published on Monday, Jun 15, 2026 by checkpointsw
published on Monday, Jun 15, 2026 by checkpointsw
This resource allows you to execute Check Point Remote Syslog.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as checkpoint from "@pulumi/checkpoint";
const example = new checkpoint.GaiaRemoteSyslog("example", {
level: "debug",
serverIp: "10::130",
});
import pulumi
import pulumi_checkpoint as checkpoint
example = checkpoint.GaiaRemoteSyslog("example",
level="debug",
server_ip="10::130")
package main
import (
"github.com/pulumi/pulumi-terraform-provider/sdks/go/checkpoint/v3/checkpoint"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := checkpoint.NewGaiaRemoteSyslog(ctx, "example", &checkpoint.GaiaRemoteSyslogArgs{
Level: pulumi.String("debug"),
ServerIp: pulumi.String("10::130"),
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Checkpoint = Pulumi.Checkpoint;
return await Deployment.RunAsync(() =>
{
var example = new Checkpoint.GaiaRemoteSyslog("example", new()
{
Level = "debug",
ServerIp = "10::130",
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.checkpoint.GaiaRemoteSyslog;
import com.pulumi.checkpoint.GaiaRemoteSyslogArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var example = new GaiaRemoteSyslog("example", GaiaRemoteSyslogArgs.builder()
.level("debug")
.serverIp("10::130")
.build());
}
}
resources:
example:
type: checkpoint:GaiaRemoteSyslog
properties:
level: debug
serverIp: 10::130
Example coming soon!
Create GaiaRemoteSyslog Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new GaiaRemoteSyslog(name: string, args: GaiaRemoteSyslogArgs, opts?: CustomResourceOptions);@overload
def GaiaRemoteSyslog(resource_name: str,
args: GaiaRemoteSyslogArgs,
opts: Optional[ResourceOptions] = None)
@overload
def GaiaRemoteSyslog(resource_name: str,
opts: Optional[ResourceOptions] = None,
level: Optional[str] = None,
server_ip: Optional[str] = None,
debug: Optional[bool] = None,
gaia_remote_syslog_id: Optional[str] = None,
member_id: Optional[str] = None,
port: Optional[float] = None,
protocol: Optional[str] = None,
queuing_mechanism: Optional[bool] = None,
tls_encryption: Optional[GaiaRemoteSyslogTlsEncryptionArgs] = None)func NewGaiaRemoteSyslog(ctx *Context, name string, args GaiaRemoteSyslogArgs, opts ...ResourceOption) (*GaiaRemoteSyslog, error)public GaiaRemoteSyslog(string name, GaiaRemoteSyslogArgs args, CustomResourceOptions? opts = null)
public GaiaRemoteSyslog(String name, GaiaRemoteSyslogArgs args)
public GaiaRemoteSyslog(String name, GaiaRemoteSyslogArgs args, CustomResourceOptions options)
type: checkpoint:GaiaRemoteSyslog
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
resource "checkpoint_gaiaremotesyslog" "name" {
# resource properties
}Parameters
- name string
- The unique name of the resource.
- args GaiaRemoteSyslogArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args GaiaRemoteSyslogArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args GaiaRemoteSyslogArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args GaiaRemoteSyslogArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args GaiaRemoteSyslogArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var gaiaRemoteSyslogResource = new Checkpoint.GaiaRemoteSyslog("gaiaRemoteSyslogResource", new()
{
Level = "string",
ServerIp = "string",
Debug = false,
GaiaRemoteSyslogId = "string",
MemberId = "string",
Port = 0,
Protocol = "string",
QueuingMechanism = false,
TlsEncryption = new Checkpoint.Inputs.GaiaRemoteSyslogTlsEncryptionArgs
{
AuthMode = "string",
Enabled = false,
PermittedPeers = new[]
{
"string",
},
},
});
example, err := checkpoint.NewGaiaRemoteSyslog(ctx, "gaiaRemoteSyslogResource", &checkpoint.GaiaRemoteSyslogArgs{
Level: pulumi.String("string"),
ServerIp: pulumi.String("string"),
Debug: pulumi.Bool(false),
GaiaRemoteSyslogId: pulumi.String("string"),
MemberId: pulumi.String("string"),
Port: pulumi.Float64(0),
Protocol: pulumi.String("string"),
QueuingMechanism: pulumi.Bool(false),
TlsEncryption: &checkpoint.GaiaRemoteSyslogTlsEncryptionArgs{
AuthMode: pulumi.String("string"),
Enabled: pulumi.Bool(false),
PermittedPeers: pulumi.StringArray{
pulumi.String("string"),
},
},
})
resource "checkpoint_gaiaremotesyslog" "gaiaRemoteSyslogResource" {
level = "string"
server_ip = "string"
debug = false
gaia_remote_syslog_id = "string"
member_id = "string"
port = 0
protocol = "string"
queuing_mechanism = false
tls_encryption = {
auth_mode = "string"
enabled = false
permitted_peers = ["string"]
}
}
var gaiaRemoteSyslogResource = new GaiaRemoteSyslog("gaiaRemoteSyslogResource", GaiaRemoteSyslogArgs.builder()
.level("string")
.serverIp("string")
.debug(false)
.gaiaRemoteSyslogId("string")
.memberId("string")
.port(0.0)
.protocol("string")
.queuingMechanism(false)
.tlsEncryption(GaiaRemoteSyslogTlsEncryptionArgs.builder()
.authMode("string")
.enabled(false)
.permittedPeers("string")
.build())
.build());
gaia_remote_syslog_resource = checkpoint.GaiaRemoteSyslog("gaiaRemoteSyslogResource",
level="string",
server_ip="string",
debug=False,
gaia_remote_syslog_id="string",
member_id="string",
port=float(0),
protocol="string",
queuing_mechanism=False,
tls_encryption={
"auth_mode": "string",
"enabled": False,
"permitted_peers": ["string"],
})
const gaiaRemoteSyslogResource = new checkpoint.GaiaRemoteSyslog("gaiaRemoteSyslogResource", {
level: "string",
serverIp: "string",
debug: false,
gaiaRemoteSyslogId: "string",
memberId: "string",
port: 0,
protocol: "string",
queuingMechanism: false,
tlsEncryption: {
authMode: "string",
enabled: false,
permittedPeers: ["string"],
},
});
type: checkpoint:GaiaRemoteSyslog
properties:
debug: false
gaiaRemoteSyslogId: string
level: string
memberId: string
port: 0
protocol: string
queuingMechanism: false
serverIp: string
tlsEncryption:
authMode: string
enabled: false
permittedPeers:
- string
GaiaRemoteSyslog Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The GaiaRemoteSyslog resource accepts the following input properties:
- Level string
- N/A
- Server
Ip string - Remote server address, IPv6 and Hostname supported from R82.
- Debug bool
- Enable debug logging for this resource.
- Gaia
Remote stringSyslog Id - Member
Id string - Relevant for commands on Scalable and ElasticXL platforms only. When member-id is provided in the login request, show commands during the session will be executed on the specified member, unless a different member-id is provided in a successive requests Set operations will be performed on all members
- Port double
- Log port. Supported starting from Gaia version R81.20
- Protocol string
- Log protocol. Supported starting from Gaia version R81.20
- Queuing
Mechanism bool - Log queuing mechanism state. Supported starting from Gaia version R82
- Tls
Encryption GaiaRemote Syslog Tls Encryption - TLS encryption status. Supported starting from Gaia version R82 tls_encryption blocks are documented below.
- Level string
- N/A
- Server
Ip string - Remote server address, IPv6 and Hostname supported from R82.
- Debug bool
- Enable debug logging for this resource.
- Gaia
Remote stringSyslog Id - Member
Id string - Relevant for commands on Scalable and ElasticXL platforms only. When member-id is provided in the login request, show commands during the session will be executed on the specified member, unless a different member-id is provided in a successive requests Set operations will be performed on all members
- Port float64
- Log port. Supported starting from Gaia version R81.20
- Protocol string
- Log protocol. Supported starting from Gaia version R81.20
- Queuing
Mechanism bool - Log queuing mechanism state. Supported starting from Gaia version R82
- Tls
Encryption GaiaRemote Syslog Tls Encryption Args - TLS encryption status. Supported starting from Gaia version R82 tls_encryption blocks are documented below.
- level string
- N/A
- server_
ip string - Remote server address, IPv6 and Hostname supported from R82.
- debug bool
- Enable debug logging for this resource.
- gaia_
remote_ stringsyslog_ id - member_
id string - Relevant for commands on Scalable and ElasticXL platforms only. When member-id is provided in the login request, show commands during the session will be executed on the specified member, unless a different member-id is provided in a successive requests Set operations will be performed on all members
- port number
- Log port. Supported starting from Gaia version R81.20
- protocol string
- Log protocol. Supported starting from Gaia version R81.20
- queuing_
mechanism bool - Log queuing mechanism state. Supported starting from Gaia version R82
- tls_
encryption object - TLS encryption status. Supported starting from Gaia version R82 tls_encryption blocks are documented below.
- level String
- N/A
- server
Ip String - Remote server address, IPv6 and Hostname supported from R82.
- debug Boolean
- Enable debug logging for this resource.
- gaia
Remote StringSyslog Id - member
Id String - Relevant for commands on Scalable and ElasticXL platforms only. When member-id is provided in the login request, show commands during the session will be executed on the specified member, unless a different member-id is provided in a successive requests Set operations will be performed on all members
- port Double
- Log port. Supported starting from Gaia version R81.20
- protocol String
- Log protocol. Supported starting from Gaia version R81.20
- queuing
Mechanism Boolean - Log queuing mechanism state. Supported starting from Gaia version R82
- tls
Encryption GaiaRemote Syslog Tls Encryption - TLS encryption status. Supported starting from Gaia version R82 tls_encryption blocks are documented below.
- level string
- N/A
- server
Ip string - Remote server address, IPv6 and Hostname supported from R82.
- debug boolean
- Enable debug logging for this resource.
- gaia
Remote stringSyslog Id - member
Id string - Relevant for commands on Scalable and ElasticXL platforms only. When member-id is provided in the login request, show commands during the session will be executed on the specified member, unless a different member-id is provided in a successive requests Set operations will be performed on all members
- port number
- Log port. Supported starting from Gaia version R81.20
- protocol string
- Log protocol. Supported starting from Gaia version R81.20
- queuing
Mechanism boolean - Log queuing mechanism state. Supported starting from Gaia version R82
- tls
Encryption GaiaRemote Syslog Tls Encryption - TLS encryption status. Supported starting from Gaia version R82 tls_encryption blocks are documented below.
- level str
- N/A
- server_
ip str - Remote server address, IPv6 and Hostname supported from R82.
- debug bool
- Enable debug logging for this resource.
- gaia_
remote_ strsyslog_ id - member_
id str - Relevant for commands on Scalable and ElasticXL platforms only. When member-id is provided in the login request, show commands during the session will be executed on the specified member, unless a different member-id is provided in a successive requests Set operations will be performed on all members
- port float
- Log port. Supported starting from Gaia version R81.20
- protocol str
- Log protocol. Supported starting from Gaia version R81.20
- queuing_
mechanism bool - Log queuing mechanism state. Supported starting from Gaia version R82
- tls_
encryption GaiaRemote Syslog Tls Encryption Args - TLS encryption status. Supported starting from Gaia version R82 tls_encryption blocks are documented below.
- level String
- N/A
- server
Ip String - Remote server address, IPv6 and Hostname supported from R82.
- debug Boolean
- Enable debug logging for this resource.
- gaia
Remote StringSyslog Id - member
Id String - Relevant for commands on Scalable and ElasticXL platforms only. When member-id is provided in the login request, show commands during the session will be executed on the specified member, unless a different member-id is provided in a successive requests Set operations will be performed on all members
- port Number
- Log port. Supported starting from Gaia version R81.20
- protocol String
- Log protocol. Supported starting from Gaia version R81.20
- queuing
Mechanism Boolean - Log queuing mechanism state. Supported starting from Gaia version R82
- tls
Encryption Property Map - TLS encryption status. Supported starting from Gaia version R82 tls_encryption blocks are documented below.
Outputs
All input properties are implicitly available as output properties. Additionally, the GaiaRemoteSyslog resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Id string
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id str
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
Look up Existing GaiaRemoteSyslog Resource
Get an existing GaiaRemoteSyslog resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: GaiaRemoteSyslogState, opts?: CustomResourceOptions): GaiaRemoteSyslog@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
debug: Optional[bool] = None,
gaia_remote_syslog_id: Optional[str] = None,
level: Optional[str] = None,
member_id: Optional[str] = None,
port: Optional[float] = None,
protocol: Optional[str] = None,
queuing_mechanism: Optional[bool] = None,
server_ip: Optional[str] = None,
tls_encryption: Optional[GaiaRemoteSyslogTlsEncryptionArgs] = None) -> GaiaRemoteSyslogfunc GetGaiaRemoteSyslog(ctx *Context, name string, id IDInput, state *GaiaRemoteSyslogState, opts ...ResourceOption) (*GaiaRemoteSyslog, error)public static GaiaRemoteSyslog Get(string name, Input<string> id, GaiaRemoteSyslogState? state, CustomResourceOptions? opts = null)public static GaiaRemoteSyslog get(String name, Output<String> id, GaiaRemoteSyslogState state, CustomResourceOptions options)resources: _: type: checkpoint:GaiaRemoteSyslog get: id: ${id}import {
to = checkpoint_gaiaremotesyslog.example
id = "${id}"
}
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Debug bool
- Enable debug logging for this resource.
- Gaia
Remote stringSyslog Id - Level string
- N/A
- Member
Id string - Relevant for commands on Scalable and ElasticXL platforms only. When member-id is provided in the login request, show commands during the session will be executed on the specified member, unless a different member-id is provided in a successive requests Set operations will be performed on all members
- Port double
- Log port. Supported starting from Gaia version R81.20
- Protocol string
- Log protocol. Supported starting from Gaia version R81.20
- Queuing
Mechanism bool - Log queuing mechanism state. Supported starting from Gaia version R82
- Server
Ip string - Remote server address, IPv6 and Hostname supported from R82.
- Tls
Encryption GaiaRemote Syslog Tls Encryption - TLS encryption status. Supported starting from Gaia version R82 tls_encryption blocks are documented below.
- Debug bool
- Enable debug logging for this resource.
- Gaia
Remote stringSyslog Id - Level string
- N/A
- Member
Id string - Relevant for commands on Scalable and ElasticXL platforms only. When member-id is provided in the login request, show commands during the session will be executed on the specified member, unless a different member-id is provided in a successive requests Set operations will be performed on all members
- Port float64
- Log port. Supported starting from Gaia version R81.20
- Protocol string
- Log protocol. Supported starting from Gaia version R81.20
- Queuing
Mechanism bool - Log queuing mechanism state. Supported starting from Gaia version R82
- Server
Ip string - Remote server address, IPv6 and Hostname supported from R82.
- Tls
Encryption GaiaRemote Syslog Tls Encryption Args - TLS encryption status. Supported starting from Gaia version R82 tls_encryption blocks are documented below.
- debug bool
- Enable debug logging for this resource.
- gaia_
remote_ stringsyslog_ id - level string
- N/A
- member_
id string - Relevant for commands on Scalable and ElasticXL platforms only. When member-id is provided in the login request, show commands during the session will be executed on the specified member, unless a different member-id is provided in a successive requests Set operations will be performed on all members
- port number
- Log port. Supported starting from Gaia version R81.20
- protocol string
- Log protocol. Supported starting from Gaia version R81.20
- queuing_
mechanism bool - Log queuing mechanism state. Supported starting from Gaia version R82
- server_
ip string - Remote server address, IPv6 and Hostname supported from R82.
- tls_
encryption object - TLS encryption status. Supported starting from Gaia version R82 tls_encryption blocks are documented below.
- debug Boolean
- Enable debug logging for this resource.
- gaia
Remote StringSyslog Id - level String
- N/A
- member
Id String - Relevant for commands on Scalable and ElasticXL platforms only. When member-id is provided in the login request, show commands during the session will be executed on the specified member, unless a different member-id is provided in a successive requests Set operations will be performed on all members
- port Double
- Log port. Supported starting from Gaia version R81.20
- protocol String
- Log protocol. Supported starting from Gaia version R81.20
- queuing
Mechanism Boolean - Log queuing mechanism state. Supported starting from Gaia version R82
- server
Ip String - Remote server address, IPv6 and Hostname supported from R82.
- tls
Encryption GaiaRemote Syslog Tls Encryption - TLS encryption status. Supported starting from Gaia version R82 tls_encryption blocks are documented below.
- debug boolean
- Enable debug logging for this resource.
- gaia
Remote stringSyslog Id - level string
- N/A
- member
Id string - Relevant for commands on Scalable and ElasticXL platforms only. When member-id is provided in the login request, show commands during the session will be executed on the specified member, unless a different member-id is provided in a successive requests Set operations will be performed on all members
- port number
- Log port. Supported starting from Gaia version R81.20
- protocol string
- Log protocol. Supported starting from Gaia version R81.20
- queuing
Mechanism boolean - Log queuing mechanism state. Supported starting from Gaia version R82
- server
Ip string - Remote server address, IPv6 and Hostname supported from R82.
- tls
Encryption GaiaRemote Syslog Tls Encryption - TLS encryption status. Supported starting from Gaia version R82 tls_encryption blocks are documented below.
- debug bool
- Enable debug logging for this resource.
- gaia_
remote_ strsyslog_ id - level str
- N/A
- member_
id str - Relevant for commands on Scalable and ElasticXL platforms only. When member-id is provided in the login request, show commands during the session will be executed on the specified member, unless a different member-id is provided in a successive requests Set operations will be performed on all members
- port float
- Log port. Supported starting from Gaia version R81.20
- protocol str
- Log protocol. Supported starting from Gaia version R81.20
- queuing_
mechanism bool - Log queuing mechanism state. Supported starting from Gaia version R82
- server_
ip str - Remote server address, IPv6 and Hostname supported from R82.
- tls_
encryption GaiaRemote Syslog Tls Encryption Args - TLS encryption status. Supported starting from Gaia version R82 tls_encryption blocks are documented below.
- debug Boolean
- Enable debug logging for this resource.
- gaia
Remote StringSyslog Id - level String
- N/A
- member
Id String - Relevant for commands on Scalable and ElasticXL platforms only. When member-id is provided in the login request, show commands during the session will be executed on the specified member, unless a different member-id is provided in a successive requests Set operations will be performed on all members
- port Number
- Log port. Supported starting from Gaia version R81.20
- protocol String
- Log protocol. Supported starting from Gaia version R81.20
- queuing
Mechanism Boolean - Log queuing mechanism state. Supported starting from Gaia version R82
- server
Ip String - Remote server address, IPv6 and Hostname supported from R82.
- tls
Encryption Property Map - TLS encryption status. Supported starting from Gaia version R82 tls_encryption blocks are documented below.
Supporting Types
GaiaRemoteSyslogTlsEncryption, GaiaRemoteSyslogTlsEncryptionArgs
- Auth
Mode string - Mode used for TLS authentication. supported modes: name - certificate validation and subject name authentication. Most secure mode. fingerprint - fingerprint of the server's certificate (which can be self-signed). certvalid - server's certificate validation only. It validates the remote peers certificate, but does not check the subject name. It is recommended NOT to use this mode. anon - anonymous authentication, this mode is vulnerable to man in the middle attacks as well as unauthorized access. It is recommended NOT to use this mode. Note: When setting anon or certvalid modes, permitted-peers of the remote host will removed. When setting name or fingerprint modes, it is mandatory to set permitted-peers for the remote host. Supported starting from Gaia version R82
- Enabled bool
- TLS Encryption state. Supported starting from Gaia version R82
- Permitted
Peers List<string> Common name CN or fingerprint of the permitted peer. In case of fingerprint, Accepted SHA1. To specify multiple remote peers separate each one with a comma. This parameter is mandatory when using auth-mode of 'name' or 'fingerprint'.
Note that usually a single remote peer should be all you need. Support for multiple peers is primarily included in support of load balancing scenarios. If the connection goes to a specific server, only one specific peer is ever expected. Supported starting from Gaia version R82 permitted_peers blocks are documented below.
- Auth
Mode string - Mode used for TLS authentication. supported modes: name - certificate validation and subject name authentication. Most secure mode. fingerprint - fingerprint of the server's certificate (which can be self-signed). certvalid - server's certificate validation only. It validates the remote peers certificate, but does not check the subject name. It is recommended NOT to use this mode. anon - anonymous authentication, this mode is vulnerable to man in the middle attacks as well as unauthorized access. It is recommended NOT to use this mode. Note: When setting anon or certvalid modes, permitted-peers of the remote host will removed. When setting name or fingerprint modes, it is mandatory to set permitted-peers for the remote host. Supported starting from Gaia version R82
- Enabled bool
- TLS Encryption state. Supported starting from Gaia version R82
- Permitted
Peers []string Common name CN or fingerprint of the permitted peer. In case of fingerprint, Accepted SHA1. To specify multiple remote peers separate each one with a comma. This parameter is mandatory when using auth-mode of 'name' or 'fingerprint'.
Note that usually a single remote peer should be all you need. Support for multiple peers is primarily included in support of load balancing scenarios. If the connection goes to a specific server, only one specific peer is ever expected. Supported starting from Gaia version R82 permitted_peers blocks are documented below.
- auth_
mode string - Mode used for TLS authentication. supported modes: name - certificate validation and subject name authentication. Most secure mode. fingerprint - fingerprint of the server's certificate (which can be self-signed). certvalid - server's certificate validation only. It validates the remote peers certificate, but does not check the subject name. It is recommended NOT to use this mode. anon - anonymous authentication, this mode is vulnerable to man in the middle attacks as well as unauthorized access. It is recommended NOT to use this mode. Note: When setting anon or certvalid modes, permitted-peers of the remote host will removed. When setting name or fingerprint modes, it is mandatory to set permitted-peers for the remote host. Supported starting from Gaia version R82
- enabled bool
- TLS Encryption state. Supported starting from Gaia version R82
- permitted_
peers list(string) Common name CN or fingerprint of the permitted peer. In case of fingerprint, Accepted SHA1. To specify multiple remote peers separate each one with a comma. This parameter is mandatory when using auth-mode of 'name' or 'fingerprint'.
Note that usually a single remote peer should be all you need. Support for multiple peers is primarily included in support of load balancing scenarios. If the connection goes to a specific server, only one specific peer is ever expected. Supported starting from Gaia version R82 permitted_peers blocks are documented below.
- auth
Mode String - Mode used for TLS authentication. supported modes: name - certificate validation and subject name authentication. Most secure mode. fingerprint - fingerprint of the server's certificate (which can be self-signed). certvalid - server's certificate validation only. It validates the remote peers certificate, but does not check the subject name. It is recommended NOT to use this mode. anon - anonymous authentication, this mode is vulnerable to man in the middle attacks as well as unauthorized access. It is recommended NOT to use this mode. Note: When setting anon or certvalid modes, permitted-peers of the remote host will removed. When setting name or fingerprint modes, it is mandatory to set permitted-peers for the remote host. Supported starting from Gaia version R82
- enabled Boolean
- TLS Encryption state. Supported starting from Gaia version R82
- permitted
Peers List<String> Common name CN or fingerprint of the permitted peer. In case of fingerprint, Accepted SHA1. To specify multiple remote peers separate each one with a comma. This parameter is mandatory when using auth-mode of 'name' or 'fingerprint'.
Note that usually a single remote peer should be all you need. Support for multiple peers is primarily included in support of load balancing scenarios. If the connection goes to a specific server, only one specific peer is ever expected. Supported starting from Gaia version R82 permitted_peers blocks are documented below.
- auth
Mode string - Mode used for TLS authentication. supported modes: name - certificate validation and subject name authentication. Most secure mode. fingerprint - fingerprint of the server's certificate (which can be self-signed). certvalid - server's certificate validation only. It validates the remote peers certificate, but does not check the subject name. It is recommended NOT to use this mode. anon - anonymous authentication, this mode is vulnerable to man in the middle attacks as well as unauthorized access. It is recommended NOT to use this mode. Note: When setting anon or certvalid modes, permitted-peers of the remote host will removed. When setting name or fingerprint modes, it is mandatory to set permitted-peers for the remote host. Supported starting from Gaia version R82
- enabled boolean
- TLS Encryption state. Supported starting from Gaia version R82
- permitted
Peers string[] Common name CN or fingerprint of the permitted peer. In case of fingerprint, Accepted SHA1. To specify multiple remote peers separate each one with a comma. This parameter is mandatory when using auth-mode of 'name' or 'fingerprint'.
Note that usually a single remote peer should be all you need. Support for multiple peers is primarily included in support of load balancing scenarios. If the connection goes to a specific server, only one specific peer is ever expected. Supported starting from Gaia version R82 permitted_peers blocks are documented below.
- auth_
mode str - Mode used for TLS authentication. supported modes: name - certificate validation and subject name authentication. Most secure mode. fingerprint - fingerprint of the server's certificate (which can be self-signed). certvalid - server's certificate validation only. It validates the remote peers certificate, but does not check the subject name. It is recommended NOT to use this mode. anon - anonymous authentication, this mode is vulnerable to man in the middle attacks as well as unauthorized access. It is recommended NOT to use this mode. Note: When setting anon or certvalid modes, permitted-peers of the remote host will removed. When setting name or fingerprint modes, it is mandatory to set permitted-peers for the remote host. Supported starting from Gaia version R82
- enabled bool
- TLS Encryption state. Supported starting from Gaia version R82
- permitted_
peers Sequence[str] Common name CN or fingerprint of the permitted peer. In case of fingerprint, Accepted SHA1. To specify multiple remote peers separate each one with a comma. This parameter is mandatory when using auth-mode of 'name' or 'fingerprint'.
Note that usually a single remote peer should be all you need. Support for multiple peers is primarily included in support of load balancing scenarios. If the connection goes to a specific server, only one specific peer is ever expected. Supported starting from Gaia version R82 permitted_peers blocks are documented below.
- auth
Mode String - Mode used for TLS authentication. supported modes: name - certificate validation and subject name authentication. Most secure mode. fingerprint - fingerprint of the server's certificate (which can be self-signed). certvalid - server's certificate validation only. It validates the remote peers certificate, but does not check the subject name. It is recommended NOT to use this mode. anon - anonymous authentication, this mode is vulnerable to man in the middle attacks as well as unauthorized access. It is recommended NOT to use this mode. Note: When setting anon or certvalid modes, permitted-peers of the remote host will removed. When setting name or fingerprint modes, it is mandatory to set permitted-peers for the remote host. Supported starting from Gaia version R82
- enabled Boolean
- TLS Encryption state. Supported starting from Gaia version R82
- permitted
Peers List<String> Common name CN or fingerprint of the permitted peer. In case of fingerprint, Accepted SHA1. To specify multiple remote peers separate each one with a comma. This parameter is mandatory when using auth-mode of 'name' or 'fingerprint'.
Note that usually a single remote peer should be all you need. Support for multiple peers is primarily included in support of load balancing scenarios. If the connection goes to a specific server, only one specific peer is ever expected. Supported starting from Gaia version R82 permitted_peers blocks are documented below.
Package Details
- Repository
- checkpoint checkpointsw/terraform-provider-checkpoint
- License
- Notes
- This Pulumi package is based on the
checkpointTerraform Provider.
published on Monday, Jun 15, 2026 by checkpointsw