import * as pulumi from "@pulumi/pulumi"; import * as inputs from "./types/input"; import * as outputs from "./types/output"; /** * This resource can manage a Security Policy . * * ## Example Usage * * ```typescript * import * as pulumi from "@pulumi/pulumi"; * import * as sdwan from "@pulumi/sdwan"; * * const example = new sdwan.SecurityPolicy("example", { * name: "Example", * description: "Example", * mode: "security", * useCase: "custom", * definitions: [{ * id: "7d299c34-981c-4fb3-9167-6be44ab1691f", * type: "urlFiltering", * }], * failureMode: "close", * loggings: [{ * externalSyslogServerIp: "10.0.0.1", * externalSyslogServerVpn: "123", * }], * }); * ``` * * ## Import * * The `pulumi import` command can be used, for example: * * ```sh * $ pulumi import sdwan:index/securityPolicy:SecurityPolicy example "f6b2c44c-693c-4763-b010-895aa3d236bd" * ``` */ export declare class SecurityPolicy extends pulumi.CustomResource { /** * Get an existing SecurityPolicy resource's state with the given name, ID, and optional extra * properties used to qualify the lookup. * * @param name The _unique_ name of the resulting resource. * @param id The _unique_ provider ID of the resource to lookup. * @param state Any extra arguments used during the lookup. * @param opts Optional settings to control the behavior of the CustomResource. */ static get(name: string, id: pulumi.Input, state?: SecurityPolicyState, opts?: pulumi.CustomResourceOptions): SecurityPolicy; /** * Returns true if the given object is an instance of SecurityPolicy. This is designed to work even * when multiple copies of the Pulumi SDK have been loaded into the same process. */ static isInstance(obj: any): obj is SecurityPolicy; /** * Audit trail * - Choices: `on`, `off` */ readonly auditTrail: pulumi.Output; /** * List of policy definitions */ readonly definitions: pulumi.Output; /** * The description of the security policy */ readonly description: pulumi.Output; /** * Bypass firewall policy and allow all Internet traffic to/from VPN 0 * - Choices: `allow`, `deny` */ readonly directInternetApplications: pulumi.Output; /** * Failure mode * - Choices: `open`, `close` */ readonly failureMode: pulumi.Output; /** * High Speed Logging entries for Unified Security Policy (supports multiple HSL servers), Attribute conditional on `mode` equal to `unified` */ readonly highSpeedLoggingEntries: pulumi.Output; /** * High Speed Logging Server IP, Attribute conditional on `mode` equal to `security` */ readonly highSpeedLoggingServerIp: pulumi.Output; /** * High Speed Logging Port, Attribute conditional on `mode` equal to `security` */ readonly highSpeedLoggingServerPort: pulumi.Output; /** * High Speed Logging VPN, Attribute conditional on `mode` equal to `security` */ readonly highSpeedLoggingVpn: pulumi.Output; /** * ICMP Unreachable Allow * - Choices: `on`, `off` */ readonly imcpUnreachableAllow: pulumi.Output; readonly loggings: pulumi.Output; /** * Match Statistics per-filter * - Choices: `on`, `off` */ readonly matchStatisticsPerFilter: pulumi.Output; /** * Max Incomplete ICMP Limit */ readonly maxIncompleteIcmpLimit: pulumi.Output; /** * Max Incomplete TCP Limit */ readonly maxIncompleteTcpLimit: pulumi.Output; /** * Max Incomplete UDP Limit */ readonly maxIncompleteUdpLimit: pulumi.Output; /** * The policy mode * - Choices: `security`, `unified` * - Default value: `security` */ readonly mode: pulumi.Output; /** * The name of the security policy */ readonly name: pulumi.Output; /** * Session Reclassify Allow * - Choices: `on`, `off` */ readonly sessionReclassifyAllow: pulumi.Output; /** * TCP SYN Flood Limit, value from 1 to 4294967295 */ readonly tcpSynFloodLimit: pulumi.Output; /** * Unified Logging * - Choices: `on`, `off` */ readonly unifiedLogging: pulumi.Output; /** * The use case of the security policy * - Choices: `custom`, `compliance`, `guestAccess`, `directCloudAccess`, `directInternetAccess`, `directCloudAccess` * - Default value: `custom` */ readonly useCase: pulumi.Output; /** * The version of the object */ readonly version: pulumi.Output; /** * Create a SecurityPolicy resource with the given unique name, arguments, and options. * * @param name The _unique_ name of the resource. * @param args The arguments to use to populate this resource's properties. * @param opts A bag of options that control this resource's behavior. */ constructor(name: string, args: SecurityPolicyArgs, opts?: pulumi.CustomResourceOptions); } /** * Input properties used for looking up and filtering SecurityPolicy resources. */ export interface SecurityPolicyState { /** * Audit trail * - Choices: `on`, `off` */ auditTrail?: pulumi.Input; /** * List of policy definitions */ definitions?: pulumi.Input[] | undefined>; /** * The description of the security policy */ description?: pulumi.Input; /** * Bypass firewall policy and allow all Internet traffic to/from VPN 0 * - Choices: `allow`, `deny` */ directInternetApplications?: pulumi.Input; /** * Failure mode * - Choices: `open`, `close` */ failureMode?: pulumi.Input; /** * High Speed Logging entries for Unified Security Policy (supports multiple HSL servers), Attribute conditional on `mode` equal to `unified` */ highSpeedLoggingEntries?: pulumi.Input[] | undefined>; /** * High Speed Logging Server IP, Attribute conditional on `mode` equal to `security` */ highSpeedLoggingServerIp?: pulumi.Input; /** * High Speed Logging Port, Attribute conditional on `mode` equal to `security` */ highSpeedLoggingServerPort?: pulumi.Input; /** * High Speed Logging VPN, Attribute conditional on `mode` equal to `security` */ highSpeedLoggingVpn?: pulumi.Input; /** * ICMP Unreachable Allow * - Choices: `on`, `off` */ imcpUnreachableAllow?: pulumi.Input; loggings?: pulumi.Input[] | undefined>; /** * Match Statistics per-filter * - Choices: `on`, `off` */ matchStatisticsPerFilter?: pulumi.Input; /** * Max Incomplete ICMP Limit */ maxIncompleteIcmpLimit?: pulumi.Input; /** * Max Incomplete TCP Limit */ maxIncompleteTcpLimit?: pulumi.Input; /** * Max Incomplete UDP Limit */ maxIncompleteUdpLimit?: pulumi.Input; /** * The policy mode * - Choices: `security`, `unified` * - Default value: `security` */ mode?: pulumi.Input; /** * The name of the security policy */ name?: pulumi.Input; /** * Session Reclassify Allow * - Choices: `on`, `off` */ sessionReclassifyAllow?: pulumi.Input; /** * TCP SYN Flood Limit, value from 1 to 4294967295 */ tcpSynFloodLimit?: pulumi.Input; /** * Unified Logging * - Choices: `on`, `off` */ unifiedLogging?: pulumi.Input; /** * The use case of the security policy * - Choices: `custom`, `compliance`, `guestAccess`, `directCloudAccess`, `directInternetAccess`, `directCloudAccess` * - Default value: `custom` */ useCase?: pulumi.Input; /** * The version of the object */ version?: pulumi.Input; } /** * The set of arguments for constructing a SecurityPolicy resource. */ export interface SecurityPolicyArgs { /** * Audit trail * - Choices: `on`, `off` */ auditTrail?: pulumi.Input; /** * List of policy definitions */ definitions: pulumi.Input[]>; /** * The description of the security policy */ description: pulumi.Input; /** * Bypass firewall policy and allow all Internet traffic to/from VPN 0 * - Choices: `allow`, `deny` */ directInternetApplications?: pulumi.Input; /** * Failure mode * - Choices: `open`, `close` */ failureMode?: pulumi.Input; /** * High Speed Logging entries for Unified Security Policy (supports multiple HSL servers), Attribute conditional on `mode` equal to `unified` */ highSpeedLoggingEntries?: pulumi.Input[] | undefined>; /** * High Speed Logging Server IP, Attribute conditional on `mode` equal to `security` */ highSpeedLoggingServerIp?: pulumi.Input; /** * High Speed Logging Port, Attribute conditional on `mode` equal to `security` */ highSpeedLoggingServerPort?: pulumi.Input; /** * High Speed Logging VPN, Attribute conditional on `mode` equal to `security` */ highSpeedLoggingVpn?: pulumi.Input; /** * ICMP Unreachable Allow * - Choices: `on`, `off` */ imcpUnreachableAllow?: pulumi.Input; loggings?: pulumi.Input[] | undefined>; /** * Match Statistics per-filter * - Choices: `on`, `off` */ matchStatisticsPerFilter?: pulumi.Input; /** * Max Incomplete ICMP Limit */ maxIncompleteIcmpLimit?: pulumi.Input; /** * Max Incomplete TCP Limit */ maxIncompleteTcpLimit?: pulumi.Input; /** * Max Incomplete UDP Limit */ maxIncompleteUdpLimit?: pulumi.Input; /** * The policy mode * - Choices: `security`, `unified` * - Default value: `security` */ mode?: pulumi.Input; /** * The name of the security policy */ name?: pulumi.Input; /** * Session Reclassify Allow * - Choices: `on`, `off` */ sessionReclassifyAllow?: pulumi.Input; /** * TCP SYN Flood Limit, value from 1 to 4294967295 */ tcpSynFloodLimit?: pulumi.Input; /** * Unified Logging * - Choices: `on`, `off` */ unifiedLogging?: pulumi.Input; /** * The use case of the security policy * - Choices: `custom`, `compliance`, `guestAccess`, `directCloudAccess`, `directInternetAccess`, `directCloudAccess` * - Default value: `custom` */ useCase?: pulumi.Input; } //# sourceMappingURL=securityPolicy.d.ts.map