Skip to main content

Create a security rule

POST 

/security-rules

Create a new security rule.

Request

Query Parameters

    position anyrequired

    The position of a security rule

Body

Created

    oneOf
    folder stringrequired

    Possible values: <= 64 characters, Value must match regular expression ^[a-zA-Z\d-_\. ]+$

    The folder in which the resource is defined

    name stringrequired

    The name of the security rule

    disabled boolean

    Is the security rule disabled?

    description string

    The description of the security rule

    tag string[]

    The tags associated with the security rule

    from string[]required

    The source security zone(s)

    source string[]required

    The source addresses(es)

    negate_source boolean

    Negate the source address(es)?

    source_user string[]required

    List of source users and/or groups. Reserved words include any, pre-login, known-user, and unknown.

    source_hip string[]

    The source Host Integrity Profile(s)

    to string[]required

    The destination security zone(s)

    destination string[]required

    The destination address(es)

    negate_destination boolean

    Negate the destination addresses(es)?

    destination_hip string[]

    The destination Host Integrity Profile(s)

    application string[]required

    The application(s) being accessed

    service string[]required

    The service(s) being accessed

    category string[]required

    The URL categories being accessed

    action required

    Possible values: [allow, deny, drop, reset-client, reset-server, reset-both]

    The action to be taken when the rule is matched

    profile_setting object

    The security profile object

    group string[]

    The security profile group

    log_setting string

    The external log forwarding profile

    schedule string

    Schedule in which this rule will be applied

    log_start boolean

    Log at session start?

    log_end boolean

    Log at session end?

Responses

Created

Loading...