Create an anti-spyware signature

Create an anti-spyware signature.

Query Parameters

• folder string required

  Possible values: Value must match regular expression ^[0-9a-zA-Z._-\s]{1,}$, [Shared, Mobile Users, Remote Networks, Service Connections, Mobile Users Container, Mobile Users Explicit Proxy]

  The folder on which you want to perform this operation.

application/json

Request Body

The Anti-spyware signature you want to create

• bugtraq string[]
• comment string

  Possible values: <= 256 characters

• cve string[]
• default_action object

  oneOf

  • allow
  • alert
  • drop
  • reset_client
  • reset_server
  • reset_both
  • block_ip

  ---

  allow object

  alert object

  drop object

  reset_client object

  reset_server object

  reset_both object

  block_ip object

  duration integer

  Possible values: >= 1 and <= 3600

  track_by string

  Possible values: [source-and-destination, source]

direction string

Possible values: [client2server, server2client, both]

reference string[]

severity string

Possible values: [critical, low, high, medium, informational]

signature object

oneOf

• combination
• standard

---

combination object

and_condition object[]

Array [

name string

or_condition object[]

Array [

name string

threat_id string

]

]

order_free boolean

Default value: false

time_attribute object

interval integer

Possible values: >= 1 and <= 3600

threshold integer

Possible values: >= 1 and <= 255

track_by string

Possible values: [source-and-destination, source, destination]

standard object[]

Array [

and_condition object[]

Array [

name string

or_condition object[]

Array [

name string

operator object

equal_to object

context string

negate boolean

Default value: false

qualifier object[]

Array [

name string

value string

]

value integer

Possible values: <= 4294967295

greater_than object

context string

qualifier object[]

Array [

name string

value string

]

value integer

Possible values: <= 4294967295

less_than object

context string

qualifier object[]

Array [

name string

value string

]

value integer

Possible values: <= 4294967295

pattern_match object

context string

negate boolean

Default value: false

pattern string

qualifier object[]

Array [

name string

value string

]

]

]

comment string

Possible values: <= 256 characters

name string required

order_free boolean

Default value: false

scope string

Possible values: [protocol-data-unit, session]

]

threat_id integer required

Possible values: >= 15000 and <= 70000000

threat id range <15000-18000> and <6900001-7000000>

threatname string required

Possible values: <= 1024 characters

vendor string[]