1. Packages
  2. Packages
  3. Checkpoint Provider
  4. API Docs
  5. GaiaRemoteSyslog
Viewing docs for checkpoint 3.2.0
published on Monday, Jun 15, 2026 by checkpointsw
Viewing docs for checkpoint 3.2.0
published on Monday, Jun 15, 2026 by checkpointsw

    This resource allows you to execute Check Point Remote Syslog.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
    import * as checkpoint from "@pulumi/checkpoint";
    
    const example = new checkpoint.GaiaRemoteSyslog("example", {
        level: "debug",
        serverIp: "10::130",
    });
    
    import pulumi
    import pulumi_checkpoint as checkpoint
    
    example = checkpoint.GaiaRemoteSyslog("example",
        level="debug",
        server_ip="10::130")
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-terraform-provider/sdks/go/checkpoint/v3/checkpoint"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		_, err := checkpoint.NewGaiaRemoteSyslog(ctx, "example", &checkpoint.GaiaRemoteSyslogArgs{
    			Level:    pulumi.String("debug"),
    			ServerIp: pulumi.String("10::130"),
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Checkpoint = Pulumi.Checkpoint;
    
    return await Deployment.RunAsync(() => 
    {
        var example = new Checkpoint.GaiaRemoteSyslog("example", new()
        {
            Level = "debug",
            ServerIp = "10::130",
        });
    
    });
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.checkpoint.GaiaRemoteSyslog;
    import com.pulumi.checkpoint.GaiaRemoteSyslogArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var example = new GaiaRemoteSyslog("example", GaiaRemoteSyslogArgs.builder()
                .level("debug")
                .serverIp("10::130")
                .build());
    
        }
    }
    
    resources:
      example:
        type: checkpoint:GaiaRemoteSyslog
        properties:
          level: debug
          serverIp: 10::130
    
    Example coming soon!
    

    Create GaiaRemoteSyslog Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new GaiaRemoteSyslog(name: string, args: GaiaRemoteSyslogArgs, opts?: CustomResourceOptions);
    @overload
    def GaiaRemoteSyslog(resource_name: str,
                         args: GaiaRemoteSyslogArgs,
                         opts: Optional[ResourceOptions] = None)
    
    @overload
    def GaiaRemoteSyslog(resource_name: str,
                         opts: Optional[ResourceOptions] = None,
                         level: Optional[str] = None,
                         server_ip: Optional[str] = None,
                         debug: Optional[bool] = None,
                         gaia_remote_syslog_id: Optional[str] = None,
                         member_id: Optional[str] = None,
                         port: Optional[float] = None,
                         protocol: Optional[str] = None,
                         queuing_mechanism: Optional[bool] = None,
                         tls_encryption: Optional[GaiaRemoteSyslogTlsEncryptionArgs] = None)
    func NewGaiaRemoteSyslog(ctx *Context, name string, args GaiaRemoteSyslogArgs, opts ...ResourceOption) (*GaiaRemoteSyslog, error)
    public GaiaRemoteSyslog(string name, GaiaRemoteSyslogArgs args, CustomResourceOptions? opts = null)
    public GaiaRemoteSyslog(String name, GaiaRemoteSyslogArgs args)
    public GaiaRemoteSyslog(String name, GaiaRemoteSyslogArgs args, CustomResourceOptions options)
    
    type: checkpoint:GaiaRemoteSyslog
    properties: # The arguments to resource properties.
    options: # Bag of options to control resource's behavior.
    
    
    resource "checkpoint_gaiaremotesyslog" "name" {
        # resource properties
    }

    Parameters

    name string
    The unique name of the resource.
    args GaiaRemoteSyslogArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args GaiaRemoteSyslogArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args GaiaRemoteSyslogArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args GaiaRemoteSyslogArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args GaiaRemoteSyslogArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var gaiaRemoteSyslogResource = new Checkpoint.GaiaRemoteSyslog("gaiaRemoteSyslogResource", new()
    {
        Level = "string",
        ServerIp = "string",
        Debug = false,
        GaiaRemoteSyslogId = "string",
        MemberId = "string",
        Port = 0,
        Protocol = "string",
        QueuingMechanism = false,
        TlsEncryption = new Checkpoint.Inputs.GaiaRemoteSyslogTlsEncryptionArgs
        {
            AuthMode = "string",
            Enabled = false,
            PermittedPeers = new[]
            {
                "string",
            },
        },
    });
    
    example, err := checkpoint.NewGaiaRemoteSyslog(ctx, "gaiaRemoteSyslogResource", &checkpoint.GaiaRemoteSyslogArgs{
    	Level:              pulumi.String("string"),
    	ServerIp:           pulumi.String("string"),
    	Debug:              pulumi.Bool(false),
    	GaiaRemoteSyslogId: pulumi.String("string"),
    	MemberId:           pulumi.String("string"),
    	Port:               pulumi.Float64(0),
    	Protocol:           pulumi.String("string"),
    	QueuingMechanism:   pulumi.Bool(false),
    	TlsEncryption: &checkpoint.GaiaRemoteSyslogTlsEncryptionArgs{
    		AuthMode: pulumi.String("string"),
    		Enabled:  pulumi.Bool(false),
    		PermittedPeers: pulumi.StringArray{
    			pulumi.String("string"),
    		},
    	},
    })
    
    resource "checkpoint_gaiaremotesyslog" "gaiaRemoteSyslogResource" {
      level                 = "string"
      server_ip             = "string"
      debug                 = false
      gaia_remote_syslog_id = "string"
      member_id             = "string"
      port                  = 0
      protocol              = "string"
      queuing_mechanism     = false
      tls_encryption = {
        auth_mode       = "string"
        enabled         = false
        permitted_peers = ["string"]
      }
    }
    
    var gaiaRemoteSyslogResource = new GaiaRemoteSyslog("gaiaRemoteSyslogResource", GaiaRemoteSyslogArgs.builder()
        .level("string")
        .serverIp("string")
        .debug(false)
        .gaiaRemoteSyslogId("string")
        .memberId("string")
        .port(0.0)
        .protocol("string")
        .queuingMechanism(false)
        .tlsEncryption(GaiaRemoteSyslogTlsEncryptionArgs.builder()
            .authMode("string")
            .enabled(false)
            .permittedPeers("string")
            .build())
        .build());
    
    gaia_remote_syslog_resource = checkpoint.GaiaRemoteSyslog("gaiaRemoteSyslogResource",
        level="string",
        server_ip="string",
        debug=False,
        gaia_remote_syslog_id="string",
        member_id="string",
        port=float(0),
        protocol="string",
        queuing_mechanism=False,
        tls_encryption={
            "auth_mode": "string",
            "enabled": False,
            "permitted_peers": ["string"],
        })
    
    const gaiaRemoteSyslogResource = new checkpoint.GaiaRemoteSyslog("gaiaRemoteSyslogResource", {
        level: "string",
        serverIp: "string",
        debug: false,
        gaiaRemoteSyslogId: "string",
        memberId: "string",
        port: 0,
        protocol: "string",
        queuingMechanism: false,
        tlsEncryption: {
            authMode: "string",
            enabled: false,
            permittedPeers: ["string"],
        },
    });
    
    type: checkpoint:GaiaRemoteSyslog
    properties:
        debug: false
        gaiaRemoteSyslogId: string
        level: string
        memberId: string
        port: 0
        protocol: string
        queuingMechanism: false
        serverIp: string
        tlsEncryption:
            authMode: string
            enabled: false
            permittedPeers:
                - string
    

    GaiaRemoteSyslog Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The GaiaRemoteSyslog resource accepts the following input properties:

    Level string
    N/A
    ServerIp string
    Remote server address, IPv6 and Hostname supported from R82.
    Debug bool
    Enable debug logging for this resource.
    GaiaRemoteSyslogId string
    MemberId string
    Relevant for commands on Scalable and ElasticXL platforms only. When member-id is provided in the login request, show commands during the session will be executed on the specified member, unless a different member-id is provided in a successive requests Set operations will be performed on all members
    Port double
    Log port. Supported starting from Gaia version R81.20
    Protocol string
    Log protocol. Supported starting from Gaia version R81.20
    QueuingMechanism bool
    Log queuing mechanism state. Supported starting from Gaia version R82
    TlsEncryption GaiaRemoteSyslogTlsEncryption
    TLS encryption status. Supported starting from Gaia version R82 tls_encryption blocks are documented below.
    Level string
    N/A
    ServerIp string
    Remote server address, IPv6 and Hostname supported from R82.
    Debug bool
    Enable debug logging for this resource.
    GaiaRemoteSyslogId string
    MemberId string
    Relevant for commands on Scalable and ElasticXL platforms only. When member-id is provided in the login request, show commands during the session will be executed on the specified member, unless a different member-id is provided in a successive requests Set operations will be performed on all members
    Port float64
    Log port. Supported starting from Gaia version R81.20
    Protocol string
    Log protocol. Supported starting from Gaia version R81.20
    QueuingMechanism bool
    Log queuing mechanism state. Supported starting from Gaia version R82
    TlsEncryption GaiaRemoteSyslogTlsEncryptionArgs
    TLS encryption status. Supported starting from Gaia version R82 tls_encryption blocks are documented below.
    level string
    N/A
    server_ip string
    Remote server address, IPv6 and Hostname supported from R82.
    debug bool
    Enable debug logging for this resource.
    gaia_remote_syslog_id string
    member_id string
    Relevant for commands on Scalable and ElasticXL platforms only. When member-id is provided in the login request, show commands during the session will be executed on the specified member, unless a different member-id is provided in a successive requests Set operations will be performed on all members
    port number
    Log port. Supported starting from Gaia version R81.20
    protocol string
    Log protocol. Supported starting from Gaia version R81.20
    queuing_mechanism bool
    Log queuing mechanism state. Supported starting from Gaia version R82
    tls_encryption object
    TLS encryption status. Supported starting from Gaia version R82 tls_encryption blocks are documented below.
    level String
    N/A
    serverIp String
    Remote server address, IPv6 and Hostname supported from R82.
    debug Boolean
    Enable debug logging for this resource.
    gaiaRemoteSyslogId String
    memberId String
    Relevant for commands on Scalable and ElasticXL platforms only. When member-id is provided in the login request, show commands during the session will be executed on the specified member, unless a different member-id is provided in a successive requests Set operations will be performed on all members
    port Double
    Log port. Supported starting from Gaia version R81.20
    protocol String
    Log protocol. Supported starting from Gaia version R81.20
    queuingMechanism Boolean
    Log queuing mechanism state. Supported starting from Gaia version R82
    tlsEncryption GaiaRemoteSyslogTlsEncryption
    TLS encryption status. Supported starting from Gaia version R82 tls_encryption blocks are documented below.
    level string
    N/A
    serverIp string
    Remote server address, IPv6 and Hostname supported from R82.
    debug boolean
    Enable debug logging for this resource.
    gaiaRemoteSyslogId string
    memberId string
    Relevant for commands on Scalable and ElasticXL platforms only. When member-id is provided in the login request, show commands during the session will be executed on the specified member, unless a different member-id is provided in a successive requests Set operations will be performed on all members
    port number
    Log port. Supported starting from Gaia version R81.20
    protocol string
    Log protocol. Supported starting from Gaia version R81.20
    queuingMechanism boolean
    Log queuing mechanism state. Supported starting from Gaia version R82
    tlsEncryption GaiaRemoteSyslogTlsEncryption
    TLS encryption status. Supported starting from Gaia version R82 tls_encryption blocks are documented below.
    level str
    N/A
    server_ip str
    Remote server address, IPv6 and Hostname supported from R82.
    debug bool
    Enable debug logging for this resource.
    gaia_remote_syslog_id str
    member_id str
    Relevant for commands on Scalable and ElasticXL platforms only. When member-id is provided in the login request, show commands during the session will be executed on the specified member, unless a different member-id is provided in a successive requests Set operations will be performed on all members
    port float
    Log port. Supported starting from Gaia version R81.20
    protocol str
    Log protocol. Supported starting from Gaia version R81.20
    queuing_mechanism bool
    Log queuing mechanism state. Supported starting from Gaia version R82
    tls_encryption GaiaRemoteSyslogTlsEncryptionArgs
    TLS encryption status. Supported starting from Gaia version R82 tls_encryption blocks are documented below.
    level String
    N/A
    serverIp String
    Remote server address, IPv6 and Hostname supported from R82.
    debug Boolean
    Enable debug logging for this resource.
    gaiaRemoteSyslogId String
    memberId String
    Relevant for commands on Scalable and ElasticXL platforms only. When member-id is provided in the login request, show commands during the session will be executed on the specified member, unless a different member-id is provided in a successive requests Set operations will be performed on all members
    port Number
    Log port. Supported starting from Gaia version R81.20
    protocol String
    Log protocol. Supported starting from Gaia version R81.20
    queuingMechanism Boolean
    Log queuing mechanism state. Supported starting from Gaia version R82
    tlsEncryption Property Map
    TLS encryption status. Supported starting from Gaia version R82 tls_encryption blocks are documented below.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the GaiaRemoteSyslog resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing GaiaRemoteSyslog Resource

    Get an existing GaiaRemoteSyslog resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: GaiaRemoteSyslogState, opts?: CustomResourceOptions): GaiaRemoteSyslog
    @staticmethod
    def get(resource_name: str,
            id: str,
            opts: Optional[ResourceOptions] = None,
            debug: Optional[bool] = None,
            gaia_remote_syslog_id: Optional[str] = None,
            level: Optional[str] = None,
            member_id: Optional[str] = None,
            port: Optional[float] = None,
            protocol: Optional[str] = None,
            queuing_mechanism: Optional[bool] = None,
            server_ip: Optional[str] = None,
            tls_encryption: Optional[GaiaRemoteSyslogTlsEncryptionArgs] = None) -> GaiaRemoteSyslog
    func GetGaiaRemoteSyslog(ctx *Context, name string, id IDInput, state *GaiaRemoteSyslogState, opts ...ResourceOption) (*GaiaRemoteSyslog, error)
    public static GaiaRemoteSyslog Get(string name, Input<string> id, GaiaRemoteSyslogState? state, CustomResourceOptions? opts = null)
    public static GaiaRemoteSyslog get(String name, Output<String> id, GaiaRemoteSyslogState state, CustomResourceOptions options)
    resources:  _:    type: checkpoint:GaiaRemoteSyslog    get:      id: ${id}
    import {
      to = checkpoint_gaiaremotesyslog.example
      id = "${id}"
    }
    
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Debug bool
    Enable debug logging for this resource.
    GaiaRemoteSyslogId string
    Level string
    N/A
    MemberId string
    Relevant for commands on Scalable and ElasticXL platforms only. When member-id is provided in the login request, show commands during the session will be executed on the specified member, unless a different member-id is provided in a successive requests Set operations will be performed on all members
    Port double
    Log port. Supported starting from Gaia version R81.20
    Protocol string
    Log protocol. Supported starting from Gaia version R81.20
    QueuingMechanism bool
    Log queuing mechanism state. Supported starting from Gaia version R82
    ServerIp string
    Remote server address, IPv6 and Hostname supported from R82.
    TlsEncryption GaiaRemoteSyslogTlsEncryption
    TLS encryption status. Supported starting from Gaia version R82 tls_encryption blocks are documented below.
    Debug bool
    Enable debug logging for this resource.
    GaiaRemoteSyslogId string
    Level string
    N/A
    MemberId string
    Relevant for commands on Scalable and ElasticXL platforms only. When member-id is provided in the login request, show commands during the session will be executed on the specified member, unless a different member-id is provided in a successive requests Set operations will be performed on all members
    Port float64
    Log port. Supported starting from Gaia version R81.20
    Protocol string
    Log protocol. Supported starting from Gaia version R81.20
    QueuingMechanism bool
    Log queuing mechanism state. Supported starting from Gaia version R82
    ServerIp string
    Remote server address, IPv6 and Hostname supported from R82.
    TlsEncryption GaiaRemoteSyslogTlsEncryptionArgs
    TLS encryption status. Supported starting from Gaia version R82 tls_encryption blocks are documented below.
    debug bool
    Enable debug logging for this resource.
    gaia_remote_syslog_id string
    level string
    N/A
    member_id string
    Relevant for commands on Scalable and ElasticXL platforms only. When member-id is provided in the login request, show commands during the session will be executed on the specified member, unless a different member-id is provided in a successive requests Set operations will be performed on all members
    port number
    Log port. Supported starting from Gaia version R81.20
    protocol string
    Log protocol. Supported starting from Gaia version R81.20
    queuing_mechanism bool
    Log queuing mechanism state. Supported starting from Gaia version R82
    server_ip string
    Remote server address, IPv6 and Hostname supported from R82.
    tls_encryption object
    TLS encryption status. Supported starting from Gaia version R82 tls_encryption blocks are documented below.
    debug Boolean
    Enable debug logging for this resource.
    gaiaRemoteSyslogId String
    level String
    N/A
    memberId String
    Relevant for commands on Scalable and ElasticXL platforms only. When member-id is provided in the login request, show commands during the session will be executed on the specified member, unless a different member-id is provided in a successive requests Set operations will be performed on all members
    port Double
    Log port. Supported starting from Gaia version R81.20
    protocol String
    Log protocol. Supported starting from Gaia version R81.20
    queuingMechanism Boolean
    Log queuing mechanism state. Supported starting from Gaia version R82
    serverIp String
    Remote server address, IPv6 and Hostname supported from R82.
    tlsEncryption GaiaRemoteSyslogTlsEncryption
    TLS encryption status. Supported starting from Gaia version R82 tls_encryption blocks are documented below.
    debug boolean
    Enable debug logging for this resource.
    gaiaRemoteSyslogId string
    level string
    N/A
    memberId string
    Relevant for commands on Scalable and ElasticXL platforms only. When member-id is provided in the login request, show commands during the session will be executed on the specified member, unless a different member-id is provided in a successive requests Set operations will be performed on all members
    port number
    Log port. Supported starting from Gaia version R81.20
    protocol string
    Log protocol. Supported starting from Gaia version R81.20
    queuingMechanism boolean
    Log queuing mechanism state. Supported starting from Gaia version R82
    serverIp string
    Remote server address, IPv6 and Hostname supported from R82.
    tlsEncryption GaiaRemoteSyslogTlsEncryption
    TLS encryption status. Supported starting from Gaia version R82 tls_encryption blocks are documented below.
    debug bool
    Enable debug logging for this resource.
    gaia_remote_syslog_id str
    level str
    N/A
    member_id str
    Relevant for commands on Scalable and ElasticXL platforms only. When member-id is provided in the login request, show commands during the session will be executed on the specified member, unless a different member-id is provided in a successive requests Set operations will be performed on all members
    port float
    Log port. Supported starting from Gaia version R81.20
    protocol str
    Log protocol. Supported starting from Gaia version R81.20
    queuing_mechanism bool
    Log queuing mechanism state. Supported starting from Gaia version R82
    server_ip str
    Remote server address, IPv6 and Hostname supported from R82.
    tls_encryption GaiaRemoteSyslogTlsEncryptionArgs
    TLS encryption status. Supported starting from Gaia version R82 tls_encryption blocks are documented below.
    debug Boolean
    Enable debug logging for this resource.
    gaiaRemoteSyslogId String
    level String
    N/A
    memberId String
    Relevant for commands on Scalable and ElasticXL platforms only. When member-id is provided in the login request, show commands during the session will be executed on the specified member, unless a different member-id is provided in a successive requests Set operations will be performed on all members
    port Number
    Log port. Supported starting from Gaia version R81.20
    protocol String
    Log protocol. Supported starting from Gaia version R81.20
    queuingMechanism Boolean
    Log queuing mechanism state. Supported starting from Gaia version R82
    serverIp String
    Remote server address, IPv6 and Hostname supported from R82.
    tlsEncryption Property Map
    TLS encryption status. Supported starting from Gaia version R82 tls_encryption blocks are documented below.

    Supporting Types

    GaiaRemoteSyslogTlsEncryption, GaiaRemoteSyslogTlsEncryptionArgs

    AuthMode string
    Mode used for TLS authentication. supported modes: name - certificate validation and subject name authentication. Most secure mode. fingerprint - fingerprint of the server's certificate (which can be self-signed). certvalid - server's certificate validation only. It validates the remote peers certificate, but does not check the subject name. It is recommended NOT to use this mode. anon - anonymous authentication, this mode is vulnerable to man in the middle attacks as well as unauthorized access. It is recommended NOT to use this mode. Note: When setting anon or certvalid modes, permitted-peers of the remote host will removed. When setting name or fingerprint modes, it is mandatory to set permitted-peers for the remote host. Supported starting from Gaia version R82
    Enabled bool
    TLS Encryption state. Supported starting from Gaia version R82
    PermittedPeers List<string>

    Common name CN or fingerprint of the permitted peer. In case of fingerprint, Accepted SHA1. To specify multiple remote peers separate each one with a comma. This parameter is mandatory when using auth-mode of 'name' or 'fingerprint'.

    Note that usually a single remote peer should be all you need. Support for multiple peers is primarily included in support of load balancing scenarios. If the connection goes to a specific server, only one specific peer is ever expected. Supported starting from Gaia version R82 permitted_peers blocks are documented below.

    AuthMode string
    Mode used for TLS authentication. supported modes: name - certificate validation and subject name authentication. Most secure mode. fingerprint - fingerprint of the server's certificate (which can be self-signed). certvalid - server's certificate validation only. It validates the remote peers certificate, but does not check the subject name. It is recommended NOT to use this mode. anon - anonymous authentication, this mode is vulnerable to man in the middle attacks as well as unauthorized access. It is recommended NOT to use this mode. Note: When setting anon or certvalid modes, permitted-peers of the remote host will removed. When setting name or fingerprint modes, it is mandatory to set permitted-peers for the remote host. Supported starting from Gaia version R82
    Enabled bool
    TLS Encryption state. Supported starting from Gaia version R82
    PermittedPeers []string

    Common name CN or fingerprint of the permitted peer. In case of fingerprint, Accepted SHA1. To specify multiple remote peers separate each one with a comma. This parameter is mandatory when using auth-mode of 'name' or 'fingerprint'.

    Note that usually a single remote peer should be all you need. Support for multiple peers is primarily included in support of load balancing scenarios. If the connection goes to a specific server, only one specific peer is ever expected. Supported starting from Gaia version R82 permitted_peers blocks are documented below.

    auth_mode string
    Mode used for TLS authentication. supported modes: name - certificate validation and subject name authentication. Most secure mode. fingerprint - fingerprint of the server's certificate (which can be self-signed). certvalid - server's certificate validation only. It validates the remote peers certificate, but does not check the subject name. It is recommended NOT to use this mode. anon - anonymous authentication, this mode is vulnerable to man in the middle attacks as well as unauthorized access. It is recommended NOT to use this mode. Note: When setting anon or certvalid modes, permitted-peers of the remote host will removed. When setting name or fingerprint modes, it is mandatory to set permitted-peers for the remote host. Supported starting from Gaia version R82
    enabled bool
    TLS Encryption state. Supported starting from Gaia version R82
    permitted_peers list(string)

    Common name CN or fingerprint of the permitted peer. In case of fingerprint, Accepted SHA1. To specify multiple remote peers separate each one with a comma. This parameter is mandatory when using auth-mode of 'name' or 'fingerprint'.

    Note that usually a single remote peer should be all you need. Support for multiple peers is primarily included in support of load balancing scenarios. If the connection goes to a specific server, only one specific peer is ever expected. Supported starting from Gaia version R82 permitted_peers blocks are documented below.

    authMode String
    Mode used for TLS authentication. supported modes: name - certificate validation and subject name authentication. Most secure mode. fingerprint - fingerprint of the server's certificate (which can be self-signed). certvalid - server's certificate validation only. It validates the remote peers certificate, but does not check the subject name. It is recommended NOT to use this mode. anon - anonymous authentication, this mode is vulnerable to man in the middle attacks as well as unauthorized access. It is recommended NOT to use this mode. Note: When setting anon or certvalid modes, permitted-peers of the remote host will removed. When setting name or fingerprint modes, it is mandatory to set permitted-peers for the remote host. Supported starting from Gaia version R82
    enabled Boolean
    TLS Encryption state. Supported starting from Gaia version R82
    permittedPeers List<String>

    Common name CN or fingerprint of the permitted peer. In case of fingerprint, Accepted SHA1. To specify multiple remote peers separate each one with a comma. This parameter is mandatory when using auth-mode of 'name' or 'fingerprint'.

    Note that usually a single remote peer should be all you need. Support for multiple peers is primarily included in support of load balancing scenarios. If the connection goes to a specific server, only one specific peer is ever expected. Supported starting from Gaia version R82 permitted_peers blocks are documented below.

    authMode string
    Mode used for TLS authentication. supported modes: name - certificate validation and subject name authentication. Most secure mode. fingerprint - fingerprint of the server's certificate (which can be self-signed). certvalid - server's certificate validation only. It validates the remote peers certificate, but does not check the subject name. It is recommended NOT to use this mode. anon - anonymous authentication, this mode is vulnerable to man in the middle attacks as well as unauthorized access. It is recommended NOT to use this mode. Note: When setting anon or certvalid modes, permitted-peers of the remote host will removed. When setting name or fingerprint modes, it is mandatory to set permitted-peers for the remote host. Supported starting from Gaia version R82
    enabled boolean
    TLS Encryption state. Supported starting from Gaia version R82
    permittedPeers string[]

    Common name CN or fingerprint of the permitted peer. In case of fingerprint, Accepted SHA1. To specify multiple remote peers separate each one with a comma. This parameter is mandatory when using auth-mode of 'name' or 'fingerprint'.

    Note that usually a single remote peer should be all you need. Support for multiple peers is primarily included in support of load balancing scenarios. If the connection goes to a specific server, only one specific peer is ever expected. Supported starting from Gaia version R82 permitted_peers blocks are documented below.

    auth_mode str
    Mode used for TLS authentication. supported modes: name - certificate validation and subject name authentication. Most secure mode. fingerprint - fingerprint of the server's certificate (which can be self-signed). certvalid - server's certificate validation only. It validates the remote peers certificate, but does not check the subject name. It is recommended NOT to use this mode. anon - anonymous authentication, this mode is vulnerable to man in the middle attacks as well as unauthorized access. It is recommended NOT to use this mode. Note: When setting anon or certvalid modes, permitted-peers of the remote host will removed. When setting name or fingerprint modes, it is mandatory to set permitted-peers for the remote host. Supported starting from Gaia version R82
    enabled bool
    TLS Encryption state. Supported starting from Gaia version R82
    permitted_peers Sequence[str]

    Common name CN or fingerprint of the permitted peer. In case of fingerprint, Accepted SHA1. To specify multiple remote peers separate each one with a comma. This parameter is mandatory when using auth-mode of 'name' or 'fingerprint'.

    Note that usually a single remote peer should be all you need. Support for multiple peers is primarily included in support of load balancing scenarios. If the connection goes to a specific server, only one specific peer is ever expected. Supported starting from Gaia version R82 permitted_peers blocks are documented below.

    authMode String
    Mode used for TLS authentication. supported modes: name - certificate validation and subject name authentication. Most secure mode. fingerprint - fingerprint of the server's certificate (which can be self-signed). certvalid - server's certificate validation only. It validates the remote peers certificate, but does not check the subject name. It is recommended NOT to use this mode. anon - anonymous authentication, this mode is vulnerable to man in the middle attacks as well as unauthorized access. It is recommended NOT to use this mode. Note: When setting anon or certvalid modes, permitted-peers of the remote host will removed. When setting name or fingerprint modes, it is mandatory to set permitted-peers for the remote host. Supported starting from Gaia version R82
    enabled Boolean
    TLS Encryption state. Supported starting from Gaia version R82
    permittedPeers List<String>

    Common name CN or fingerprint of the permitted peer. In case of fingerprint, Accepted SHA1. To specify multiple remote peers separate each one with a comma. This parameter is mandatory when using auth-mode of 'name' or 'fingerprint'.

    Note that usually a single remote peer should be all you need. Support for multiple peers is primarily included in support of load balancing scenarios. If the connection goes to a specific server, only one specific peer is ever expected. Supported starting from Gaia version R82 permitted_peers blocks are documented below.

    Package Details

    Repository
    checkpoint checkpointsw/terraform-provider-checkpoint
    License
    Notes
    This Pulumi package is based on the checkpoint Terraform Provider.
    Viewing docs for checkpoint 3.2.0
    published on Monday, Jun 15, 2026 by checkpointsw

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial