import * as pulumi from "@pulumi/pulumi";
/**
 * The zia_advanced_settings resource manages advanced settings in the Zscaler Internet Access (ZIA) cloud service. This singleton resource controls a wide range of advanced proxy, authentication, DNS resolution, and security settings including domain fronting protection, HTTP tunnel tracking, surrogate IP enforcement, and session timeout configuration.
 *
 * For more information, see the [ZIA Advanced Settings documentation](https://help.zscaler.com/zia/advanced-settings).
 *
 * ## Example Usage
 * ### Basic Advanced Settings
 *
 * ```typescript
 * import * as zia from "@bdzscaler/pulumi-zia";
 *
 * const example = new zia.AdvancedSettings("example", {
 *     enableOffice365: true,
 *     logInternalIp: true,
 *     blockHttpTunnelOnNonHttpPorts: true,
 *     blockDomainFrontingOnHostHeader: true,
 *     authBypassUrls: [".example.com"],
 * });
 * ```
 *
 * ## Import
 *
 * This is a singleton resource and does not support traditional import. It is automatically managed by the provider.
 */
export declare class AdvancedSettings extends pulumi.CustomResource {
    /**
     * Get an existing AdvancedSettings resource's state with the given name, ID, and optional extra
     * properties used to qualify the lookup.
     *
     * @param name The _unique_ name of the resulting resource.
     * @param id The _unique_ provider ID of the resource to lookup.
     * @param opts Optional settings to control the behavior of the CustomResource.
     */
    static get(name: string, id: pulumi.Input<pulumi.ID>, opts?: pulumi.CustomResourceOptions): AdvancedSettings;
    /**
     * Returns true if the given object is an instance of AdvancedSettings.  This is designed to work even
     * when multiple copies of the Pulumi SDK have been loaded into the same process.
     */
    static isInstance(obj: any): obj is AdvancedSettings;
    /**
     * Cloud applications that bypass authentication.
     */
    readonly authBypassApps: pulumi.Output<string[] | undefined>;
    /**
     * URL categories that bypass authentication.
     */
    readonly authBypassUrlCategories: pulumi.Output<string[] | undefined>;
    /**
     * URLs that bypass authentication.
     */
    readonly authBypassUrls: pulumi.Output<string[] | undefined>;
    /**
     * Cloud applications that bypass basic authentication.
     */
    readonly basicBypassApps: pulumi.Output<string[] | undefined>;
    /**
     * URL categories that bypass basic authentication.
     */
    readonly basicBypassUrlCategories: pulumi.Output<string[] | undefined>;
    /**
     * Block connections where CONNECT host and SNI mismatch.
     */
    readonly blockConnectHostSniMismatch: pulumi.Output<boolean | undefined>;
    /**
     * Cloud applications for which domain fronting is blocked.
     */
    readonly blockDomainFrontingApps: pulumi.Output<string[] | undefined>;
    /**
     * Block domain fronting when the host header mismatches the SNI.
     */
    readonly blockDomainFrontingOnHostHeader: pulumi.Output<boolean | undefined>;
    /**
     * Block HTTP tunnels on non-HTTP ports.
     */
    readonly blockHttpTunnelOnNonHttpPorts: pulumi.Output<boolean | undefined>;
    /**
     * Block non-compliant HTTP requests on HTTP ports.
     */
    readonly blockNonCompliantHttpRequestOnHttpPorts: pulumi.Output<boolean | undefined>;
    /**
     * Block non-HTTP traffic on HTTP ports.
     */
    readonly blockNonHttpOnHttpPortEnabled: pulumi.Output<boolean | undefined>;
    /**
     * Enable cascading URL filtering.
     */
    readonly cascadeUrlFiltering: pulumi.Output<boolean | undefined>;
    /**
     * Cloud applications that bypass digest authentication.
     */
    readonly digestAuthBypassApps: pulumi.Output<string[] | undefined>;
    /**
     * URL categories that bypass digest authentication.
     */
    readonly digestAuthBypassUrlCategories: pulumi.Output<string[] | undefined>;
    /**
     * URLs that bypass digest authentication.
     */
    readonly digestAuthBypassUrls: pulumi.Output<string[] | undefined>;
    /**
     * Cloud applications with DNS resolution on transparent proxy enabled.
     */
    readonly dnsResolutionOnTransparentProxyApps: pulumi.Output<string[] | undefined>;
    /**
     * Cloud applications exempt from DNS resolution on transparent proxy.
     */
    readonly dnsResolutionOnTransparentProxyExemptApps: pulumi.Output<string[] | undefined>;
    /**
     * URL categories exempt from DNS resolution on transparent proxy.
     */
    readonly dnsResolutionOnTransparentProxyExemptUrlCategories: pulumi.Output<string[] | undefined>;
    /**
     * URLs exempt from DNS resolution on transparent proxy.
     */
    readonly dnsResolutionOnTransparentProxyExemptUrls: pulumi.Output<string[] | undefined>;
    /**
     * Cloud applications with IPv6 DNS resolution on transparent proxy enabled.
     */
    readonly dnsResolutionOnTransparentProxyIpv6Apps: pulumi.Output<string[] | undefined>;
    /**
     * Cloud applications exempt from IPv6 DNS resolution on transparent proxy.
     */
    readonly dnsResolutionOnTransparentProxyIpv6ExemptApps: pulumi.Output<string[] | undefined>;
    /**
     * URL categories exempt from IPv6 DNS resolution on transparent proxy.
     */
    readonly dnsResolutionOnTransparentProxyIpv6ExemptUrlCategories: pulumi.Output<string[] | undefined>;
    /**
     * URL categories with IPv6 DNS resolution on transparent proxy enabled.
     */
    readonly dnsResolutionOnTransparentProxyIpv6UrlCategories: pulumi.Output<string[] | undefined>;
    /**
     * URL categories with DNS resolution on transparent proxy enabled.
     */
    readonly dnsResolutionOnTransparentProxyUrlCategories: pulumi.Output<string[] | undefined>;
    /**
     * URLs with DNS resolution on transparent proxy enabled.
     */
    readonly dnsResolutionOnTransparentProxyUrls: pulumi.Output<string[] | undefined>;
    /**
     * URL categories that bypass domain fronting detection.
     */
    readonly domainFrontingBypassUrlCategories: pulumi.Output<string[] | undefined>;
    /**
     * Enable dynamic user risk scoring.
     */
    readonly dynamicUserRiskEnabled: pulumi.Output<boolean | undefined>;
    /**
     * Enable EDNS Client Subnet (ECS) for all DNS queries.
     */
    readonly ecsForAllEnabled: pulumi.Output<boolean | undefined>;
    /**
     * Enable admin rank-based access control.
     */
    readonly enableAdminRankAccess: pulumi.Output<boolean | undefined>;
    /**
     * Enable DNS resolution on transparent proxy.
     */
    readonly enableDnsResolutionOnTransparentProxy: pulumi.Output<boolean | undefined>;
    /**
     * Enable policy evaluation on global SSL bypass.
     */
    readonly enableEvaluatePolicyOnGlobalSslBypass: pulumi.Output<boolean | undefined>;
    /**
     * Enable IPv6 DNS optimization on all transparent proxy connections.
     */
    readonly enableIpv6DnsOptimizationOnAllTransparentProxy: pulumi.Output<boolean | undefined>;
    /**
     * Enable IPv6 DNS resolution on transparent proxy.
     */
    readonly enableIpv6DnsResolutionOnTransparentProxy: pulumi.Output<boolean | undefined>;
    /**
     * Enable Office 365 one-click configuration.
     */
    readonly enableOffice365: pulumi.Output<boolean | undefined>;
    /**
     * Enable policy evaluation for unauthenticated traffic.
     */
    readonly enablePolicyForUnauthenticatedTraffic: pulumi.Output<boolean | undefined>;
    /**
     * Enforce surrogate IP for Windows applications.
     */
    readonly enforceSurrogateIpForWindowsApp: pulumi.Output<boolean | undefined>;
    /**
     * Enable HTTP/2 for non-browser traffic.
     */
    readonly http2NonbrowserTrafficEnabled: pulumi.Output<boolean | undefined>;
    /**
     * URL categories for which HTTP range headers are removed.
     */
    readonly httpRangeHeaderRemoveUrlCategories: pulumi.Output<string[] | undefined>;
    /**
     * Cloud applications that bypass Kerberos authentication.
     */
    readonly kerberosBypassApps: pulumi.Output<string[] | undefined>;
    /**
     * URL categories that bypass Kerberos authentication.
     */
    readonly kerberosBypassUrlCategories: pulumi.Output<string[] | undefined>;
    /**
     * URLs that bypass Kerberos authentication.
     */
    readonly kerberosBypassUrls: pulumi.Output<string[] | undefined>;
    /**
     * Enable logging of internal IP addresses.
     */
    readonly logInternalIp: pulumi.Output<boolean | undefined>;
    /**
     * Prefer SNI over CONNECT host header for policy evaluation.
     */
    readonly preferSniOverConnHost: pulumi.Output<boolean | undefined>;
    /**
     * Cloud applications that prefer SNI over CONNECT host header.
     */
    readonly preferSniOverConnHostApps: pulumi.Output<string[] | undefined>;
    /**
     * The internal resource identifier for the advanced settings.
     */
    readonly resourceId: pulumi.Output<string>;
    /**
     * Enable X-Forwarded-For header for SIPA traffic.
     */
    readonly sipaXffHeaderEnabled: pulumi.Output<boolean | undefined>;
    /**
     * URL categories that bypass SNI/DNS optimization.
     */
    readonly sniDnsOptimizationBypassUrlCategories: pulumi.Output<string[] | undefined>;
    /**
     * Track HTTP tunnels on HTTP ports.
     */
    readonly trackHttpTunnelOnHttpPorts: pulumi.Output<boolean | undefined>;
    /**
     * UI session timeout in minutes.
     */
    readonly uiSessionTimeout: pulumi.Output<number | undefined>;
    /**
     * Include Zscaler Client Connector and PAC road warrior traffic in firewall policy.
     */
    readonly zscalerClientConnector1AndPacRoadWarriorInFirewall: pulumi.Output<boolean | undefined>;
    /**
     * Create a AdvancedSettings resource with the given unique name, arguments, and options.
     *
     * @param name The _unique_ name of the resource.
     * @param args The arguments to use to populate this resource's properties.
     * @param opts A bag of options that control this resource's behavior.
     */
    constructor(name: string, args?: AdvancedSettingsArgs, opts?: pulumi.CustomResourceOptions);
}
/**
 * The set of arguments for constructing a AdvancedSettings resource.
 */
export interface AdvancedSettingsArgs {
    /**
     * Cloud applications that bypass authentication.
     */
    authBypassApps?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * URL categories that bypass authentication.
     */
    authBypassUrlCategories?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * URLs that bypass authentication.
     */
    authBypassUrls?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * Cloud applications that bypass basic authentication.
     */
    basicBypassApps?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * URL categories that bypass basic authentication.
     */
    basicBypassUrlCategories?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * Block connections where CONNECT host and SNI mismatch.
     */
    blockConnectHostSniMismatch?: pulumi.Input<boolean | undefined>;
    /**
     * Cloud applications for which domain fronting is blocked.
     */
    blockDomainFrontingApps?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * Block domain fronting when the host header mismatches the SNI.
     */
    blockDomainFrontingOnHostHeader?: pulumi.Input<boolean | undefined>;
    /**
     * Block HTTP tunnels on non-HTTP ports.
     */
    blockHttpTunnelOnNonHttpPorts?: pulumi.Input<boolean | undefined>;
    /**
     * Block non-compliant HTTP requests on HTTP ports.
     */
    blockNonCompliantHttpRequestOnHttpPorts?: pulumi.Input<boolean | undefined>;
    /**
     * Block non-HTTP traffic on HTTP ports.
     */
    blockNonHttpOnHttpPortEnabled?: pulumi.Input<boolean | undefined>;
    /**
     * Enable cascading URL filtering.
     */
    cascadeUrlFiltering?: pulumi.Input<boolean | undefined>;
    /**
     * Cloud applications that bypass digest authentication.
     */
    digestAuthBypassApps?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * URL categories that bypass digest authentication.
     */
    digestAuthBypassUrlCategories?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * URLs that bypass digest authentication.
     */
    digestAuthBypassUrls?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * Cloud applications with DNS resolution on transparent proxy enabled.
     */
    dnsResolutionOnTransparentProxyApps?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * Cloud applications exempt from DNS resolution on transparent proxy.
     */
    dnsResolutionOnTransparentProxyExemptApps?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * URL categories exempt from DNS resolution on transparent proxy.
     */
    dnsResolutionOnTransparentProxyExemptUrlCategories?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * URLs exempt from DNS resolution on transparent proxy.
     */
    dnsResolutionOnTransparentProxyExemptUrls?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * Cloud applications with IPv6 DNS resolution on transparent proxy enabled.
     */
    dnsResolutionOnTransparentProxyIpv6Apps?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * Cloud applications exempt from IPv6 DNS resolution on transparent proxy.
     */
    dnsResolutionOnTransparentProxyIpv6ExemptApps?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * URL categories exempt from IPv6 DNS resolution on transparent proxy.
     */
    dnsResolutionOnTransparentProxyIpv6ExemptUrlCategories?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * URL categories with IPv6 DNS resolution on transparent proxy enabled.
     */
    dnsResolutionOnTransparentProxyIpv6UrlCategories?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * URL categories with DNS resolution on transparent proxy enabled.
     */
    dnsResolutionOnTransparentProxyUrlCategories?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * URLs with DNS resolution on transparent proxy enabled.
     */
    dnsResolutionOnTransparentProxyUrls?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * URL categories that bypass domain fronting detection.
     */
    domainFrontingBypassUrlCategories?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * Enable dynamic user risk scoring.
     */
    dynamicUserRiskEnabled?: pulumi.Input<boolean | undefined>;
    /**
     * Enable EDNS Client Subnet (ECS) for all DNS queries.
     */
    ecsForAllEnabled?: pulumi.Input<boolean | undefined>;
    /**
     * Enable admin rank-based access control.
     */
    enableAdminRankAccess?: pulumi.Input<boolean | undefined>;
    /**
     * Enable DNS resolution on transparent proxy.
     */
    enableDnsResolutionOnTransparentProxy?: pulumi.Input<boolean | undefined>;
    /**
     * Enable policy evaluation on global SSL bypass.
     */
    enableEvaluatePolicyOnGlobalSslBypass?: pulumi.Input<boolean | undefined>;
    /**
     * Enable IPv6 DNS optimization on all transparent proxy connections.
     */
    enableIpv6DnsOptimizationOnAllTransparentProxy?: pulumi.Input<boolean | undefined>;
    /**
     * Enable IPv6 DNS resolution on transparent proxy.
     */
    enableIpv6DnsResolutionOnTransparentProxy?: pulumi.Input<boolean | undefined>;
    /**
     * Enable Office 365 one-click configuration.
     */
    enableOffice365?: pulumi.Input<boolean | undefined>;
    /**
     * Enable policy evaluation for unauthenticated traffic.
     */
    enablePolicyForUnauthenticatedTraffic?: pulumi.Input<boolean | undefined>;
    /**
     * Enforce surrogate IP for Windows applications.
     */
    enforceSurrogateIpForWindowsApp?: pulumi.Input<boolean | undefined>;
    /**
     * Enable HTTP/2 for non-browser traffic.
     */
    http2NonbrowserTrafficEnabled?: pulumi.Input<boolean | undefined>;
    /**
     * URL categories for which HTTP range headers are removed.
     */
    httpRangeHeaderRemoveUrlCategories?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * Cloud applications that bypass Kerberos authentication.
     */
    kerberosBypassApps?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * URL categories that bypass Kerberos authentication.
     */
    kerberosBypassUrlCategories?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * URLs that bypass Kerberos authentication.
     */
    kerberosBypassUrls?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * Enable logging of internal IP addresses.
     */
    logInternalIp?: pulumi.Input<boolean | undefined>;
    /**
     * Prefer SNI over CONNECT host header for policy evaluation.
     */
    preferSniOverConnHost?: pulumi.Input<boolean | undefined>;
    /**
     * Cloud applications that prefer SNI over CONNECT host header.
     */
    preferSniOverConnHostApps?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * Enable X-Forwarded-For header for SIPA traffic.
     */
    sipaXffHeaderEnabled?: pulumi.Input<boolean | undefined>;
    /**
     * URL categories that bypass SNI/DNS optimization.
     */
    sniDnsOptimizationBypassUrlCategories?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * Track HTTP tunnels on HTTP ports.
     */
    trackHttpTunnelOnHttpPorts?: pulumi.Input<boolean | undefined>;
    /**
     * UI session timeout in minutes.
     */
    uiSessionTimeout?: pulumi.Input<number | undefined>;
    /**
     * Include Zscaler Client Connector and PAC road warrior traffic in firewall policy.
     */
    zscalerClientConnector1AndPacRoadWarriorInFirewall?: pulumi.Input<boolean | undefined>;
}
//# sourceMappingURL=advancedSettings.d.ts.map