Skip to main content

List security rules

GET 

/security-rules

Retrieve a list of security rules.

Request

Query Parameters

    name string

    The name of the configuration resource

    position anyrequired

    The position of a security rule

    folder string

    The folder in which the resource is defined

    snippet string

    The snippet in which the resource is defined

    device string

    The device in which the resource is defined

    offset number

    Default value: 0

    The offset into the list of results returned

    limit number

    Default value: 200

    The maximum number of results per page

Responses

OK

Schema
    data object[]
  • Array [
  • id uuid

    The UUID of the security rule

    name stringrequired

    The name of the security rule

    type string

    Possible values: [security, internet]

    The type of security rule within the unified security rulebase (future)

    disabled boolean

    Is the security rule disabled?

    description string

    The description of the security rule

    tag string[]

    The tags associated with the security rule

    from string[]required

    The source security zone(s)

    source string[]required

    The source addresses(es)

    negate_source boolean

    Negate the source address(es)?

    source_user string[]required

    List of source users and/or groups. Reserved words include any, pre-login, known-user, and unknown.

    source_hip string[]

    The source Host Integrity Profile(s)

    to string[]required

    The destination security zone(s)

    destination string[]required

    The destination address(es)

    negate_destination boolean

    Negate the destination addresses(es)?

    destination_hip string[]

    The destination Host Integrity Profile(s)

    application string[]required

    The application(s) being accessed

    service string[]required

    The service(s) being accessed

    category string[]required

    The URL categories being accessed

    action required

    Possible values: [allow, deny, drop, reset-client, reset-server, reset-both]

    The action to be taken when the rule is matched

    profile_setting object

    The security profile object

    group string[]

    The security profile group

    log_setting string

    The external log forwarding profile

    schedule string

    Schedule in which this rule will be applied

    log_start boolean

    Log at session start?

    log_end boolean

    Log at session end?

  • ]
  • limit number

    Default value: 200

    offset number

    Default value: 0

    total number
Loading...