumi.get(self, "unified_logging")
|
|
343
|
+
|
|
344
|
+
@unified_logging.setter
|
|
345
|
+
def unified_logging(self, value: Optional[pulumi.Input[builtins.bool]]):
|
|
346
|
+
pulumi.set(self, "unified_logging", value)
|
|
347
|
+
|
|
235
348
|
@property
|
|
236
349
|
@pulumi.getter(name="useCase")
|
|
237
|
-
def use_case(self) -> Optional[pulumi.Input[str]]:
|
|
350
|
+
def use_case(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
238
351
|
"""
|
|
239
352
|
The use case of the security policy - Choices: `custom`, `compliance`, `guestAccess`, `directCloudAccess`,
|
|
240
353
|
`directInternetAccess`, `directCloudAccess` - Default value: `custom`
|
|
@@ -242,45 +355,59 @@ class SecurityPolicyArgs:
|
|
|
242
355
|
return pulumi.get(self, "use_case")
|
|
243
356
|
|
|
244
357
|
@use_case.setter
|
|
245
|
-
def use_case(self, value: Optional[pulumi.Input[str]]):
|
|
358
|
+
def use_case(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
246
359
|
pulumi.set(self, "use_case", value)
|
|
247
360
|
|
|
248
361
|
|
|
249
362
|
@pulumi.input_type
|
|
250
363
|
class _SecurityPolicyState:
|
|
251
364
|
def __init__(__self__, *,
|
|
252
|
-
audit_trail: Optional[pulumi.Input[str]] = None,
|
|
365
|
+
audit_trail: Optional[pulumi.Input[builtins.str]] = None,
|
|
253
366
|
definitions: Optional[pulumi.Input[Sequence[pulumi.Input['SecurityPolicyDefinitionArgs']]]] = None,
|
|
254
|
-
description: Optional[pulumi.Input[str]] = None,
|
|
255
|
-
direct_internet_applications: Optional[pulumi.Input[str]] = None,
|
|
256
|
-
failure_mode: Optional[pulumi.Input[str]] = None,
|
|
257
|
-
high_speed_logging_server_ip: Optional[pulumi.Input[str]] = None,
|
|
258
|
-
high_speed_logging_server_port: Optional[pulumi.Input[str]] = None,
|
|
259
|
-
|
|
367
|
+
description: Optional[pulumi.Input[builtins.str]] = None,
|
|
368
|
+
direct_internet_applications: Optional[pulumi.Input[builtins.str]] = None,
|
|
369
|
+
failure_mode: Optional[pulumi.Input[builtins.str]] = None,
|
|
370
|
+
high_speed_logging_server_ip: Optional[pulumi.Input[builtins.str]] = None,
|
|
371
|
+
high_speed_logging_server_port: Optional[pulumi.Input[builtins.str]] = None,
|
|
372
|
+
high_speed_logging_server_source_interface: Optional[pulumi.Input[builtins.str]] = None,
|
|
373
|
+
high_speed_logging_vpn: Optional[pulumi.Input[builtins.str]] = None,
|
|
374
|
+
imcp_unreachable_allow: Optional[pulumi.Input[builtins.bool]] = None,
|
|
260
375
|
loggings: Optional[pulumi.Input[Sequence[pulumi.Input['SecurityPolicyLoggingArgs']]]] = None,
|
|
261
|
-
match_statistics_per_filter: Optional[pulumi.Input[str]] = None,
|
|
262
|
-
|
|
263
|
-
|
|
264
|
-
|
|
265
|
-
|
|
266
|
-
|
|
376
|
+
match_statistics_per_filter: Optional[pulumi.Input[builtins.str]] = None,
|
|
377
|
+
max_incomplete_icmp_limit: Optional[pulumi.Input[builtins.int]] = None,
|
|
378
|
+
max_incomplete_tcp_limit: Optional[pulumi.Input[builtins.int]] = None,
|
|
379
|
+
max_incomplete_udp_limit: Optional[pulumi.Input[builtins.int]] = None,
|
|
380
|
+
mode: Optional[pulumi.Input[builtins.str]] = None,
|
|
381
|
+
name: Optional[pulumi.Input[builtins.str]] = None,
|
|
382
|
+
session_reclassify_allow: Optional[pulumi.Input[builtins.bool]] = None,
|
|
383
|
+
tcp_syn_flood_limit: Optional[pulumi.Input[builtins.str]] = None,
|
|
384
|
+
unified_logging: Optional[pulumi.Input[builtins.bool]] = None,
|
|
385
|
+
use_case: Optional[pulumi.Input[builtins.str]] = None,
|
|
386
|
+
version: Optional[pulumi.Input[builtins.int]] = None):
|
|
267
387
|
"""
|
|
268
388
|
Input properties used for looking up and filtering SecurityPolicy resources.
|
|
269
|
-
:param pulumi.Input[str] audit_trail: Audit trail - Choices: `on`, `off`
|
|
389
|
+
:param pulumi.Input[builtins.str] audit_trail: Audit trail - Choices: `on`, `off`
|
|
270
390
|
:param pulumi.Input[Sequence[pulumi.Input['SecurityPolicyDefinitionArgs']]] definitions: List of policy definitions
|
|
271
|
-
:param pulumi.Input[str] description: The description of the security policy
|
|
272
|
-
:param pulumi.Input[str] direct_internet_applications: Bypass firewall policy and allow all Internet traffic to/from VPN 0 - Choices: `allow`, `deny`
|
|
273
|
-
:param pulumi.Input[str] failure_mode: Failure mode - Choices: `open`, `close`
|
|
274
|
-
:param pulumi.Input[str] high_speed_logging_server_ip: High Speed Logging Server IP
|
|
275
|
-
:param pulumi.Input[str] high_speed_logging_server_port: High Speed Logging Port
|
|
276
|
-
:param pulumi.Input[str]
|
|
277
|
-
:param pulumi.Input[str]
|
|
278
|
-
:param pulumi.Input[
|
|
279
|
-
:param pulumi.Input[str]
|
|
280
|
-
:param pulumi.Input[
|
|
281
|
-
:param pulumi.Input[
|
|
391
|
+
:param pulumi.Input[builtins.str] description: The description of the security policy
|
|
392
|
+
:param pulumi.Input[builtins.str] direct_internet_applications: Bypass firewall policy and allow all Internet traffic to/from VPN 0 - Choices: `allow`, `deny`
|
|
393
|
+
:param pulumi.Input[builtins.str] failure_mode: Failure mode - Choices: `open`, `close`
|
|
394
|
+
:param pulumi.Input[builtins.str] high_speed_logging_server_ip: High Speed Logging Server IP
|
|
395
|
+
:param pulumi.Input[builtins.str] high_speed_logging_server_port: High Speed Logging Port
|
|
396
|
+
:param pulumi.Input[builtins.str] high_speed_logging_server_source_interface: High Speed Logging Source Interface
|
|
397
|
+
:param pulumi.Input[builtins.str] high_speed_logging_vpn: High Speed Logging VPN
|
|
398
|
+
:param pulumi.Input[builtins.bool] imcp_unreachable_allow: ICMP Unreachable Allow
|
|
399
|
+
:param pulumi.Input[builtins.str] match_statistics_per_filter: Match Statistics per-filter - Choices: `on`, `off`
|
|
400
|
+
:param pulumi.Input[builtins.int] max_incomplete_icmp_limit: Max Incomplete ICMP Limit
|
|
401
|
+
:param pulumi.Input[builtins.int] max_incomplete_tcp_limit: Max Incomplete TCP Limit
|
|
402
|
+
:param pulumi.Input[builtins.int] max_incomplete_udp_limit: Max Incomplete UDP Limit
|
|
403
|
+
:param pulumi.Input[builtins.str] mode: The policy mode - Choices: `security`, `unified` - Default value: `security`
|
|
404
|
+
:param pulumi.Input[builtins.str] name: The name of the security policy
|
|
405
|
+
:param pulumi.Input[builtins.bool] session_reclassify_allow: Session Reclassify Allow
|
|
406
|
+
:param pulumi.Input[builtins.str] tcp_syn_flood_limit: TCP SYN Flood Limit, value from 1 to 4294967295
|
|
407
|
+
:param pulumi.Input[builtins.bool] unified_logging: Unified Logging
|
|
408
|
+
:param pulumi.Input[builtins.str] use_case: The use case of the security policy - Choices: `custom`, `compliance`, `guestAccess`, `directCloudAccess`,
|
|
282
409
|
`directInternetAccess`, `directCloudAccess` - Default value: `custom`
|
|
283
|
-
:param pulumi.Input[int] version: The version of the object
|
|
410
|
+
:param pulumi.Input[builtins.int] version: The version of the object
|
|
284
411
|
"""
|
|
285
412
|
if audit_trail is not None:
|
|
286
413
|
pulumi.set(__self__, "audit_trail", audit_trail)
|
|
@@ -296,18 +423,32 @@ class _SecurityPolicyState:
|
|
|
296
423
|
pulumi.set(__self__, "high_speed_logging_server_ip", high_speed_logging_server_ip)
|
|
297
424
|
if high_speed_logging_server_port is not None:
|
|
298
425
|
pulumi.set(__self__, "high_speed_logging_server_port", high_speed_logging_server_port)
|
|
426
|
+
if high_speed_logging_server_source_interface is not None:
|
|
427
|
+
pulumi.set(__self__, "high_speed_logging_server_source_interface", high_speed_logging_server_source_interface)
|
|
299
428
|
if high_speed_logging_vpn is not None:
|
|
300
429
|
pulumi.set(__self__, "high_speed_logging_vpn", high_speed_logging_vpn)
|
|
430
|
+
if imcp_unreachable_allow is not None:
|
|
431
|
+
pulumi.set(__self__, "imcp_unreachable_allow", imcp_unreachable_allow)
|
|
301
432
|
if loggings is not None:
|
|
302
433
|
pulumi.set(__self__, "loggings", loggings)
|
|
303
434
|
if match_statistics_per_filter is not None:
|
|
304
435
|
pulumi.set(__self__, "match_statistics_per_filter", match_statistics_per_filter)
|
|
436
|
+
if max_incomplete_icmp_limit is not None:
|
|
437
|
+
pulumi.set(__self__, "max_incomplete_icmp_limit", max_incomplete_icmp_limit)
|
|
438
|
+
if max_incomplete_tcp_limit is not None:
|
|
439
|
+
pulumi.set(__self__, "max_incomplete_tcp_limit", max_incomplete_tcp_limit)
|
|
440
|
+
if max_incomplete_udp_limit is not None:
|
|
441
|
+
pulumi.set(__self__, "max_incomplete_udp_limit", max_incomplete_udp_limit)
|
|
305
442
|
if mode is not None:
|
|
306
443
|
pulumi.set(__self__, "mode", mode)
|
|
307
444
|
if name is not None:
|
|
308
445
|
pulumi.set(__self__, "name", name)
|
|
446
|
+
if session_reclassify_allow is not None:
|
|
447
|
+
pulumi.set(__self__, "session_reclassify_allow", session_reclassify_allow)
|
|
309
448
|
if tcp_syn_flood_limit is not None:
|
|
310
449
|
pulumi.set(__self__, "tcp_syn_flood_limit", tcp_syn_flood_limit)
|
|
450
|
+
if unified_logging is not None:
|
|
451
|
+
pulumi.set(__self__, "unified_logging", unified_logging)
|
|
311
452
|
if use_case is not None:
|
|
312
453
|
pulumi.set(__self__, "use_case", use_case)
|
|
313
454
|
if version is not None:
|
|
@@ -315,14 +456,14 @@ class _SecurityPolicyState:
|
|
|
315
456
|
|
|
316
457
|
@property
|
|
317
458
|
@pulumi.getter(name="auditTrail")
|
|
318
|
-
def audit_trail(self) -> Optional[pulumi.Input[str]]:
|
|
459
|
+
def audit_trail(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
319
460
|
"""
|
|
320
461
|
Audit trail - Choices: `on`, `off`
|
|
321
462
|
"""
|
|
322
463
|
return pulumi.get(self, "audit_trail")
|
|
323
464
|
|
|
324
465
|
@audit_trail.setter
|
|
325
|
-
def audit_trail(self, value: Optional[pulumi.Input[str]]):
|
|
466
|
+
def audit_trail(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
326
467
|
pulumi.set(self, "audit_trail", value)
|
|
327
468
|
|
|
328
469
|
@property
|
|
@@ -339,76 +480,100 @@ class _SecurityPolicyState:
|
|
|
339
480
|
|
|
340
481
|
@property
|
|
341
482
|
@pulumi.getter
|
|
342
|
-
def description(self) -> Optional[pulumi.Input[str]]:
|
|
483
|
+
def description(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
343
484
|
"""
|
|
344
485
|
The description of the security policy
|
|
345
486
|
"""
|
|
346
487
|
return pulumi.get(self, "description")
|
|
347
488
|
|
|
348
489
|
@description.setter
|
|
349
|
-
def description(self, value: Optional[pulumi.Input[str]]):
|
|
490
|
+
def description(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
350
491
|
pulumi.set(self, "description", value)
|
|
351
492
|
|
|
352
493
|
@property
|
|
353
494
|
@pulumi.getter(name="directInternetApplications")
|
|
354
|
-
def direct_internet_applications(self) -> Optional[pulumi.Input[str]]:
|
|
495
|
+
def direct_internet_applications(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
355
496
|
"""
|
|
356
497
|
Bypass firewall policy and allow all Internet traffic to/from VPN 0 - Choices: `allow`, `deny`
|
|
357
498
|
"""
|
|
358
499
|
return pulumi.get(self, "direct_internet_applications")
|
|
359
500
|
|
|
360
501
|
@direct_internet_applications.setter
|
|
361
|
-
def direct_internet_applications(self, value: Optional[pulumi.Input[str]]):
|
|
502
|
+
def direct_internet_applications(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
362
503
|
pulumi.set(self, "direct_internet_applications", value)
|
|
363
504
|
|
|
364
505
|
@property
|
|
365
506
|
@pulumi.getter(name="failureMode")
|
|
366
|
-
def failure_mode(self) -> Optional[pulumi.Input[str]]:
|
|
507
|
+
def failure_mode(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
367
508
|
"""
|
|
368
509
|
Failure mode - Choices: `open`, `close`
|
|
369
510
|
"""
|
|
370
511
|
return pulumi.get(self, "failure_mode")
|
|
371
512
|
|
|
372
513
|
@failure_mode.setter
|
|
373
|
-
def failure_mode(self, value: Optional[pulumi.Input[str]]):
|
|
514
|
+
def failure_mode(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
374
515
|
pulumi.set(self, "failure_mode", value)
|
|
375
516
|
|
|
376
517
|
@property
|
|
377
518
|
@pulumi.getter(name="highSpeedLoggingServerIp")
|
|
378
|
-
def high_speed_logging_server_ip(self) -> Optional[pulumi.Input[str]]:
|
|
519
|
+
def high_speed_logging_server_ip(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
379
520
|
"""
|
|
380
521
|
High Speed Logging Server IP
|
|
381
522
|
"""
|
|
382
523
|
return pulumi.get(self, "high_speed_logging_server_ip")
|
|
383
524
|
|
|
384
525
|
@high_speed_logging_server_ip.setter
|
|
385
|
-
def high_speed_logging_server_ip(self, value: Optional[pulumi.Input[str]]):
|
|
526
|
+
def high_speed_logging_server_ip(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
386
527
|
pulumi.set(self, "high_speed_logging_server_ip", value)
|
|
387
528
|
|
|
388
529
|
@property
|
|
389
530
|
@pulumi.getter(name="highSpeedLoggingServerPort")
|
|
390
|
-
def high_speed_logging_server_port(self) -> Optional[pulumi.Input[str]]:
|
|
531
|
+
def high_speed_logging_server_port(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
391
532
|
"""
|
|
392
533
|
High Speed Logging Port
|
|
393
534
|
"""
|
|
394
535
|
return pulumi.get(self, "high_speed_logging_server_port")
|
|
395
536
|
|
|
396
537
|
@high_speed_logging_server_port.setter
|
|
397
|
-
def high_speed_logging_server_port(self, value: Optional[pulumi.Input[str]]):
|
|
538
|
+
def high_speed_logging_server_port(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
398
539
|
pulumi.set(self, "high_speed_logging_server_port", value)
|
|
399
540
|
|
|
541
|
+
@property
|
|
542
|
+
@pulumi.getter(name="highSpeedLoggingServerSourceInterface")
|
|
543
|
+
def high_speed_logging_server_source_interface(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
544
|
+
"""
|
|
545
|
+
High Speed Logging Source Interface
|
|
546
|
+
"""
|
|
547
|
+
return pulumi.get(self, "high_speed_logging_server_source_interface")
|
|
548
|
+
|
|
549
|
+
@high_speed_logging_server_source_interface.setter
|
|
550
|
+
def high_speed_logging_server_source_interface(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
551
|
+
pulumi.set(self, "high_speed_logging_server_source_interface", value)
|
|
552
|
+
|
|
400
553
|
@property
|
|
401
554
|
@pulumi.getter(name="highSpeedLoggingVpn")
|
|
402
|
-
def high_speed_logging_vpn(self) -> Optional[pulumi.Input[str]]:
|
|
555
|
+
def high_speed_logging_vpn(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
403
556
|
"""
|
|
404
557
|
High Speed Logging VPN
|
|
405
558
|
"""
|
|
406
559
|
return pulumi.get(self, "high_speed_logging_vpn")
|
|
407
560
|
|
|
408
561
|
@high_speed_logging_vpn.setter
|
|
409
|
-
def high_speed_logging_vpn(self, value: Optional[pulumi.Input[str]]):
|
|
562
|
+
def high_speed_logging_vpn(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
410
563
|
pulumi.set(self, "high_speed_logging_vpn", value)
|
|
411
564
|
|
|
565
|
+
@property
|
|
566
|
+
@pulumi.getter(name="imcpUnreachableAllow")
|
|
567
|
+
def imcp_unreachable_allow(self) -> Optional[pulumi.Input[builtins.bool]]:
|
|
568
|
+
"""
|
|
569
|
+
ICMP Unreachable Allow
|
|
570
|
+
"""
|
|
571
|
+
return pulumi.get(self, "imcp_unreachable_allow")
|
|
572
|
+
|
|
573
|
+
@imcp_unreachable_allow.setter
|
|
574
|
+
def imcp_unreachable_allow(self, value: Optional[pulumi.Input[builtins.bool]]):
|
|
575
|
+
pulumi.set(self, "imcp_unreachable_allow", value)
|
|
576
|
+
|
|
412
577
|
@property
|
|
413
578
|
@pulumi.getter
|
|
414
579
|
def loggings(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['SecurityPolicyLoggingArgs']]]]:
|
|
@@ -420,55 +585,115 @@ class _SecurityPolicyState:
|
|
|
420
585
|
|
|
421
586
|
@property
|
|
422
587
|
@pulumi.getter(name="matchStatisticsPerFilter")
|
|
423
|
-
def match_statistics_per_filter(self) -> Optional[pulumi.Input[str]]:
|
|
588
|
+
def match_statistics_per_filter(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
424
589
|
"""
|
|
425
590
|
Match Statistics per-filter - Choices: `on`, `off`
|
|
426
591
|
"""
|
|
427
592
|
return pulumi.get(self, "match_statistics_per_filter")
|
|
428
593
|
|
|
429
594
|
@match_statistics_per_filter.setter
|
|
430
|
-
def match_statistics_per_filter(self, value: Optional[pulumi.Input[str]]):
|
|
595
|
+
def match_statistics_per_filter(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
431
596
|
pulumi.set(self, "match_statistics_per_filter", value)
|
|
432
597
|
|
|
598
|
+
@property
|
|
599
|
+
@pulumi.getter(name="maxIncompleteIcmpLimit")
|
|
600
|
+
def max_incomplete_icmp_limit(self) -> Optional[pulumi.Input[builtins.int]]:
|
|
601
|
+
"""
|
|
602
|
+
Max Incomplete ICMP Limit
|
|
603
|
+
"""
|
|
604
|
+
return pulumi.get(self, "max_incomplete_icmp_limit")
|
|
605
|
+
|
|
606
|
+
@max_incomplete_icmp_limit.setter
|
|
607
|
+
def max_incomplete_icmp_limit(self, value: Optional[pulumi.Input[builtins.int]]):
|
|
608
|
+
pulumi.set(self, "max_incomplete_icmp_limit", value)
|
|
609
|
+
|
|
610
|
+
@property
|
|
611
|
+
@pulumi.getter(name="maxIncompleteTcpLimit")
|
|
612
|
+
def max_incomplete_tcp_limit(self) -> Optional[pulumi.Input[builtins.int]]:
|
|
613
|
+
"""
|
|
614
|
+
Max Incomplete TCP Limit
|
|
615
|
+
"""
|
|
616
|
+
return pulumi.get(self, "max_incomplete_tcp_limit")
|
|
617
|
+
|
|
618
|
+
@max_incomplete_tcp_limit.setter
|
|
619
|
+
def max_incomplete_tcp_limit(self, value: Optional[pulumi.Input[builtins.int]]):
|
|
620
|
+
pulumi.set(self, "max_incomplete_tcp_limit", value)
|
|
621
|
+
|
|
622
|
+
@property
|
|
623
|
+
@pulumi.getter(name="maxIncompleteUdpLimit")
|
|
624
|
+
def max_incomplete_udp_limit(self) -> Optional[pulumi.Input[builtins.int]]:
|
|
625
|
+
"""
|
|
626
|
+
Max Incomplete UDP Limit
|
|
627
|
+
"""
|
|
628
|
+
return pulumi.get(self, "max_incomplete_udp_limit")
|
|
629
|
+
|
|
630
|
+
@max_incomplete_udp_limit.setter
|
|
631
|
+
def max_incomplete_udp_limit(self, value: Optional[pulumi.Input[builtins.int]]):
|
|
632
|
+
pulumi.set(self, "max_incomplete_udp_limit", value)
|
|
633
|
+
|
|
433
634
|
@property
|
|
434
635
|
@pulumi.getter
|
|
435
|
-
def mode(self) -> Optional[pulumi.Input[str]]:
|
|
636
|
+
def mode(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
436
637
|
"""
|
|
437
638
|
The policy mode - Choices: `security`, `unified` - Default value: `security`
|
|
438
639
|
"""
|
|
439
640
|
return pulumi.get(self, "mode")
|
|
440
641
|
|
|
441
642
|
@mode.setter
|
|
442
|
-
def mode(self, value: Optional[pulumi.Input[str]]):
|
|
643
|
+
def mode(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
443
644
|
pulumi.set(self, "mode", value)
|
|
444
645
|
|
|
445
646
|
@property
|
|
446
647
|
@pulumi.getter
|
|
447
|
-
def name(self) -> Optional[pulumi.Input[str]]:
|
|
648
|
+
def name(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
448
649
|
"""
|
|
449
650
|
The name of the security policy
|
|
450
651
|
"""
|
|
451
652
|
return pulumi.get(self, "name")
|
|
452
653
|
|
|
453
654
|
@name.setter
|
|
454
|
-
def name(self, value: Optional[pulumi.Input[str]]):
|
|
655
|
+
def name(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
455
656
|
pulumi.set(self, "name", value)
|
|
456
657
|
|
|
658
|
+
@property
|
|
659
|
+
@pulumi.getter(name="sessionReclassifyAllow")
|
|
660
|
+
def session_reclassify_allow(self) -> Optional[pulumi.Input[builtins.bool]]:
|
|
661
|
+
"""
|
|
662
|
+
Session Reclassify Allow
|
|
663
|
+
"""
|
|
664
|
+
return pulumi.get(self, "session_reclassify_allow")
|
|
665
|
+
|
|
666
|
+
@session_reclassify_allow.setter
|
|
667
|
+
def session_reclassify_allow(self, value: Optional[pulumi.Input[builtins.bool]]):
|
|
668
|
+
pulumi.set(self, "session_reclassify_allow", value)
|
|
669
|
+
|
|
457
670
|
@property
|
|
458
671
|
@pulumi.getter(name="tcpSynFloodLimit")
|
|
459
|
-
def tcp_syn_flood_limit(self) -> Optional[pulumi.Input[str]]:
|
|
672
|
+
def tcp_syn_flood_limit(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
460
673
|
"""
|
|
461
674
|
TCP SYN Flood Limit, value from 1 to 4294967295
|
|
462
675
|
"""
|
|
463
676
|
return pulumi.get(self, "tcp_syn_flood_limit")
|
|
464
677
|
|
|
465
678
|
@tcp_syn_flood_limit.setter
|
|
466
|
-
def tcp_syn_flood_limit(self, value: Optional[pulumi.Input[str]]):
|
|
679
|
+
def tcp_syn_flood_limit(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
467
680
|
pulumi.set(self, "tcp_syn_flood_limit", value)
|
|
468
681
|
|
|
682
|
+
@property
|
|
683
|
+
@pulumi.getter(name="unifiedLogging")
|
|
684
|
+
def unified_logging(self) -> Optional[pulumi.Input[builtins.bool]]:
|
|
685
|
+
"""
|
|
686
|
+
Unified Logging
|
|
687
|
+
"""
|
|
688
|
+
return pulumi.get(self, "unified_logging")
|
|
689
|
+
|
|
690
|
+
@unified_logging.setter
|
|
691
|
+
def unified_logging(self, value: Optional[pulumi.Input[builtins.bool]]):
|
|
692
|
+
pulumi.set(self, "unified_logging", value)
|
|
693
|
+
|
|
469
694
|
@property
|
|
470
695
|
@pulumi.getter(name="useCase")
|
|
471
|
-
def use_case(self) -> Optional[pulumi.Input[str]]:
|
|
696
|
+
def use_case(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
472
697
|
"""
|
|
473
698
|
The use case of the security policy - Choices: `custom`, `compliance`, `guestAccess`, `directCloudAccess`,
|
|
474
699
|
`directInternetAccess`, `directCloudAccess` - Default value: `custom`
|
|
@@ -476,19 +701,19 @@ class _SecurityPolicyState:
|
|
|
476
701
|
return pulumi.get(self, "use_case")
|
|
477
702
|
|
|
478
703
|
@use_case.setter
|
|
479
|
-
def use_case(self, value: Optional[pulumi.Input[str]]):
|
|
704
|
+
def use_case(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
480
705
|
pulumi.set(self, "use_case", value)
|
|
481
706
|
|
|
482
707
|
@property
|
|
483
708
|
@pulumi.getter
|
|
484
|
-
def version(self) -> Optional[pulumi.Input[int]]:
|
|
709
|
+
def version(self) -> Optional[pulumi.Input[builtins.int]]:
|
|
485
710
|
"""
|
|
486
711
|
The version of the object
|
|
487
712
|
"""
|
|
488
713
|
return pulumi.get(self, "version")
|
|
489
714
|
|
|
490
715
|
@version.setter
|
|
491
|
-
def version(self, value: Optional[pulumi.Input[int]]):
|
|
716
|
+
def version(self, value: Optional[pulumi.Input[builtins.int]]):
|
|
492
717
|
pulumi.set(self, "version", value)
|
|
493
718
|
|
|
494
719
|
|
|
@@ -497,20 +722,27 @@ class SecurityPolicy(pulumi.CustomResource):
|
|
|
497
722
|
def __init__(__self__,
|
|
498
723
|
resource_name: str,
|
|
499
724
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
500
|
-
audit_trail: Optional[pulumi.Input[str]] = None,
|
|
725
|
+
audit_trail: Optional[pulumi.Input[builtins.str]] = None,
|
|
501
726
|
definitions: Optional[pulumi.Input[Sequence[pulumi.Input[Union['SecurityPolicyDefinitionArgs', 'SecurityPolicyDefinitionArgsDict']]]]] = None,
|
|
502
|
-
description: Optional[pulumi.Input[str]] = None,
|
|
503
|
-
direct_internet_applications: Optional[pulumi.Input[str]] = None,
|
|
504
|
-
failure_mode: Optional[pulumi.Input[str]] = None,
|
|
505
|
-
high_speed_logging_server_ip: Optional[pulumi.Input[str]] = None,
|
|
506
|
-
high_speed_logging_server_port: Optional[pulumi.Input[str]] = None,
|
|
507
|
-
|
|
727
|
+
description: Optional[pulumi.Input[builtins.str]] = None,
|
|
728
|
+
direct_internet_applications: Optional[pulumi.Input[builtins.str]] = None,
|
|
729
|
+
failure_mode: Optional[pulumi.Input[builtins.str]] = None,
|
|
730
|
+
high_speed_logging_server_ip: Optional[pulumi.Input[builtins.str]] = None,
|
|
731
|
+
high_speed_logging_server_port: Optional[pulumi.Input[builtins.str]] = None,
|
|
732
|
+
high_speed_logging_server_source_interface: Optional[pulumi.Input[builtins.str]] = None,
|
|
733
|
+
high_speed_logging_vpn: Optional[pulumi.Input[builtins.str]] = None,
|
|
734
|
+
imcp_unreachable_allow: Optional[pulumi.Input[builtins.bool]] = None,
|
|
508
735
|
loggings: Optional[pulumi.Input[Sequence[pulumi.Input[Union['SecurityPolicyLoggingArgs', 'SecurityPolicyLoggingArgsDict']]]]] = None,
|
|
509
|
-
match_statistics_per_filter: Optional[pulumi.Input[str]] = None,
|
|
510
|
-
|
|
511
|
-
|
|
512
|
-
|
|
513
|
-
|
|
736
|
+
match_statistics_per_filter: Optional[pulumi.Input[builtins.str]] = None,
|
|
737
|
+
max_incomplete_icmp_limit: Optional[pulumi.Input[builtins.int]] = None,
|
|
738
|
+
max_incomplete_tcp_limit: Optional[pulumi.Input[builtins.int]] = None,
|
|
739
|
+
max_incomplete_udp_limit: Optional[pulumi.Input[builtins.int]] = None,
|
|
740
|
+
mode: Optional[pulumi.Input[builtins.str]] = None,
|
|
741
|
+
name: Optional[pulumi.Input[builtins.str]] = None,
|
|
742
|
+
session_reclassify_allow: Optional[pulumi.Input[builtins.bool]] = None,
|
|
743
|
+
tcp_syn_flood_limit: Optional[pulumi.Input[builtins.str]] = None,
|
|
744
|
+
unified_logging: Optional[pulumi.Input[builtins.bool]] = None,
|
|
745
|
+
use_case: Optional[pulumi.Input[builtins.str]] = None,
|
|
514
746
|
__props__=None):
|
|
515
747
|
"""
|
|
516
748
|
This resource can manage a Security Policy .
|
|
@@ -523,19 +755,26 @@ class SecurityPolicy(pulumi.CustomResource):
|
|
|
523
755
|
|
|
524
756
|
:param str resource_name: The name of the resource.
|
|
525
757
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
526
|
-
:param pulumi.Input[str] audit_trail: Audit trail - Choices: `on`, `off`
|
|
758
|
+
:param pulumi.Input[builtins.str] audit_trail: Audit trail - Choices: `on`, `off`
|
|
527
759
|
:param pulumi.Input[Sequence[pulumi.Input[Union['SecurityPolicyDefinitionArgs', 'SecurityPolicyDefinitionArgsDict']]]] definitions: List of policy definitions
|
|
528
|
-
:param pulumi.Input[str] description: The description of the security policy
|
|
529
|
-
:param pulumi.Input[str] direct_internet_applications: Bypass firewall policy and allow all Internet traffic to/from VPN 0 - Choices: `allow`, `deny`
|
|
530
|
-
:param pulumi.Input[str] failure_mode: Failure mode - Choices: `open`, `close`
|
|
531
|
-
:param pulumi.Input[str] high_speed_logging_server_ip: High Speed Logging Server IP
|
|
532
|
-
:param pulumi.Input[str] high_speed_logging_server_port: High Speed Logging Port
|
|
533
|
-
:param pulumi.Input[str]
|
|
534
|
-
:param pulumi.Input[str]
|
|
535
|
-
:param pulumi.Input[
|
|
536
|
-
:param pulumi.Input[str]
|
|
537
|
-
:param pulumi.Input[
|
|
538
|
-
:param pulumi.Input[
|
|
760
|
+
:param pulumi.Input[builtins.str] description: The description of the security policy
|
|
761
|
+
:param pulumi.Input[builtins.str] direct_internet_applications: Bypass firewall policy and allow all Internet traffic to/from VPN 0 - Choices: `allow`, `deny`
|
|
762
|
+
:param pulumi.Input[builtins.str] failure_mode: Failure mode - Choices: `open`, `close`
|
|
763
|
+
:param pulumi.Input[builtins.str] high_speed_logging_server_ip: High Speed Logging Server IP
|
|
764
|
+
:param pulumi.Input[builtins.str] high_speed_logging_server_port: High Speed Logging Port
|
|
765
|
+
:param pulumi.Input[builtins.str] high_speed_logging_server_source_interface: High Speed Logging Source Interface
|
|
766
|
+
:param pulumi.Input[builtins.str] high_speed_logging_vpn: High Speed Logging VPN
|
|
767
|
+
:param pulumi.Input[builtins.bool] imcp_unreachable_allow: ICMP Unreachable Allow
|
|
768
|
+
:param pulumi.Input[builtins.str] match_statistics_per_filter: Match Statistics per-filter - Choices: `on`, `off`
|
|
769
|
+
:param pulumi.Input[builtins.int] max_incomplete_icmp_limit: Max Incomplete ICMP Limit
|
|
770
|
+
:param pulumi.Input[builtins.int] max_incomplete_tcp_limit: Max Incomplete TCP Limit
|
|
771
|
+
:param pulumi.Input[builtins.int] max_incomplete_udp_limit: Max Incomplete UDP Limit
|
|
772
|
+
:param pulumi.Input[builtins.str] mode: The policy mode - Choices: `security`, `unified` - Default value: `security`
|
|
773
|
+
:param pulumi.Input[builtins.str] name: The name of the security policy
|
|
774
|
+
:param pulumi.Input[builtins.bool] session_reclassify_allow: Session Reclassify Allow
|
|
775
|
+
:param pulumi.Input[builtins.str] tcp_syn_flood_limit: TCP SYN Flood Limit, value from 1 to 4294967295
|
|
776
|
+
:param pulumi.Input[builtins.bool] unified_logging: Unified Logging
|
|
777
|
+
:param pulumi.Input[builtins.str] use_case: The use case of the security policy - Choices: `custom`, `compliance`, `guestAccess`, `directCloudAccess`,
|
|
539
778
|
`directInternetAccess`, `directCloudAccess` - Default value: `custom`
|
|
540
779
|
"""
|
|
541
780
|
...
|
|
@@ -568,20 +807,27 @@ class SecurityPolicy(pulumi.CustomResource):
|
|
|
568
807
|
def _internal_init(__self__,
|
|
569
808
|
resource_name: str,
|
|
570
809
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
571
|
-
audit_trail: Optional[pulumi.Input[str]] = None,
|
|
810
|
+
audit_trail: Optional[pulumi.Input[builtins.str]] = None,
|
|
572
811
|
definitions: Optional[pulumi.Input[Sequence[pulumi.Input[Union['SecurityPolicyDefinitionArgs', 'SecurityPolicyDefinitionArgsDict']]]]] = None,
|
|
573
|
-
description: Optional[pulumi.Input[str]] = None,
|
|
574
|
-
direct_internet_applications: Optional[pulumi.Input[str]] = None,
|
|
575
|
-
failure_mode: Optional[pulumi.Input[str]] = None,
|
|
576
|
-
high_speed_logging_server_ip: Optional[pulumi.Input[str]] = None,
|
|
577
|
-
high_speed_logging_server_port: Optional[pulumi.Input[str]] = None,
|
|
578
|
-
|
|
812
|
+
description: Optional[pulumi.Input[builtins.str]] = None,
|
|
813
|
+
direct_internet_applications: Optional[pulumi.Input[builtins.str]] = None,
|
|
814
|
+
failure_mode: Optional[pulumi.Input[builtins.str]] = None,
|
|
815
|
+
high_speed_logging_server_ip: Optional[pulumi.Input[builtins.str]] = None,
|
|
816
|
+
high_speed_logging_server_port: Optional[pulumi.Input[builtins.str]] = None,
|
|
817
|
+
high_speed_logging_server_source_interface: Optional[pulumi.Input[builtins.str]] = None,
|
|
818
|
+
high_speed_logging_vpn: Optional[pulumi.Input[builtins.str]] = None,
|
|
819
|
+
imcp_unreachable_allow: Optional[pulumi.Input[builtins.bool]] = None,
|
|
579
820
|
loggings: Optional[pulumi.Input[Sequence[pulumi.Input[Union['SecurityPolicyLoggingArgs', 'SecurityPolicyLoggingArgsDict']]]]] = None,
|
|
580
|
-
match_statistics_per_filter: Optional[pulumi.Input[str]] = None,
|
|
581
|
-
|
|
582
|
-
|
|
583
|
-
|
|
584
|
-
|
|
821
|
+
match_statistics_per_filter: Optional[pulumi.Input[builtins.str]] = None,
|
|
822
|
+
max_incomplete_icmp_limit: Optional[pulumi.Input[builtins.int]] = None,
|
|
823
|
+
max_incomplete_tcp_limit: Optional[pulumi.Input[builtins.int]] = None,
|
|
824
|
+
max_incomplete_udp_limit: Optional[pulumi.Input[builtins.int]] = None,
|
|
825
|
+
mode: Optional[pulumi.Input[builtins.str]] = None,
|
|
826
|
+
name: Optional[pulumi.Input[builtins.str]] = None,
|
|
827
|
+
session_reclassify_allow: Optional[pulumi.Input[builtins.bool]] = None,
|
|
828
|
+
tcp_syn_flood_limit: Optional[pulumi.Input[builtins.str]] = None,
|
|
829
|
+
unified_logging: Optional[pulumi.Input[builtins.bool]] = None,
|
|
830
|
+
use_case: Optional[pulumi.Input[builtins.str]] = None,
|
|
585
831
|
__props__=None):
|
|
586
832
|
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
|
587
833
|
if not isinstance(opts, pulumi.ResourceOptions):
|
|
@@ -602,12 +848,19 @@ class SecurityPolicy(pulumi.CustomResource):
|
|
|
602
848
|
__props__.__dict__["failure_mode"] = failure_mode
|
|
603
849
|
__props__.__dict__["high_speed_logging_server_ip"] = high_speed_logging_server_ip
|
|
604
850
|
__props__.__dict__["high_speed_logging_server_port"] = high_speed_logging_server_port
|
|
851
|
+
__props__.__dict__["high_speed_logging_server_source_interface"] = high_speed_logging_server_source_interface
|
|
605
852
|
__props__.__dict__["high_speed_logging_vpn"] = high_speed_logging_vpn
|
|
853
|
+
__props__.__dict__["imcp_unreachable_allow"] = imcp_unreachable_allow
|
|
606
854
|
__props__.__dict__["loggings"] = loggings
|
|
607
855
|
__props__.__dict__["match_statistics_per_filter"] = match_statistics_per_filter
|
|
856
|
+
__props__.__dict__["max_incomplete_icmp_limit"] = max_incomplete_icmp_limit
|
|
857
|
+
__props__.__dict__["max_incomplete_tcp_limit"] = max_incomplete_tcp_limit
|
|
858
|
+
__props__.__dict__["max_incomplete_udp_limit"] = max_incomplete_udp_limit
|
|
608
859
|
__props__.__dict__["mode"] = mode
|
|
609
860
|
__props__.__dict__["name"] = name
|
|
861
|
+
__props__.__dict__["session_reclassify_allow"] = session_reclassify_allow
|
|
610
862
|
__props__.__dict__["tcp_syn_flood_limit"] = tcp_syn_flood_limit
|
|
863
|
+
__props__.__dict__["unified_logging"] = unified_logging
|
|
611
864
|
__props__.__dict__["use_case"] = use_case
|
|
612
865
|
__props__.__dict__["version"] = None
|
|
613
866
|
super(SecurityPolicy, __self__).__init__(
|
|
@@ -620,21 +873,28 @@ class SecurityPolicy(pulumi.CustomResource):
|
|
|
620
873
|
def get(resource_name: str,
|
|
621
874
|
id: pulumi.Input[str],
|
|
622
875
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
623
|
-
audit_trail: Optional[pulumi.Input[str]] = None,
|
|
876
|
+
audit_trail: Optional[pulumi.Input[builtins.str]] = None,
|
|
624
877
|
definitions: Optional[pulumi.Input[Sequence[pulumi.Input[Union['SecurityPolicyDefinitionArgs', 'SecurityPolicyDefinitionArgsDict']]]]] = None,
|
|
625
|
-
description: Optional[pulumi.Input[str]] = None,
|
|
626
|
-
direct_internet_applications: Optional[pulumi.Input[str]] = None,
|
|
627
|
-
failure_mode: Optional[pulumi.Input[str]] = None,
|
|
628
|
-
high_speed_logging_server_ip: Optional[pulumi.Input[str]] = None,
|
|
629
|
-
high_speed_logging_server_port: Optional[pulumi.Input[str]] = None,
|
|
630
|
-
|
|
878
|
+
description: Optional[pulumi.Input[builtins.str]] = None,
|
|
879
|
+
direct_internet_applications: Optional[pulumi.Input[builtins.str]] = None,
|
|
880
|
+
failure_mode: Optional[pulumi.Input[builtins.str]] = None,
|
|
881
|
+
high_speed_logging_server_ip: Optional[pulumi.Input[builtins.str]] = None,
|
|
882
|
+
high_speed_logging_server_port: Optional[pulumi.Input[builtins.str]] = None,
|
|
883
|
+
high_speed_logging_server_source_interface: Optional[pulumi.Input[builtins.str]] = None,
|
|
884
|
+
high_speed_logging_vpn: Optional[pulumi.Input[builtins.str]] = None,
|
|
885
|
+
imcp_unreachable_allow: Optional[pulumi.Input[builtins.bool]] = None,
|
|
631
886
|
loggings: Optional[pulumi.Input[Sequence[pulumi.Input[Union['SecurityPolicyLoggingArgs', 'SecurityPolicyLoggingArgsDict']]]]] = None,
|
|
632
|
-
match_statistics_per_filter: Optional[pulumi.Input[str]] = None,
|
|
633
|
-
|
|
634
|
-
|
|
635
|
-
|
|
636
|
-
|
|
637
|
-
|
|
887
|
+
match_statistics_per_filter: Optional[pulumi.Input[builtins.str]] = None,
|
|
888
|
+
max_incomplete_icmp_limit: Optional[pulumi.Input[builtins.int]] = None,
|
|
889
|
+
max_incomplete_tcp_limit: Optional[pulumi.Input[builtins.int]] = None,
|
|
890
|
+
max_incomplete_udp_limit: Optional[pulumi.Input[builtins.int]] = None,
|
|
891
|
+
mode: Optional[pulumi.Input[builtins.str]] = None,
|
|
892
|
+
name: Optional[pulumi.Input[builtins.str]] = None,
|
|
893
|
+
session_reclassify_allow: Optional[pulumi.Input[builtins.bool]] = None,
|
|
894
|
+
tcp_syn_flood_limit: Optional[pulumi.Input[builtins.str]] = None,
|
|
895
|
+
unified_logging: Optional[pulumi.Input[builtins.bool]] = None,
|
|
896
|
+
use_case: Optional[pulumi.Input[builtins.str]] = None,
|
|
897
|
+
version: Optional[pulumi.Input[builtins.int]] = None) -> 'SecurityPolicy':
|
|
638
898
|
"""
|
|
639
899
|
Get an existing SecurityPolicy resource's state with the given name, id, and optional extra
|
|
640
900
|
properties used to qualify the lookup.
|
|
@@ -642,21 +902,28 @@ class SecurityPolicy(pulumi.CustomResource):
|
|
|
642
902
|
:param str resource_name: The unique name of the resulting resource.
|
|
643
903
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
|
644
904
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
645
|
-
:param pulumi.Input[str] audit_trail: Audit trail - Choices: `on`, `off`
|
|
905
|
+
:param pulumi.Input[builtins.str] audit_trail: Audit trail - Choices: `on`, `off`
|
|
646
906
|
:param pulumi.Input[Sequence[pulumi.Input[Union['SecurityPolicyDefinitionArgs', 'SecurityPolicyDefinitionArgsDict']]]] definitions: List of policy definitions
|
|
647
|
-
:param pulumi.Input[str] description: The description of the security policy
|
|
648
|
-
:param pulumi.Input[str] direct_internet_applications: Bypass firewall policy and allow all Internet traffic to/from VPN 0 - Choices: `allow`, `deny`
|
|
649
|
-
:param pulumi.Input[str] failure_mode: Failure mode - Choices: `open`, `close`
|
|
650
|
-
:param pulumi.Input[str] high_speed_logging_server_ip: High Speed Logging Server IP
|
|
651
|
-
:param pulumi.Input[str] high_speed_logging_server_port: High Speed Logging Port
|
|
652
|
-
:param pulumi.Input[str]
|
|
653
|
-
:param pulumi.Input[str]
|
|
654
|
-
:param pulumi.Input[
|
|
655
|
-
:param pulumi.Input[str]
|
|
656
|
-
:param pulumi.Input[
|
|
657
|
-
:param pulumi.Input[
|
|
907
|
+
:param pulumi.Input[builtins.str] description: The description of the security policy
|
|
908
|
+
:param pulumi.Input[builtins.str] direct_internet_applications: Bypass firewall policy and allow all Internet traffic to/from VPN 0 - Choices: `allow`, `deny`
|
|
909
|
+
:param pulumi.Input[builtins.str] failure_mode: Failure mode - Choices: `open`, `close`
|
|
910
|
+
:param pulumi.Input[builtins.str] high_speed_logging_server_ip: High Speed Logging Server IP
|
|
911
|
+
:param pulumi.Input[builtins.str] high_speed_logging_server_port: High Speed Logging Port
|
|
912
|
+
:param pulumi.Input[builtins.str] high_speed_logging_server_source_interface: High Speed Logging Source Interface
|
|
913
|
+
:param pulumi.Input[builtins.str] high_speed_logging_vpn: High Speed Logging VPN
|
|
914
|
+
:param pulumi.Input[builtins.bool] imcp_unreachable_allow: ICMP Unreachable Allow
|
|
915
|
+
:param pulumi.Input[builtins.str] match_statistics_per_filter: Match Statistics per-filter - Choices: `on`, `off`
|
|
916
|
+
:param pulumi.Input[builtins.int] max_incomplete_icmp_limit: Max Incomplete ICMP Limit
|
|
917
|
+
:param pulumi.Input[builtins.int] max_incomplete_tcp_limit: Max Incomplete TCP Limit
|
|
918
|
+
:param pulumi.Input[builtins.int] max_incomplete_udp_limit: Max Incomplete UDP Limit
|
|
919
|
+
:param pulumi.Input[builtins.str] mode: The policy mode - Choices: `security`, `unified` - Default value: `security`
|
|
920
|
+
:param pulumi.Input[builtins.str] name: The name of the security policy
|
|
921
|
+
:param pulumi.Input[builtins.bool] session_reclassify_allow: Session Reclassify Allow
|
|
922
|
+
:param pulumi.Input[builtins.str] tcp_syn_flood_limit: TCP SYN Flood Limit, value from 1 to 4294967295
|
|
923
|
+
:param pulumi.Input[builtins.bool] unified_logging: Unified Logging
|
|
924
|
+
:param pulumi.Input[builtins.str] use_case: The use case of the security policy - Choices: `custom`, `compliance`, `guestAccess`, `directCloudAccess`,
|
|
658
925
|
`directInternetAccess`, `directCloudAccess` - Default value: `custom`
|
|
659
|
-
:param pulumi.Input[int] version: The version of the object
|
|
926
|
+
:param pulumi.Input[builtins.int] version: The version of the object
|
|
660
927
|
"""
|
|
661
928
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
|
662
929
|
|
|
@@ -669,19 +936,26 @@ class SecurityPolicy(pulumi.CustomResource):
|
|
|
669
936
|
__props__.__dict__["failure_mode"] = failure_mode
|
|
670
937
|
__props__.__dict__["high_speed_logging_server_ip"] = high_speed_logging_server_ip
|
|
671
938
|
__props__.__dict__["high_speed_logging_server_port"] = high_speed_logging_server_port
|
|
939
|
+
__props__.__dict__["high_speed_logging_server_source_interface"] = high_speed_logging_server_source_interface
|
|
672
940
|
__props__.__dict__["high_speed_logging_vpn"] = high_speed_logging_vpn
|
|
941
|
+
__props__.__dict__["imcp_unreachable_allow"] = imcp_unreachable_allow
|
|
673
942
|
__props__.__dict__["loggings"] = loggings
|
|
674
943
|
__props__.__dict__["match_statistics_per_filter"] = match_statistics_per_filter
|
|
944
|
+
__props__.__dict__["max_incomplete_icmp_limit"] = max_incomplete_icmp_limit
|
|
945
|
+
__props__.__dict__["max_incomplete_tcp_limit"] = max_incomplete_tcp_limit
|
|
946
|
+
__props__.__dict__["max_incomplete_udp_limit"] = max_incomplete_udp_limit
|
|
675
947
|
__props__.__dict__["mode"] = mode
|
|
676
948
|
__props__.__dict__["name"] = name
|
|
949
|
+
__props__.__dict__["session_reclassify_allow"] = session_reclassify_allow
|
|
677
950
|
__props__.__dict__["tcp_syn_flood_limit"] = tcp_syn_flood_limit
|
|
951
|
+
__props__.__dict__["unified_logging"] = unified_logging
|
|
678
952
|
__props__.__dict__["use_case"] = use_case
|
|
679
953
|
__props__.__dict__["version"] = version
|
|
680
954
|
return SecurityPolicy(resource_name, opts=opts, __props__=__props__)
|
|
681
955
|
|
|
682
956
|
@property
|
|
683
957
|
@pulumi.getter(name="auditTrail")
|
|
684
|
-
def audit_trail(self) -> pulumi.Output[Optional[str]]:
|
|
958
|
+
def audit_trail(self) -> pulumi.Output[Optional[builtins.str]]:
|
|
685
959
|
"""
|
|
686
960
|
Audit trail - Choices: `on`, `off`
|
|
687
961
|
"""
|
|
@@ -697,7 +971,7 @@ class SecurityPolicy(pulumi.CustomResource):
|
|
|
697
971
|
|
|
698
972
|
@property
|
|
699
973
|
@pulumi.getter
|
|
700
|
-
def description(self) -> pulumi.Output[str]:
|
|
974
|
+
def description(self) -> pulumi.Output[builtins.str]:
|
|
701
975
|
"""
|
|
702
976
|
The description of the security policy
|
|
703
977
|
"""
|
|
@@ -705,7 +979,7 @@ class SecurityPolicy(pulumi.CustomResource):
|
|
|
705
979
|
|
|
706
980
|
@property
|
|
707
981
|
@pulumi.getter(name="directInternetApplications")
|
|
708
|
-
def direct_internet_applications(self) -> pulumi.Output[Optional[str]]:
|
|
982
|
+
def direct_internet_applications(self) -> pulumi.Output[Optional[builtins.str]]:
|
|
709
983
|
"""
|
|
710
984
|
Bypass firewall policy and allow all Internet traffic to/from VPN 0 - Choices: `allow`, `deny`
|
|
711
985
|
"""
|
|
@@ -713,7 +987,7 @@ class SecurityPolicy(pulumi.CustomResource):
|
|
|
713
987
|
|
|
714
988
|
@property
|
|
715
989
|
@pulumi.getter(name="failureMode")
|
|
716
|
-
def failure_mode(self) -> pulumi.Output[Optional[str]]:
|
|
990
|
+
def failure_mode(self) -> pulumi.Output[Optional[builtins.str]]:
|
|
717
991
|
"""
|
|
718
992
|
Failure mode - Choices: `open`, `close`
|
|
719
993
|
"""
|
|
@@ -721,7 +995,7 @@ class SecurityPolicy(pulumi.CustomResource):
|
|
|
721
995
|
|
|
722
996
|
@property
|
|
723
997
|
@pulumi.getter(name="highSpeedLoggingServerIp")
|
|
724
|
-
def high_speed_logging_server_ip(self) -> pulumi.Output[Optional[str]]:
|
|
998
|
+
def high_speed_logging_server_ip(self) -> pulumi.Output[Optional[builtins.str]]:
|
|
725
999
|
"""
|
|
726
1000
|
High Speed Logging Server IP
|
|
727
1001
|
"""
|
|
@@ -729,20 +1003,36 @@ class SecurityPolicy(pulumi.CustomResource):
|
|
|
729
1003
|
|
|
730
1004
|
@property
|
|
731
1005
|
@pulumi.getter(name="highSpeedLoggingServerPort")
|
|
732
|
-
def high_speed_logging_server_port(self) -> pulumi.Output[Optional[str]]:
|
|
1006
|
+
def high_speed_logging_server_port(self) -> pulumi.Output[Optional[builtins.str]]:
|
|
733
1007
|
"""
|
|
734
1008
|
High Speed Logging Port
|
|
735
1009
|
"""
|
|
736
1010
|
return pulumi.get(self, "high_speed_logging_server_port")
|
|
737
1011
|
|
|
1012
|
+
@property
|
|
1013
|
+
@pulumi.getter(name="highSpeedLoggingServerSourceInterface")
|
|
1014
|
+
def high_speed_logging_server_source_interface(self) -> pulumi.Output[Optional[builtins.str]]:
|
|
1015
|
+
"""
|
|
1016
|
+
High Speed Logging Source Interface
|
|
1017
|
+
"""
|
|
1018
|
+
return pulumi.get(self, "high_speed_logging_server_source_interface")
|
|
1019
|
+
|
|
738
1020
|
@property
|
|
739
1021
|
@pulumi.getter(name="highSpeedLoggingVpn")
|
|
740
|
-
def high_speed_logging_vpn(self) -> pulumi.Output[Optional[str]]:
|
|
1022
|
+
def high_speed_logging_vpn(self) -> pulumi.Output[Optional[builtins.str]]:
|
|
741
1023
|
"""
|
|
742
1024
|
High Speed Logging VPN
|
|
743
1025
|
"""
|
|
744
1026
|
return pulumi.get(self, "high_speed_logging_vpn")
|
|
745
1027
|
|
|
1028
|
+
@property
|
|
1029
|
+
@pulumi.getter(name="imcpUnreachableAllow")
|
|
1030
|
+
def imcp_unreachable_allow(self) -> pulumi.Output[Optional[builtins.bool]]:
|
|
1031
|
+
"""
|
|
1032
|
+
ICMP Unreachable Allow
|
|
1033
|
+
"""
|
|
1034
|
+
return pulumi.get(self, "imcp_unreachable_allow")
|
|
1035
|
+
|
|
746
1036
|
@property
|
|
747
1037
|
@pulumi.getter
|
|
748
1038
|
def loggings(self) -> pulumi.Output[Optional[Sequence['outputs.SecurityPolicyLogging']]]:
|
|
@@ -750,15 +1040,39 @@ class SecurityPolicy(pulumi.CustomResource):
|
|
|
750
1040
|
|
|
751
1041
|
@property
|
|
752
1042
|
@pulumi.getter(name="matchStatisticsPerFilter")
|
|
753
|
-
def match_statistics_per_filter(self) -> pulumi.Output[Optional[str]]:
|
|
1043
|
+
def match_statistics_per_filter(self) -> pulumi.Output[Optional[builtins.str]]:
|
|
754
1044
|
"""
|
|
755
1045
|
Match Statistics per-filter - Choices: `on`, `off`
|
|
756
1046
|
"""
|
|
757
1047
|
return pulumi.get(self, "match_statistics_per_filter")
|
|
758
1048
|
|
|
1049
|
+
@property
|
|
1050
|
+
@pulumi.getter(name="maxIncompleteIcmpLimit")
|
|
1051
|
+
def max_incomplete_icmp_limit(self) -> pulumi.Output[Optional[builtins.int]]:
|
|
1052
|
+
"""
|
|
1053
|
+
Max Incomplete ICMP Limit
|
|
1054
|
+
"""
|
|
1055
|
+
return pulumi.get(self, "max_incomplete_icmp_limit")
|
|
1056
|
+
|
|
1057
|
+
@property
|
|
1058
|
+
@pulumi.getter(name="maxIncompleteTcpLimit")
|
|
1059
|
+
def max_incomplete_tcp_limit(self) -> pulumi.Output[Optional[builtins.int]]:
|
|
1060
|
+
"""
|
|
1061
|
+
Max Incomplete TCP Limit
|
|
1062
|
+
"""
|
|
1063
|
+
return pulumi.get(self, "max_incomplete_tcp_limit")
|
|
1064
|
+
|
|
1065
|
+
@property
|
|
1066
|
+
@pulumi.getter(name="maxIncompleteUdpLimit")
|
|
1067
|
+
def max_incomplete_udp_limit(self) -> pulumi.Output[Optional[builtins.int]]:
|
|
1068
|
+
"""
|
|
1069
|
+
Max Incomplete UDP Limit
|
|
1070
|
+
"""
|
|
1071
|
+
return pulumi.get(self, "max_incomplete_udp_limit")
|
|
1072
|
+
|
|
759
1073
|
@property
|
|
760
1074
|
@pulumi.getter
|
|
761
|
-
def mode(self) -> pulumi.Output[str]:
|
|
1075
|
+
def mode(self) -> pulumi.Output[builtins.str]:
|
|
762
1076
|
"""
|
|
763
1077
|
The policy mode - Choices: `security`, `unified` - Default value: `security`
|
|
764
1078
|
"""
|
|
@@ -766,23 +1080,39 @@ class SecurityPolicy(pulumi.CustomResource):
|
|
|
766
1080
|
|
|
767
1081
|
@property
|
|
768
1082
|
@pulumi.getter
|
|
769
|
-
def name(self) -> pulumi.Output[str]:
|
|
1083
|
+
def name(self) -> pulumi.Output[builtins.str]:
|
|
770
1084
|
"""
|
|
771
1085
|
The name of the security policy
|
|
772
1086
|
"""
|
|
773
1087
|
return pulumi.get(self, "name")
|
|
774
1088
|
|
|
1089
|
+
@property
|
|
1090
|
+
@pulumi.getter(name="sessionReclassifyAllow")
|
|
1091
|
+
def session_reclassify_allow(self) -> pulumi.Output[Optional[builtins.bool]]:
|
|
1092
|
+
"""
|
|
1093
|
+
Session Reclassify Allow
|
|
1094
|
+
"""
|
|
1095
|
+
return pulumi.get(self, "session_reclassify_allow")
|
|
1096
|
+
|
|
775
1097
|
@property
|
|
776
1098
|
@pulumi.getter(name="tcpSynFloodLimit")
|
|
777
|
-
def tcp_syn_flood_limit(self) -> pulumi.Output[Optional[str]]:
|
|
1099
|
+
def tcp_syn_flood_limit(self) -> pulumi.Output[Optional[builtins.str]]:
|
|
778
1100
|
"""
|
|
779
1101
|
TCP SYN Flood Limit, value from 1 to 4294967295
|
|
780
1102
|
"""
|
|
781
1103
|
return pulumi.get(self, "tcp_syn_flood_limit")
|
|
782
1104
|
|
|
1105
|
+
@property
|
|
1106
|
+
@pulumi.getter(name="unifiedLogging")
|
|
1107
|
+
def unified_logging(self) -> pulumi.Output[Optional[builtins.bool]]:
|
|
1108
|
+
"""
|
|
1109
|
+
Unified Logging
|
|
1110
|
+
"""
|
|
1111
|
+
return pulumi.get(self, "unified_logging")
|
|
1112
|
+
|
|
783
1113
|
@property
|
|
784
1114
|
@pulumi.getter(name="useCase")
|
|
785
|
-
def use_case(self) -> pulumi.Output[str]:
|
|
1115
|
+
def use_case(self) -> pulumi.Output[builtins.str]:
|
|
786
1116
|
"""
|
|
787
1117
|
The use case of the security policy - Choices: `custom`, `compliance`, `guestAccess`, `directCloudAccess`,
|
|
788
1118
|
`directInternetAccess`, `directCloudAccess` - Default value: `custom`
|
|
@@ -791,7 +1121,7 @@ class SecurityPolicy(pulumi.CustomResource):
|
|
|
791
1121
|
|
|
792
1122
|
@property
|
|
793
1123
|
@pulumi.getter
|
|
794
|
-
def version(self) -> pulumi.Output[int]:
|
|
1124
|
+
def version(self) -> pulumi.Output[builtins.int]:
|
|
795
1125
|
"""
|
|
796
1126
|
The version of the object
|
|
797
1127
|
"""
|