Sign in Dashboard Get started
  1. Packages
  2. Packages
  3. Checkpoint Provider
  4. API Docs
  5. getManagementFirewallBestPractice
Viewing docs for checkpoint 3.3.0
published on Thursday, Jul 30, 2026 by checkpointsw
Schema (JSON)
checkpointsw/terraform-provider-checkpoint

checkpoint.getManagementFirewallBestPractice

Viewing docs for checkpoint 3.3.0
published on Thursday, Jul 30, 2026 by checkpointsw
Schema (JSON)
checkpointsw/terraform-provider-checkpoint

    Use this data source to get information on an existing Check Point Firewall Best Practice.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as checkpoint from "@pulumi/checkpoint";

const dataTest = checkpoint.getManagementFirewallBestPractice({
    name: "firewall-best-practice1",
});

    import pulumi
import pulumi_checkpoint as checkpoint

data_test = checkpoint.get_management_firewall_best_practice(name="firewall-best-practice1")

    package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/checkpoint/v3/checkpoint"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := checkpoint.LookupManagementFirewallBestPractice(ctx, &checkpoint.LookupManagementFirewallBestPracticeArgs{
			Name: pulumi.StringRef("firewall-best-practice1"),
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Checkpoint = Pulumi.Checkpoint;

return await Deployment.RunAsync(() => 
{
    var dataTest = Checkpoint.GetManagementFirewallBestPractice.Invoke(new()
    {
        Name = "firewall-best-practice1",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.checkpoint.CheckpointFunctions;
import com.pulumi.checkpoint.inputs.GetManagementFirewallBestPracticeArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var dataTest = CheckpointFunctions.getManagementFirewallBestPractice(GetManagementFirewallBestPracticeArgs.builder()
            .name("firewall-best-practice1")
            .build());

    }
}

    variables:
  dataTest:
    fn::invoke:
      function: checkpoint:getManagementFirewallBestPractice
      arguments:
        name: firewall-best-practice1

    Example coming soon!

    Using getManagementFirewallBestPractice

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getManagementFirewallBestPractice(args: GetManagementFirewallBestPracticeArgs, opts?: InvokeOptions): Promise<GetManagementFirewallBestPracticeResult>
function getManagementFirewallBestPracticeOutput(args: GetManagementFirewallBestPracticeOutputArgs, opts?: InvokeOptions): Output<GetManagementFirewallBestPracticeResult>
    def get_management_firewall_best_practice(best_practice_id: Optional[str] = None,
                                          id: Optional[str] = None,
                                          name: Optional[str] = None,
                                          show_regulations: Optional[bool] = None,
                                          show_relevant_objects: Optional[bool] = None,
                                          uid: Optional[str] = None,
                                          opts: Optional[InvokeOptions] = None) -> GetManagementFirewallBestPracticeResult
def get_management_firewall_best_practice_output(best_practice_id: pulumi.Input[Optional[str]] = None,
                                          id: pulumi.Input[Optional[str]] = None,
                                          name: pulumi.Input[Optional[str]] = None,
                                          show_regulations: pulumi.Input[Optional[bool]] = None,
                                          show_relevant_objects: pulumi.Input[Optional[bool]] = None,
                                          uid: pulumi.Input[Optional[str]] = None,
                                          opts: Optional[InvokeOptions] = None) -> Output[GetManagementFirewallBestPracticeResult]
    func LookupManagementFirewallBestPractice(ctx *Context, args *LookupManagementFirewallBestPracticeArgs, opts ...InvokeOption) (*LookupManagementFirewallBestPracticeResult, error)
func LookupManagementFirewallBestPracticeOutput(ctx *Context, args *LookupManagementFirewallBestPracticeOutputArgs, opts ...InvokeOption) LookupManagementFirewallBestPracticeResultOutput

    > Note: This function is named LookupManagementFirewallBestPractice in the Go SDK.

    public static class GetManagementFirewallBestPractice 
{
    public static Task<GetManagementFirewallBestPracticeResult> InvokeAsync(GetManagementFirewallBestPracticeArgs args, InvokeOptions? opts = null)
    public static Output<GetManagementFirewallBestPracticeResult> Invoke(GetManagementFirewallBestPracticeInvokeArgs args, InvokeOptions? opts = null)
}
    public static CompletableFuture<GetManagementFirewallBestPracticeResult> getManagementFirewallBestPractice(GetManagementFirewallBestPracticeArgs args, InvokeOptions options)
public static Output<GetManagementFirewallBestPracticeResult> getManagementFirewallBestPractice(GetManagementFirewallBestPracticeArgs args, InvokeOptions options)

    fn::invoke:
  function: checkpoint:index/getManagementFirewallBestPractice:getManagementFirewallBestPractice
  arguments:
    # arguments dictionary
    data "checkpoint_get_management_firewall_best_practice" "name" {
    # arguments
}

    The following arguments are supported:

    BestPracticeId string
    Best Practice ID.
    Id string
    Name string
    Best Practice Name.
    ShowRegulations bool
    Show the applicable regulations of the Best Practice.
    ShowRelevantObjects bool
    Show the relevant objects of the Best Practice.
    Uid string
    Object unique identifier.
    BestPracticeId string
    Best Practice ID.
    Id string
    Name string
    Best Practice Name.
    ShowRegulations bool
    Show the applicable regulations of the Best Practice.
    ShowRelevantObjects bool
    Show the relevant objects of the Best Practice.
    Uid string
    Object unique identifier.
    best_practice_id string
    Best Practice ID.
    id string
    name string
    Best Practice Name.
    show_regulations bool
    Show the applicable regulations of the Best Practice.
    show_relevant_objects bool
    Show the relevant objects of the Best Practice.
    uid string
    Object unique identifier.
    bestPracticeId String
    Best Practice ID.
    id String
    name String
    Best Practice Name.
    showRegulations Boolean
    Show the applicable regulations of the Best Practice.
    showRelevantObjects Boolean
    Show the relevant objects of the Best Practice.
    uid String
    Object unique identifier.
    bestPracticeId string
    Best Practice ID.
    id string
    name string
    Best Practice Name.
    showRegulations boolean
    Show the applicable regulations of the Best Practice.
    showRelevantObjects boolean
    Show the relevant objects of the Best Practice.
    uid string
    Object unique identifier.
    best_practice_id str
    Best Practice ID.
    id str
    name str
    Best Practice Name.
    show_regulations bool
    Show the applicable regulations of the Best Practice.
    show_relevant_objects bool
    Show the relevant objects of the Best Practice.
    uid str
    Object unique identifier.
    bestPracticeId String
    Best Practice ID.
    id String
    name String
    Best Practice Name.
    showRegulations Boolean
    Show the applicable regulations of the Best Practice.
    showRelevantObjects Boolean
    Show the relevant objects of the Best Practice.
    uid String
    Object unique identifier.

    getManagementFirewallBestPractice Result

    The following output properties are available:

    Supporting Types

    GetManagementFirewallBestPracticeExpiration

    Comment string
    The reason the best practice was deactivated.
    ExpireOns List<GetManagementFirewallBestPracticeExpirationExpireOn>
    When the deactivation expires. Date and time represented in international ISO 8601 format. expire_on blocks are documented below.
    Mode string
    Whether the deactivation never expires or expires on a specific date.
    Comment string
    The reason the best practice was deactivated.
    ExpireOns []GetManagementFirewallBestPracticeExpirationExpireOn
    When the deactivation expires. Date and time represented in international ISO 8601 format. expire_on blocks are documented below.
    Mode string
    Whether the deactivation never expires or expires on a specific date.
    comment string
    The reason the best practice was deactivated.
    expire_ons list(object)
    When the deactivation expires. Date and time represented in international ISO 8601 format. expire_on blocks are documented below.
    mode string
    Whether the deactivation never expires or expires on a specific date.
    comment String
    The reason the best practice was deactivated.
    expireOns List<GetManagementFirewallBestPracticeExpirationExpireOn>
    When the deactivation expires. Date and time represented in international ISO 8601 format. expire_on blocks are documented below.
    mode String
    Whether the deactivation never expires or expires on a specific date.
    comment string
    The reason the best practice was deactivated.
    expireOns GetManagementFirewallBestPracticeExpirationExpireOn[]
    When the deactivation expires. Date and time represented in international ISO 8601 format. expire_on blocks are documented below.
    mode string
    Whether the deactivation never expires or expires on a specific date.
    comment str
    The reason the best practice was deactivated.
    expire_ons Sequence[GetManagementFirewallBestPracticeExpirationExpireOn]
    When the deactivation expires. Date and time represented in international ISO 8601 format. expire_on blocks are documented below.
    mode str
    Whether the deactivation never expires or expires on a specific date.
    comment String
    The reason the best practice was deactivated.
    expireOns List<Property Map>
    When the deactivation expires. Date and time represented in international ISO 8601 format. expire_on blocks are documented below.
    mode String
    Whether the deactivation never expires or expires on a specific date.

    GetManagementFirewallBestPracticeExpirationExpireOn

    Iso8601 string
    Date and time represented in international ISO 8601 format.
    Posix double
    Number of milliseconds that have elapsed since 00:00:00, 1 January 1970.
    Iso8601 string
    Date and time represented in international ISO 8601 format.
    Posix float64
    Number of milliseconds that have elapsed since 00:00:00, 1 January 1970.
    iso8601 string
    Date and time represented in international ISO 8601 format.
    posix number
    Number of milliseconds that have elapsed since 00:00:00, 1 January 1970.
    iso8601 String
    Date and time represented in international ISO 8601 format.
    posix Double
    Number of milliseconds that have elapsed since 00:00:00, 1 January 1970.
    iso8601 string
    Date and time represented in international ISO 8601 format.
    posix number
    Number of milliseconds that have elapsed since 00:00:00, 1 January 1970.
    iso8601 str
    Date and time represented in international ISO 8601 format.
    posix float
    Number of milliseconds that have elapsed since 00:00:00, 1 January 1970.
    iso8601 String
    Date and time represented in international ISO 8601 format.
    posix Number
    Number of milliseconds that have elapsed since 00:00:00, 1 January 1970.

    GetManagementFirewallBestPracticeRegulation

    RegulationName string
    The name of the regulation.
    RequirementDescription string
    The description of the requirement.
    RequirementId string
    The id of the requirement.
    RequirementStatus string
    The status of the requirement.
    RequirementUid string
    The unique identifier of the requirement.
    RegulationName string
    The name of the regulation.
    RequirementDescription string
    The description of the requirement.
    RequirementId string
    The id of the requirement.
    RequirementStatus string
    The status of the requirement.
    RequirementUid string
    The unique identifier of the requirement.
    regulation_name string
    The name of the regulation.
    requirement_description string
    The description of the requirement.
    requirement_id string
    The id of the requirement.
    requirement_status string
    The status of the requirement.
    requirement_uid string
    The unique identifier of the requirement.
    regulationName String
    The name of the regulation.
    requirementDescription String
    The description of the requirement.
    requirementId String
    The id of the requirement.
    requirementStatus String
    The status of the requirement.
    requirementUid String
    The unique identifier of the requirement.
    regulationName string
    The name of the regulation.
    requirementDescription string
    The description of the requirement.
    requirementId string
    The id of the requirement.
    requirementStatus string
    The status of the requirement.
    requirementUid string
    The unique identifier of the requirement.
    regulation_name str
    The name of the regulation.
    requirement_description str
    The description of the requirement.
    requirement_id str
    The id of the requirement.
    requirement_status str
    The status of the requirement.
    requirement_uid str
    The unique identifier of the requirement.
    regulationName String
    The name of the regulation.
    requirementDescription String
    The description of the requirement.
    requirementId String
    The id of the requirement.
    requirementStatus String
    The status of the requirement.
    requirementUid String
    The unique identifier of the requirement.

    GetManagementFirewallBestPracticeRelevantObject

    AccessRulesInfos List<GetManagementFirewallBestPracticeRelevantObjectAccessRulesInfo>
    The information about the relevant access rules. Appears only when the value of the 'relevant-objects-type' parameter is 'access-rule'. access_rules_info blocks are documented below.
    CpmRelevantObjectsInfos List<GetManagementFirewallBestPracticeRelevantObjectCpmRelevantObjectsInfo>
    The information about the relevant objects. Appears only when the value of the 'relevant-objects-type' parameter is 'cpm-relevant-object'.
    IpsProtectionsInfos List<GetManagementFirewallBestPracticeRelevantObjectIpsProtectionsInfo>
    The information about the relevant ips-protection objects. Appears only when the value of the 'relevant-objects-type' parameter is 'ips-protection'. ips_protections_info blocks are documented below.
    RelevantObjectsType string
    The type of the relevant object.
    AccessRulesInfos []GetManagementFirewallBestPracticeRelevantObjectAccessRulesInfo
    The information about the relevant access rules. Appears only when the value of the 'relevant-objects-type' parameter is 'access-rule'. access_rules_info blocks are documented below.
    CpmRelevantObjectsInfos []GetManagementFirewallBestPracticeRelevantObjectCpmRelevantObjectsInfo
    The information about the relevant objects. Appears only when the value of the 'relevant-objects-type' parameter is 'cpm-relevant-object'.
    IpsProtectionsInfos []GetManagementFirewallBestPracticeRelevantObjectIpsProtectionsInfo
    The information about the relevant ips-protection objects. Appears only when the value of the 'relevant-objects-type' parameter is 'ips-protection'. ips_protections_info blocks are documented below.
    RelevantObjectsType string
    The type of the relevant object.
    access_rules_infos list(object)
    The information about the relevant access rules. Appears only when the value of the 'relevant-objects-type' parameter is 'access-rule'. access_rules_info blocks are documented below.
    cpm_relevant_objects_infos list(object)
    The information about the relevant objects. Appears only when the value of the 'relevant-objects-type' parameter is 'cpm-relevant-object'.
    ips_protections_infos list(object)
    The information about the relevant ips-protection objects. Appears only when the value of the 'relevant-objects-type' parameter is 'ips-protection'. ips_protections_info blocks are documented below.
    relevant_objects_type string
    The type of the relevant object.
    accessRulesInfos List<GetManagementFirewallBestPracticeRelevantObjectAccessRulesInfo>
    The information about the relevant access rules. Appears only when the value of the 'relevant-objects-type' parameter is 'access-rule'. access_rules_info blocks are documented below.
    cpmRelevantObjectsInfos List<GetManagementFirewallBestPracticeRelevantObjectCpmRelevantObjectsInfo>
    The information about the relevant objects. Appears only when the value of the 'relevant-objects-type' parameter is 'cpm-relevant-object'.
    ipsProtectionsInfos List<GetManagementFirewallBestPracticeRelevantObjectIpsProtectionsInfo>
    The information about the relevant ips-protection objects. Appears only when the value of the 'relevant-objects-type' parameter is 'ips-protection'. ips_protections_info blocks are documented below.
    relevantObjectsType String
    The type of the relevant object.
    accessRulesInfos GetManagementFirewallBestPracticeRelevantObjectAccessRulesInfo[]
    The information about the relevant access rules. Appears only when the value of the 'relevant-objects-type' parameter is 'access-rule'. access_rules_info blocks are documented below.
    cpmRelevantObjectsInfos GetManagementFirewallBestPracticeRelevantObjectCpmRelevantObjectsInfo[]
    The information about the relevant objects. Appears only when the value of the 'relevant-objects-type' parameter is 'cpm-relevant-object'.
    ipsProtectionsInfos GetManagementFirewallBestPracticeRelevantObjectIpsProtectionsInfo[]
    The information about the relevant ips-protection objects. Appears only when the value of the 'relevant-objects-type' parameter is 'ips-protection'. ips_protections_info blocks are documented below.
    relevantObjectsType string
    The type of the relevant object.
    access_rules_infos Sequence[GetManagementFirewallBestPracticeRelevantObjectAccessRulesInfo]
    The information about the relevant access rules. Appears only when the value of the 'relevant-objects-type' parameter is 'access-rule'. access_rules_info blocks are documented below.
    cpm_relevant_objects_infos Sequence[GetManagementFirewallBestPracticeRelevantObjectCpmRelevantObjectsInfo]
    The information about the relevant objects. Appears only when the value of the 'relevant-objects-type' parameter is 'cpm-relevant-object'.
    ips_protections_infos Sequence[GetManagementFirewallBestPracticeRelevantObjectIpsProtectionsInfo]
    The information about the relevant ips-protection objects. Appears only when the value of the 'relevant-objects-type' parameter is 'ips-protection'. ips_protections_info blocks are documented below.
    relevant_objects_type str
    The type of the relevant object.
    accessRulesInfos List<Property Map>
    The information about the relevant access rules. Appears only when the value of the 'relevant-objects-type' parameter is 'access-rule'. access_rules_info blocks are documented below.
    cpmRelevantObjectsInfos List<Property Map>
    The information about the relevant objects. Appears only when the value of the 'relevant-objects-type' parameter is 'cpm-relevant-object'.
    ipsProtectionsInfos List<Property Map>
    The information about the relevant ips-protection objects. Appears only when the value of the 'relevant-objects-type' parameter is 'ips-protection'. ips_protections_info blocks are documented below.
    relevantObjectsType String
    The type of the relevant object.

    GetManagementFirewallBestPracticeRelevantObjectAccessRulesInfo

    Enabled bool
    Shows if the Compliance scan is enabled or not for this object.
    LayerName string
    The name of the relevant policy layer.
    LayerUid string
    The UID of the relevant policy layer.
    PolicyName string
    The name of the relevant policy.
    RuleIndexes string
    Comma-separated indexes of the relevant rules in the relevant policy and policy layer.
    Status string
    The status of the relevant object.
    Enabled bool
    Shows if the Compliance scan is enabled or not for this object.
    LayerName string
    The name of the relevant policy layer.
    LayerUid string
    The UID of the relevant policy layer.
    PolicyName string
    The name of the relevant policy.
    RuleIndexes string
    Comma-separated indexes of the relevant rules in the relevant policy and policy layer.
    Status string
    The status of the relevant object.
    enabled bool
    Shows if the Compliance scan is enabled or not for this object.
    layer_name string
    The name of the relevant policy layer.
    layer_uid string
    The UID of the relevant policy layer.
    policy_name string
    The name of the relevant policy.
    rule_indexes string
    Comma-separated indexes of the relevant rules in the relevant policy and policy layer.
    status string
    The status of the relevant object.
    enabled Boolean
    Shows if the Compliance scan is enabled or not for this object.
    layerName String
    The name of the relevant policy layer.
    layerUid String
    The UID of the relevant policy layer.
    policyName String
    The name of the relevant policy.
    ruleIndexes String
    Comma-separated indexes of the relevant rules in the relevant policy and policy layer.
    status String
    The status of the relevant object.
    enabled boolean
    Shows if the Compliance scan is enabled or not for this object.
    layerName string
    The name of the relevant policy layer.
    layerUid string
    The UID of the relevant policy layer.
    policyName string
    The name of the relevant policy.
    ruleIndexes string
    Comma-separated indexes of the relevant rules in the relevant policy and policy layer.
    status string
    The status of the relevant object.
    enabled bool
    Shows if the Compliance scan is enabled or not for this object.
    layer_name str
    The name of the relevant policy layer.
    layer_uid str
    The UID of the relevant policy layer.
    policy_name str
    The name of the relevant policy.
    rule_indexes str
    Comma-separated indexes of the relevant rules in the relevant policy and policy layer.
    status str
    The status of the relevant object.
    enabled Boolean
    Shows if the Compliance scan is enabled or not for this object.
    layerName String
    The name of the relevant policy layer.
    layerUid String
    The UID of the relevant policy layer.
    policyName String
    The name of the relevant policy.
    ruleIndexes String
    Comma-separated indexes of the relevant rules in the relevant policy and policy layer.
    status String
    The status of the relevant object.

    GetManagementFirewallBestPracticeRelevantObjectCpmRelevantObjectsInfo

    CpmRelevantObjectType string
    Enabled bool
    The activation status of the best practice.
    Name string
    Best Practice Name.
    Status string
    The current status of the Best Practice.
    Uid string
    Object unique identifier.
    CpmRelevantObjectType string
    Enabled bool
    The activation status of the best practice.
    Name string
    Best Practice Name.
    Status string
    The current status of the Best Practice.
    Uid string
    Object unique identifier.
    cpm_relevant_object_type string
    enabled bool
    The activation status of the best practice.
    name string
    Best Practice Name.
    status string
    The current status of the Best Practice.
    uid string
    Object unique identifier.
    cpmRelevantObjectType String
    enabled Boolean
    The activation status of the best practice.
    name String
    Best Practice Name.
    status String
    The current status of the Best Practice.
    uid String
    Object unique identifier.
    cpmRelevantObjectType string
    enabled boolean
    The activation status of the best practice.
    name string
    Best Practice Name.
    status string
    The current status of the Best Practice.
    uid string
    Object unique identifier.
    cpm_relevant_object_type str
    enabled bool
    The activation status of the best practice.
    name str
    Best Practice Name.
    status str
    The current status of the Best Practice.
    uid str
    Object unique identifier.
    cpmRelevantObjectType String
    enabled Boolean
    The activation status of the best practice.
    name String
    Best Practice Name.
    status String
    The current status of the Best Practice.
    uid String
    Object unique identifier.

    GetManagementFirewallBestPracticeRelevantObjectIpsProtectionsInfo

    Action string
    The current action of the Threat Prevention profile.
    Enabled bool
    Shows if the Compliance scan is enabled or not for this object.
    ProfileName string
    The name of the relevant Threat Prevention profile.
    ProfileUid string
    The UID of the relevant Threat Prevention profile.
    ProtectionName string
    The name of the relevant IPS protection.
    Status string
    The status of the relevant object.
    Action string
    The current action of the Threat Prevention profile.
    Enabled bool
    Shows if the Compliance scan is enabled or not for this object.
    ProfileName string
    The name of the relevant Threat Prevention profile.
    ProfileUid string
    The UID of the relevant Threat Prevention profile.
    ProtectionName string
    The name of the relevant IPS protection.
    Status string
    The status of the relevant object.
    action string
    The current action of the Threat Prevention profile.
    enabled bool
    Shows if the Compliance scan is enabled or not for this object.
    profile_name string
    The name of the relevant Threat Prevention profile.
    profile_uid string
    The UID of the relevant Threat Prevention profile.
    protection_name string
    The name of the relevant IPS protection.
    status string
    The status of the relevant object.
    action String
    The current action of the Threat Prevention profile.
    enabled Boolean
    Shows if the Compliance scan is enabled or not for this object.
    profileName String
    The name of the relevant Threat Prevention profile.
    profileUid String
    The UID of the relevant Threat Prevention profile.
    protectionName String
    The name of the relevant IPS protection.
    status String
    The status of the relevant object.
    action string
    The current action of the Threat Prevention profile.
    enabled boolean
    Shows if the Compliance scan is enabled or not for this object.
    profileName string
    The name of the relevant Threat Prevention profile.
    profileUid string
    The UID of the relevant Threat Prevention profile.
    protectionName string
    The name of the relevant IPS protection.
    status string
    The status of the relevant object.
    action str
    The current action of the Threat Prevention profile.
    enabled bool
    Shows if the Compliance scan is enabled or not for this object.
    profile_name str
    The name of the relevant Threat Prevention profile.
    profile_uid str
    The UID of the relevant Threat Prevention profile.
    protection_name str
    The name of the relevant IPS protection.
    status str
    The status of the relevant object.
    action String
    The current action of the Threat Prevention profile.
    enabled Boolean
    Shows if the Compliance scan is enabled or not for this object.
    profileName String
    The name of the relevant Threat Prevention profile.
    profileUid String
    The UID of the relevant Threat Prevention profile.
    protectionName String
    The name of the relevant IPS protection.
    status String
    The status of the relevant object.

    GetManagementFirewallBestPracticeRule

    Actions List<string>
    Rule actions to match.
    CommentConditions List<GetManagementFirewallBestPracticeRuleCommentCondition>
    Match the rule comment against a text condition. comment_condition blocks are documented below.
    Destinations List<string>
    Network objects to match in the rule Destination column.Level of details in the output corresponds to the number of details for search. This table shows the level of details in the Standard level.
    HitCounts List<string>
    Hit-count levels to match.
    InstallOns List<string>
    Security Gateways or Clusters the rule applies to.Level of details in the output corresponds to the number of details for search. This table shows the level of details in the Standard level.
    NameConditions List<GetManagementFirewallBestPracticeRuleNameCondition>
    Match the rule name against a text condition. name_condition blocks are documented below.
    NegateAction bool
    Shows if the action values are negated.
    NegateDestination bool
    Shows if the destination values are negated.
    NegateHitCount bool
    Shows if the hit-count values are negated.
    NegateInstallOn bool
    Shows if the install-on values are negated.
    NegateServicesAndApplications bool
    Shows if the services and applications values are negated.
    NegateSource bool
    Shows if the source values are negated.
    NegateTime bool
    Shows if the time values are negated.
    NegateTrack bool
    Shows if the track values are negated.
    NegateVpn bool
    Shows if the vpn values are negated.
    ServicesAndApplications List<string>
    Services, applications, categories or sites to match.Level of details in the output corresponds to the number of details for search. This table shows the level of details in the Standard level.
    Sources List<string>
    Network objects to match in the rule Source column.Level of details in the output corresponds to the number of details for search. This table shows the level of details in the Standard level.
    Times List<string>
    Time objects the rule applies to.Level of details in the output corresponds to the number of details for search. This table shows the level of details in the Standard level.
    Tracks List<string>
    Tracking methods to match.
    Vpns List<string>
    VPN communities to match.Level of details in the output corresponds to the number of details for search. This table shows the level of details in the Standard level.
    Actions []string
    Rule actions to match.
    CommentConditions []GetManagementFirewallBestPracticeRuleCommentCondition
    Match the rule comment against a text condition. comment_condition blocks are documented below.
    Destinations []string
    Network objects to match in the rule Destination column.Level of details in the output corresponds to the number of details for search. This table shows the level of details in the Standard level.
    HitCounts []string
    Hit-count levels to match.
    InstallOns []string
    Security Gateways or Clusters the rule applies to.Level of details in the output corresponds to the number of details for search. This table shows the level of details in the Standard level.
    NameConditions []GetManagementFirewallBestPracticeRuleNameCondition
    Match the rule name against a text condition. name_condition blocks are documented below.
    NegateAction bool
    Shows if the action values are negated.
    NegateDestination bool
    Shows if the destination values are negated.
    NegateHitCount bool
    Shows if the hit-count values are negated.
    NegateInstallOn bool
    Shows if the install-on values are negated.
    NegateServicesAndApplications bool
    Shows if the services and applications values are negated.
    NegateSource bool
    Shows if the source values are negated.
    NegateTime bool
    Shows if the time values are negated.
    NegateTrack bool
    Shows if the track values are negated.
    NegateVpn bool
    Shows if the vpn values are negated.
    ServicesAndApplications []string
    Services, applications, categories or sites to match.Level of details in the output corresponds to the number of details for search. This table shows the level of details in the Standard level.
    Sources []string
    Network objects to match in the rule Source column.Level of details in the output corresponds to the number of details for search. This table shows the level of details in the Standard level.
    Times []string
    Time objects the rule applies to.Level of details in the output corresponds to the number of details for search. This table shows the level of details in the Standard level.
    Tracks []string
    Tracking methods to match.
    Vpns []string
    VPN communities to match.Level of details in the output corresponds to the number of details for search. This table shows the level of details in the Standard level.
    actions list(string)
    Rule actions to match.
    comment_conditions list(object)
    Match the rule comment against a text condition. comment_condition blocks are documented below.
    destinations list(string)
    Network objects to match in the rule Destination column.Level of details in the output corresponds to the number of details for search. This table shows the level of details in the Standard level.
    hit_counts list(string)
    Hit-count levels to match.
    install_ons list(string)
    Security Gateways or Clusters the rule applies to.Level of details in the output corresponds to the number of details for search. This table shows the level of details in the Standard level.
    name_conditions list(object)
    Match the rule name against a text condition. name_condition blocks are documented below.
    negate_action bool
    Shows if the action values are negated.
    negate_destination bool
    Shows if the destination values are negated.
    negate_hit_count bool
    Shows if the hit-count values are negated.
    negate_install_on bool
    Shows if the install-on values are negated.
    negate_services_and_applications bool
    Shows if the services and applications values are negated.
    negate_source bool
    Shows if the source values are negated.
    negate_time bool
    Shows if the time values are negated.
    negate_track bool
    Shows if the track values are negated.
    negate_vpn bool
    Shows if the vpn values are negated.
    services_and_applications list(string)
    Services, applications, categories or sites to match.Level of details in the output corresponds to the number of details for search. This table shows the level of details in the Standard level.
    sources list(string)
    Network objects to match in the rule Source column.Level of details in the output corresponds to the number of details for search. This table shows the level of details in the Standard level.
    times list(string)
    Time objects the rule applies to.Level of details in the output corresponds to the number of details for search. This table shows the level of details in the Standard level.
    tracks list(string)
    Tracking methods to match.
    vpns list(string)
    VPN communities to match.Level of details in the output corresponds to the number of details for search. This table shows the level of details in the Standard level.
    actions List<String>
    Rule actions to match.
    commentConditions List<GetManagementFirewallBestPracticeRuleCommentCondition>
    Match the rule comment against a text condition. comment_condition blocks are documented below.
    destinations List<String>
    Network objects to match in the rule Destination column.Level of details in the output corresponds to the number of details for search. This table shows the level of details in the Standard level.
    hitCounts List<String>
    Hit-count levels to match.
    installOns List<String>
    Security Gateways or Clusters the rule applies to.Level of details in the output corresponds to the number of details for search. This table shows the level of details in the Standard level.
    nameConditions List<GetManagementFirewallBestPracticeRuleNameCondition>
    Match the rule name against a text condition. name_condition blocks are documented below.
    negateAction Boolean
    Shows if the action values are negated.
    negateDestination Boolean
    Shows if the destination values are negated.
    negateHitCount Boolean
    Shows if the hit-count values are negated.
    negateInstallOn Boolean
    Shows if the install-on values are negated.
    negateServicesAndApplications Boolean
    Shows if the services and applications values are negated.
    negateSource Boolean
    Shows if the source values are negated.
    negateTime Boolean
    Shows if the time values are negated.
    negateTrack Boolean
    Shows if the track values are negated.
    negateVpn Boolean
    Shows if the vpn values are negated.
    servicesAndApplications List<String>
    Services, applications, categories or sites to match.Level of details in the output corresponds to the number of details for search. This table shows the level of details in the Standard level.
    sources List<String>
    Network objects to match in the rule Source column.Level of details in the output corresponds to the number of details for search. This table shows the level of details in the Standard level.
    times List<String>
    Time objects the rule applies to.Level of details in the output corresponds to the number of details for search. This table shows the level of details in the Standard level.
    tracks List<String>
    Tracking methods to match.
    vpns List<String>
    VPN communities to match.Level of details in the output corresponds to the number of details for search. This table shows the level of details in the Standard level.
    actions string[]
    Rule actions to match.
    commentConditions GetManagementFirewallBestPracticeRuleCommentCondition[]
    Match the rule comment against a text condition. comment_condition blocks are documented below.
    destinations string[]
    Network objects to match in the rule Destination column.Level of details in the output corresponds to the number of details for search. This table shows the level of details in the Standard level.
    hitCounts string[]
    Hit-count levels to match.
    installOns string[]
    Security Gateways or Clusters the rule applies to.Level of details in the output corresponds to the number of details for search. This table shows the level of details in the Standard level.
    nameConditions GetManagementFirewallBestPracticeRuleNameCondition[]
    Match the rule name against a text condition. name_condition blocks are documented below.
    negateAction boolean
    Shows if the action values are negated.
    negateDestination boolean
    Shows if the destination values are negated.
    negateHitCount boolean
    Shows if the hit-count values are negated.
    negateInstallOn boolean
    Shows if the install-on values are negated.
    negateServicesAndApplications boolean
    Shows if the services and applications values are negated.
    negateSource boolean
    Shows if the source values are negated.
    negateTime boolean
    Shows if the time values are negated.
    negateTrack boolean
    Shows if the track values are negated.
    negateVpn boolean
    Shows if the vpn values are negated.
    servicesAndApplications string[]
    Services, applications, categories or sites to match.Level of details in the output corresponds to the number of details for search. This table shows the level of details in the Standard level.
    sources string[]
    Network objects to match in the rule Source column.Level of details in the output corresponds to the number of details for search. This table shows the level of details in the Standard level.
    times string[]
    Time objects the rule applies to.Level of details in the output corresponds to the number of details for search. This table shows the level of details in the Standard level.
    tracks string[]
    Tracking methods to match.
    vpns string[]
    VPN communities to match.Level of details in the output corresponds to the number of details for search. This table shows the level of details in the Standard level.
    actions Sequence[str]
    Rule actions to match.
    comment_conditions Sequence[GetManagementFirewallBestPracticeRuleCommentCondition]
    Match the rule comment against a text condition. comment_condition blocks are documented below.
    destinations Sequence[str]
    Network objects to match in the rule Destination column.Level of details in the output corresponds to the number of details for search. This table shows the level of details in the Standard level.
    hit_counts Sequence[str]
    Hit-count levels to match.
    install_ons Sequence[str]
    Security Gateways or Clusters the rule applies to.Level of details in the output corresponds to the number of details for search. This table shows the level of details in the Standard level.
    name_conditions Sequence[GetManagementFirewallBestPracticeRuleNameCondition]
    Match the rule name against a text condition. name_condition blocks are documented below.
    negate_action bool
    Shows if the action values are negated.
    negate_destination bool
    Shows if the destination values are negated.
    negate_hit_count bool
    Shows if the hit-count values are negated.
    negate_install_on bool
    Shows if the install-on values are negated.
    negate_services_and_applications bool
    Shows if the services and applications values are negated.
    negate_source bool
    Shows if the source values are negated.
    negate_time bool
    Shows if the time values are negated.
    negate_track bool
    Shows if the track values are negated.
    negate_vpn bool
    Shows if the vpn values are negated.
    services_and_applications Sequence[str]
    Services, applications, categories or sites to match.Level of details in the output corresponds to the number of details for search. This table shows the level of details in the Standard level.
    sources Sequence[str]
    Network objects to match in the rule Source column.Level of details in the output corresponds to the number of details for search. This table shows the level of details in the Standard level.
    times Sequence[str]
    Time objects the rule applies to.Level of details in the output corresponds to the number of details for search. This table shows the level of details in the Standard level.
    tracks Sequence[str]
    Tracking methods to match.
    vpns Sequence[str]
    VPN communities to match.Level of details in the output corresponds to the number of details for search. This table shows the level of details in the Standard level.
    actions List<String>
    Rule actions to match.
    commentConditions List<Property Map>
    Match the rule comment against a text condition. comment_condition blocks are documented below.
    destinations List<String>
    Network objects to match in the rule Destination column.Level of details in the output corresponds to the number of details for search. This table shows the level of details in the Standard level.
    hitCounts List<String>
    Hit-count levels to match.
    installOns List<String>
    Security Gateways or Clusters the rule applies to.Level of details in the output corresponds to the number of details for search. This table shows the level of details in the Standard level.
    nameConditions List<Property Map>
    Match the rule name against a text condition. name_condition blocks are documented below.
    negateAction Boolean
    Shows if the action values are negated.
    negateDestination Boolean
    Shows if the destination values are negated.
    negateHitCount Boolean
    Shows if the hit-count values are negated.
    negateInstallOn Boolean
    Shows if the install-on values are negated.
    negateServicesAndApplications Boolean
    Shows if the services and applications values are negated.
    negateSource Boolean
    Shows if the source values are negated.
    negateTime Boolean
    Shows if the time values are negated.
    negateTrack Boolean
    Shows if the track values are negated.
    negateVpn Boolean
    Shows if the vpn values are negated.
    servicesAndApplications List<String>
    Services, applications, categories or sites to match.Level of details in the output corresponds to the number of details for search. This table shows the level of details in the Standard level.
    sources List<String>
    Network objects to match in the rule Source column.Level of details in the output corresponds to the number of details for search. This table shows the level of details in the Standard level.
    times List<String>
    Time objects the rule applies to.Level of details in the output corresponds to the number of details for search. This table shows the level of details in the Standard level.
    tracks List<String>
    Tracking methods to match.
    vpns List<String>
    VPN communities to match.Level of details in the output corresponds to the number of details for search. This table shows the level of details in the Standard level.

    GetManagementFirewallBestPracticeRuleCommentCondition

    ConditionType string
    The condition type.
    Value string
    The condition match string. Appears only when the value of the 'condition-type' parameter is: 'Equals', 'Starts with', 'Ends with', 'Contains'.
    ConditionType string
    The condition type.
    Value string
    The condition match string. Appears only when the value of the 'condition-type' parameter is: 'Equals', 'Starts with', 'Ends with', 'Contains'.
    condition_type string
    The condition type.
    value string
    The condition match string. Appears only when the value of the 'condition-type' parameter is: 'Equals', 'Starts with', 'Ends with', 'Contains'.
    conditionType String
    The condition type.
    value String
    The condition match string. Appears only when the value of the 'condition-type' parameter is: 'Equals', 'Starts with', 'Ends with', 'Contains'.
    conditionType string
    The condition type.
    value string
    The condition match string. Appears only when the value of the 'condition-type' parameter is: 'Equals', 'Starts with', 'Ends with', 'Contains'.
    condition_type str
    The condition type.
    value str
    The condition match string. Appears only when the value of the 'condition-type' parameter is: 'Equals', 'Starts with', 'Ends with', 'Contains'.
    conditionType String
    The condition type.
    value String
    The condition match string. Appears only when the value of the 'condition-type' parameter is: 'Equals', 'Starts with', 'Ends with', 'Contains'.

    GetManagementFirewallBestPracticeRuleNameCondition

    ConditionType string
    The condition type.
    Value string
    The condition match string. Appears only when the value of the 'condition-type' parameter is: 'Equals', 'Starts with', 'Ends with', 'Contains'.
    ConditionType string
    The condition type.
    Value string
    The condition match string. Appears only when the value of the 'condition-type' parameter is: 'Equals', 'Starts with', 'Ends with', 'Contains'.
    condition_type string
    The condition type.
    value string
    The condition match string. Appears only when the value of the 'condition-type' parameter is: 'Equals', 'Starts with', 'Ends with', 'Contains'.
    conditionType String
    The condition type.
    value String
    The condition match string. Appears only when the value of the 'condition-type' parameter is: 'Equals', 'Starts with', 'Ends with', 'Contains'.
    conditionType string
    The condition type.
    value string
    The condition match string. Appears only when the value of the 'condition-type' parameter is: 'Equals', 'Starts with', 'Ends with', 'Contains'.
    condition_type str
    The condition type.
    value str
    The condition match string. Appears only when the value of the 'condition-type' parameter is: 'Equals', 'Starts with', 'Ends with', 'Contains'.
    conditionType String
    The condition type.
    value String
    The condition match string. Appears only when the value of the 'condition-type' parameter is: 'Equals', 'Starts with', 'Ends with', 'Contains'.

    Package Details

    Repository
    checkpoint checkpointsw/terraform-provider-checkpoint
    License
    Notes
    This Pulumi package is based on the checkpoint Terraform Provider.
    Viewing docs for checkpoint 3.3.0
    published on Thursday, Jul 30, 2026 by checkpointsw
    Schema (JSON)
    checkpointsw/terraform-provider-checkpoint

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial