checkpoint.ManagementFirewallBestPractice

Example coming soon!

name string

The unique name of the resource.

args ManagementFirewallBestPracticeArgs

The arguments to resource properties.

opts CustomResourceOptions

Bag of options to control resource's behavior.

resource_name str

The unique name of the resource.

args ManagementFirewallBestPracticeArgs

The arguments to resource properties.

opts ResourceOptions

Bag of options to control resource's behavior.

ctx Context

Context object for the current deployment.

name string

The unique name of the resource.

args ManagementFirewallBestPracticeArgs

The arguments to resource properties.

opts ResourceOption

Bag of options to control resource's behavior.

name string

The unique name of the resource.

args ManagementFirewallBestPracticeArgs

The arguments to resource properties.

opts CustomResourceOptions

Bag of options to control resource's behavior.

name String

The unique name of the resource.

args ManagementFirewallBestPracticeArgs

The arguments to resource properties.

options CustomResourceOptions

Bag of options to control resource's behavior.

Description string

Description of the Best Practice.

ActionItem string

To comply with Best Practice, do this action item.

BestPracticeId string

Best Practice ID. Relevant only for updating object

Enabled bool

The activation status of the best practice.

Expiration ManagementFirewallBestPracticeExpiration

Deactivation expiration settings. Required only if enabled is set to false. expiration blocks are documented below.

IgnoreErrors bool

Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.

IgnoreWarnings bool

Apply changes ignoring warnings.

ManagementFirewallBestPracticeId string

Name string

Best Practice Name.

PolicyRangePercentage double

The percentage of the Rule Base to scan (0-100).

PolicyRangePosition string

The direction of the scan.

PoorCondition string

Visibility of poor-result rules in the Relevant Objects pane.

Rule ManagementFirewallBestPracticeRule

The rule criteria the firewall best practice evaluates against the rule base.rule blocks are documented below.

SecureCondition string

Visibility of secure-result rules in the Relevant Objects pane.

Tolerance double

Number of matches allowed before a violation is created. Valid values: between 0 and 100.Required only if violation-condition is set to 'Rule found'.

ViolationCondition string

Define when a violation occurs: 'Rule found' means the criteria match a rule; 'Rule not found' means no rule matches.

Description string

Description of the Best Practice.

ActionItem string

To comply with Best Practice, do this action item.

BestPracticeId string

Best Practice ID. Relevant only for updating object

Enabled bool

The activation status of the best practice.

Expiration ManagementFirewallBestPracticeExpirationArgs

Deactivation expiration settings. Required only if enabled is set to false. expiration blocks are documented below.

IgnoreErrors bool

Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.

IgnoreWarnings bool

Apply changes ignoring warnings.

ManagementFirewallBestPracticeId string

Name string

Best Practice Name.

PolicyRangePercentage float64

The percentage of the Rule Base to scan (0-100).

PolicyRangePosition string

The direction of the scan.

PoorCondition string

Visibility of poor-result rules in the Relevant Objects pane.

Rule ManagementFirewallBestPracticeRuleArgs

The rule criteria the firewall best practice evaluates against the rule base.rule blocks are documented below.

SecureCondition string

Visibility of secure-result rules in the Relevant Objects pane.

Tolerance float64

Number of matches allowed before a violation is created. Valid values: between 0 and 100.Required only if violation-condition is set to 'Rule found'.

ViolationCondition string

Define when a violation occurs: 'Rule found' means the criteria match a rule; 'Rule not found' means no rule matches.

description string

Description of the Best Practice.

action_item string

To comply with Best Practice, do this action item.

best_practice_id string

Best Practice ID. Relevant only for updating object

enabled bool

The activation status of the best practice.

expiration object

Deactivation expiration settings. Required only if enabled is set to false. expiration blocks are documented below.

ignore_errors bool

Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.

ignore_warnings bool

Apply changes ignoring warnings.

management_firewall_best_practice_id string

name string

Best Practice Name.

policy_range_percentage number

The percentage of the Rule Base to scan (0-100).

policy_range_position string

The direction of the scan.

poor_condition string

Visibility of poor-result rules in the Relevant Objects pane.

rule object

The rule criteria the firewall best practice evaluates against the rule base.rule blocks are documented below.

secure_condition string

Visibility of secure-result rules in the Relevant Objects pane.

tolerance number

Number of matches allowed before a violation is created. Valid values: between 0 and 100.Required only if violation-condition is set to 'Rule found'.

violation_condition string

Define when a violation occurs: 'Rule found' means the criteria match a rule; 'Rule not found' means no rule matches.

description String

Description of the Best Practice.

actionItem String

To comply with Best Practice, do this action item.

bestPracticeId String

Best Practice ID. Relevant only for updating object

enabled Boolean

The activation status of the best practice.

expiration ManagementFirewallBestPracticeExpiration

Deactivation expiration settings. Required only if enabled is set to false. expiration blocks are documented below.

ignoreErrors Boolean

Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.

ignoreWarnings Boolean

Apply changes ignoring warnings.

managementFirewallBestPracticeId String

name String

Best Practice Name.

policyRangePercentage Double

The percentage of the Rule Base to scan (0-100).

policyRangePosition String

The direction of the scan.

poorCondition String

Visibility of poor-result rules in the Relevant Objects pane.

rule ManagementFirewallBestPracticeRule

The rule criteria the firewall best practice evaluates against the rule base.rule blocks are documented below.

secureCondition String

Visibility of secure-result rules in the Relevant Objects pane.

tolerance Double

Number of matches allowed before a violation is created. Valid values: between 0 and 100.Required only if violation-condition is set to 'Rule found'.

violationCondition String

Define when a violation occurs: 'Rule found' means the criteria match a rule; 'Rule not found' means no rule matches.

description string

Description of the Best Practice.

actionItem string

To comply with Best Practice, do this action item.

bestPracticeId string

Best Practice ID. Relevant only for updating object

enabled boolean

The activation status of the best practice.

expiration ManagementFirewallBestPracticeExpiration

Deactivation expiration settings. Required only if enabled is set to false. expiration blocks are documented below.

ignoreErrors boolean

Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.

ignoreWarnings boolean

Apply changes ignoring warnings.

managementFirewallBestPracticeId string

name string

Best Practice Name.

policyRangePercentage number

The percentage of the Rule Base to scan (0-100).

policyRangePosition string

The direction of the scan.

poorCondition string

Visibility of poor-result rules in the Relevant Objects pane.

rule ManagementFirewallBestPracticeRule

The rule criteria the firewall best practice evaluates against the rule base.rule blocks are documented below.

secureCondition string

Visibility of secure-result rules in the Relevant Objects pane.

tolerance number

Number of matches allowed before a violation is created. Valid values: between 0 and 100.Required only if violation-condition is set to 'Rule found'.

violationCondition string

Define when a violation occurs: 'Rule found' means the criteria match a rule; 'Rule not found' means no rule matches.

description str

Description of the Best Practice.

action_item str

To comply with Best Practice, do this action item.

best_practice_id str

Best Practice ID. Relevant only for updating object

enabled bool

The activation status of the best practice.

expiration ManagementFirewallBestPracticeExpirationArgs

Deactivation expiration settings. Required only if enabled is set to false. expiration blocks are documented below.

ignore_errors bool

Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.

ignore_warnings bool

Apply changes ignoring warnings.

management_firewall_best_practice_id str

name str

Best Practice Name.

policy_range_percentage float

The percentage of the Rule Base to scan (0-100).

policy_range_position str

The direction of the scan.

poor_condition str

Visibility of poor-result rules in the Relevant Objects pane.

rule ManagementFirewallBestPracticeRuleArgs

The rule criteria the firewall best practice evaluates against the rule base.rule blocks are documented below.

secure_condition str

Visibility of secure-result rules in the Relevant Objects pane.

tolerance float

Number of matches allowed before a violation is created. Valid values: between 0 and 100.Required only if violation-condition is set to 'Rule found'.

violation_condition str

Define when a violation occurs: 'Rule found' means the criteria match a rule; 'Rule not found' means no rule matches.

description String

Description of the Best Practice.

actionItem String

To comply with Best Practice, do this action item.

bestPracticeId String

Best Practice ID. Relevant only for updating object

enabled Boolean

The activation status of the best practice.

expiration Property Map

Deactivation expiration settings. Required only if enabled is set to false. expiration blocks are documented below.

ignoreErrors Boolean

Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.

ignoreWarnings Boolean

Apply changes ignoring warnings.

managementFirewallBestPracticeId String

name String

Best Practice Name.

policyRangePercentage Number

The percentage of the Rule Base to scan (0-100).

policyRangePosition String

The direction of the scan.

poorCondition String

Visibility of poor-result rules in the Relevant Objects pane.

rule Property Map

The rule criteria the firewall best practice evaluates against the rule base.rule blocks are documented below.

secureCondition String

Visibility of secure-result rules in the Relevant Objects pane.

tolerance Number

Number of matches allowed before a violation is created. Valid values: between 0 and 100.Required only if violation-condition is set to 'Rule found'.

violationCondition String

Define when a violation occurs: 'Rule found' means the criteria match a rule; 'Rule not found' means no rule matches.

Id string

The provider-assigned unique ID for this managed resource.

Id string

The provider-assigned unique ID for this managed resource.

id string

The provider-assigned unique ID for this managed resource.

id String

The provider-assigned unique ID for this managed resource.

id string

The provider-assigned unique ID for this managed resource.

id str

The provider-assigned unique ID for this managed resource.

id String

The provider-assigned unique ID for this managed resource.

name

The unique name of the resulting resource.

id

The unique provider ID of the resource to lookup.

state

Any extra arguments used during the lookup.

opts

A bag of options that control this resource's behavior.

resource_name

The unique name of the resulting resource.

id

The unique provider ID of the resource to lookup.

name

The unique name of the resulting resource.

id

The unique provider ID of the resource to lookup.

state

Any extra arguments used during the lookup.

opts

A bag of options that control this resource's behavior.

name

The unique name of the resulting resource.

id

The unique provider ID of the resource to lookup.

state

Any extra arguments used during the lookup.

opts

A bag of options that control this resource's behavior.

name

The unique name of the resulting resource.

id

The unique provider ID of the resource to lookup.

state

Any extra arguments used during the lookup.

opts

A bag of options that control this resource's behavior.

Comment string

The reason for deactivating the best practice.

ExpireOn string

When the deactivation expires. Date and time represented in international ISO 8601 format. Relevant only if mode is set to 'expire-on'.

Mode string

Whether the deactivation never expires or expires on a specific date.

Comment string

The reason for deactivating the best practice.

ExpireOn string

When the deactivation expires. Date and time represented in international ISO 8601 format. Relevant only if mode is set to 'expire-on'.

Mode string

Whether the deactivation never expires or expires on a specific date.

comment string

The reason for deactivating the best practice.

expire_on string

When the deactivation expires. Date and time represented in international ISO 8601 format. Relevant only if mode is set to 'expire-on'.

mode string

Whether the deactivation never expires or expires on a specific date.

comment String

The reason for deactivating the best practice.

expireOn String

When the deactivation expires. Date and time represented in international ISO 8601 format. Relevant only if mode is set to 'expire-on'.

mode String

Whether the deactivation never expires or expires on a specific date.

comment string

The reason for deactivating the best practice.

expireOn string

When the deactivation expires. Date and time represented in international ISO 8601 format. Relevant only if mode is set to 'expire-on'.

mode string

Whether the deactivation never expires or expires on a specific date.

comment str

The reason for deactivating the best practice.

expire_on str

When the deactivation expires. Date and time represented in international ISO 8601 format. Relevant only if mode is set to 'expire-on'.

mode str

Whether the deactivation never expires or expires on a specific date.

comment String

The reason for deactivating the best practice.

expireOn String

When the deactivation expires. Date and time represented in international ISO 8601 format. Relevant only if mode is set to 'expire-on'.

mode String

Whether the deactivation never expires or expires on a specific date.

Actions List<string>

Rule actions to match.

CommentCondition ManagementFirewallBestPracticeRuleCommentCondition

Match the rule comment against a text condition.comment_condition blocks are documented below.

Destinations List<string>

Network objects to match in the rule Destination column. Identified by name or UID.

HitCounts List<string>

Hit-count levels to match.

InstallOns List<string>

Security Gateways or Clusters the rule applies to. Identified by name or UID.

NameCondition ManagementFirewallBestPracticeRuleNameCondition

Match the rule name against a text condition.name_condition blocks are documented below.

NegateAction bool

Shows if the action values are negated.

NegateDestination bool

Shows if the destination values are negated.

NegateHitCount bool

Shows if the hit-count values are negated.

NegateInstallOn bool

Shows if the install-on values are negated.

NegateServicesAndApplications bool

Shows if the services and applications values are negated.

NegateSource bool

Shows if the source values are negated.

NegateTime bool

Shows if the time values are negated.

NegateTrack bool

Shows if the track values are negated.

NegateVpn bool

Shows if the vpn values are negated.

ServicesAndApplications List<string>

Services, applications, categories or sites to match. Identified by name or UID.

Sources List<string>

Network objects to match in the rule Source column. Identified by name or UID.

Times List<string>

Time objects the rule applies to. Identified by name or UID.

Tracks List<string>

Tracking methods to match.

Vpns List<string>

VPN communities to match. Identified by name or UID.

Actions []string

Rule actions to match.

CommentCondition ManagementFirewallBestPracticeRuleCommentCondition

Match the rule comment against a text condition.comment_condition blocks are documented below.

Destinations []string

Network objects to match in the rule Destination column. Identified by name or UID.

HitCounts []string

Hit-count levels to match.

InstallOns []string

Security Gateways or Clusters the rule applies to. Identified by name or UID.

NameCondition ManagementFirewallBestPracticeRuleNameCondition

Match the rule name against a text condition.name_condition blocks are documented below.

NegateAction bool

Shows if the action values are negated.

NegateDestination bool

Shows if the destination values are negated.

NegateHitCount bool

Shows if the hit-count values are negated.

NegateInstallOn bool

Shows if the install-on values are negated.

NegateServicesAndApplications bool

Shows if the services and applications values are negated.

NegateSource bool

Shows if the source values are negated.

NegateTime bool

Shows if the time values are negated.

NegateTrack bool

Shows if the track values are negated.

NegateVpn bool

Shows if the vpn values are negated.

ServicesAndApplications []string

Services, applications, categories or sites to match. Identified by name or UID.

Sources []string

Network objects to match in the rule Source column. Identified by name or UID.

Times []string

Time objects the rule applies to. Identified by name or UID.

Tracks []string

Tracking methods to match.

Vpns []string

VPN communities to match. Identified by name or UID.

actions list(string)

Rule actions to match.

comment_condition object

Match the rule comment against a text condition.comment_condition blocks are documented below.

destinations list(string)

Network objects to match in the rule Destination column. Identified by name or UID.

hit_counts list(string)

Hit-count levels to match.

install_ons list(string)

Security Gateways or Clusters the rule applies to. Identified by name or UID.

name_condition object

Match the rule name against a text condition.name_condition blocks are documented below.

negate_action bool

Shows if the action values are negated.

negate_destination bool

Shows if the destination values are negated.

negate_hit_count bool

Shows if the hit-count values are negated.

negate_install_on bool

Shows if the install-on values are negated.

negate_services_and_applications bool

Shows if the services and applications values are negated.

negate_source bool

Shows if the source values are negated.

negate_time bool

Shows if the time values are negated.

negate_track bool

Shows if the track values are negated.

negate_vpn bool

Shows if the vpn values are negated.

services_and_applications list(string)

Services, applications, categories or sites to match. Identified by name or UID.

sources list(string)

Network objects to match in the rule Source column. Identified by name or UID.

times list(string)

Time objects the rule applies to. Identified by name or UID.

tracks list(string)

Tracking methods to match.

vpns list(string)

VPN communities to match. Identified by name or UID.

actions List<String>

Rule actions to match.

commentCondition ManagementFirewallBestPracticeRuleCommentCondition

Match the rule comment against a text condition.comment_condition blocks are documented below.

destinations List<String>

Network objects to match in the rule Destination column. Identified by name or UID.

hitCounts List<String>

Hit-count levels to match.

installOns List<String>

Security Gateways or Clusters the rule applies to. Identified by name or UID.

nameCondition ManagementFirewallBestPracticeRuleNameCondition

Match the rule name against a text condition.name_condition blocks are documented below.

negateAction Boolean

Shows if the action values are negated.

negateDestination Boolean

Shows if the destination values are negated.

negateHitCount Boolean

Shows if the hit-count values are negated.

negateInstallOn Boolean

Shows if the install-on values are negated.

negateServicesAndApplications Boolean

Shows if the services and applications values are negated.

negateSource Boolean

Shows if the source values are negated.

negateTime Boolean

Shows if the time values are negated.

negateTrack Boolean

Shows if the track values are negated.

negateVpn Boolean

Shows if the vpn values are negated.

servicesAndApplications List<String>

Services, applications, categories or sites to match. Identified by name or UID.

sources List<String>

Network objects to match in the rule Source column. Identified by name or UID.

times List<String>

Time objects the rule applies to. Identified by name or UID.

tracks List<String>

Tracking methods to match.

vpns List<String>

VPN communities to match. Identified by name or UID.

actions string[]

Rule actions to match.

commentCondition ManagementFirewallBestPracticeRuleCommentCondition

Match the rule comment against a text condition.comment_condition blocks are documented below.

destinations string[]

Network objects to match in the rule Destination column. Identified by name or UID.

hitCounts string[]

Hit-count levels to match.

installOns string[]

Security Gateways or Clusters the rule applies to. Identified by name or UID.

nameCondition ManagementFirewallBestPracticeRuleNameCondition

Match the rule name against a text condition.name_condition blocks are documented below.

negateAction boolean

Shows if the action values are negated.

negateDestination boolean

Shows if the destination values are negated.

negateHitCount boolean

Shows if the hit-count values are negated.

negateInstallOn boolean

Shows if the install-on values are negated.

negateServicesAndApplications boolean

Shows if the services and applications values are negated.

negateSource boolean

Shows if the source values are negated.

negateTime boolean

Shows if the time values are negated.

negateTrack boolean

Shows if the track values are negated.

negateVpn boolean

Shows if the vpn values are negated.

servicesAndApplications string[]

Services, applications, categories or sites to match. Identified by name or UID.

sources string[]

Network objects to match in the rule Source column. Identified by name or UID.

times string[]

Time objects the rule applies to. Identified by name or UID.

tracks string[]

Tracking methods to match.

vpns string[]

VPN communities to match. Identified by name or UID.

actions Sequence[str]

Rule actions to match.

comment_condition ManagementFirewallBestPracticeRuleCommentCondition

Match the rule comment against a text condition.comment_condition blocks are documented below.

destinations Sequence[str]

Network objects to match in the rule Destination column. Identified by name or UID.

hit_counts Sequence[str]

Hit-count levels to match.

install_ons Sequence[str]

Security Gateways or Clusters the rule applies to. Identified by name or UID.

name_condition ManagementFirewallBestPracticeRuleNameCondition

Match the rule name against a text condition.name_condition blocks are documented below.

negate_action bool

Shows if the action values are negated.

negate_destination bool

Shows if the destination values are negated.

negate_hit_count bool

Shows if the hit-count values are negated.

negate_install_on bool

Shows if the install-on values are negated.

negate_services_and_applications bool

Shows if the services and applications values are negated.

negate_source bool

Shows if the source values are negated.

negate_time bool

Shows if the time values are negated.

negate_track bool

Shows if the track values are negated.

negate_vpn bool

Shows if the vpn values are negated.

services_and_applications Sequence[str]

Services, applications, categories or sites to match. Identified by name or UID.

sources Sequence[str]

Network objects to match in the rule Source column. Identified by name or UID.

times Sequence[str]

Time objects the rule applies to. Identified by name or UID.

tracks Sequence[str]

Tracking methods to match.

vpns Sequence[str]

VPN communities to match. Identified by name or UID.

actions List<String>

Rule actions to match.

commentCondition Property Map

Match the rule comment against a text condition.comment_condition blocks are documented below.

destinations List<String>

Network objects to match in the rule Destination column. Identified by name or UID.

hitCounts List<String>

Hit-count levels to match.

installOns List<String>

Security Gateways or Clusters the rule applies to. Identified by name or UID.

nameCondition Property Map

Match the rule name against a text condition.name_condition blocks are documented below.

negateAction Boolean

Shows if the action values are negated.

negateDestination Boolean

Shows if the destination values are negated.

negateHitCount Boolean

Shows if the hit-count values are negated.

negateInstallOn Boolean

Shows if the install-on values are negated.

negateServicesAndApplications Boolean

Shows if the services and applications values are negated.

negateSource Boolean

Shows if the source values are negated.

negateTime Boolean

Shows if the time values are negated.

negateTrack Boolean

Shows if the track values are negated.

negateVpn Boolean

Shows if the vpn values are negated.

servicesAndApplications List<String>

Services, applications, categories or sites to match. Identified by name or UID.

sources List<String>

Network objects to match in the rule Source column. Identified by name or UID.

times List<String>

Time objects the rule applies to. Identified by name or UID.

tracks List<String>

Tracking methods to match.

vpns List<String>

VPN communities to match. Identified by name or UID.

ConditionType string

The condition type.

Value string

The condition match string. Relevant only when the value of the 'condition-type' parameter is: 'Equals', 'Starts with', 'Ends with', 'Contains'.

ConditionType string

The condition type.

Value string

The condition match string. Relevant only when the value of the 'condition-type' parameter is: 'Equals', 'Starts with', 'Ends with', 'Contains'.

condition_type string

The condition type.

value string

The condition match string. Relevant only when the value of the 'condition-type' parameter is: 'Equals', 'Starts with', 'Ends with', 'Contains'.

conditionType String

The condition type.

value String

The condition match string. Relevant only when the value of the 'condition-type' parameter is: 'Equals', 'Starts with', 'Ends with', 'Contains'.

conditionType string

The condition type.

value string

The condition match string. Relevant only when the value of the 'condition-type' parameter is: 'Equals', 'Starts with', 'Ends with', 'Contains'.

condition_type str

The condition type.

value str

The condition match string. Relevant only when the value of the 'condition-type' parameter is: 'Equals', 'Starts with', 'Ends with', 'Contains'.

conditionType String

The condition type.

value String

The condition match string. Relevant only when the value of the 'condition-type' parameter is: 'Equals', 'Starts with', 'Ends with', 'Contains'.

ConditionType string

The condition type.

Value string

The condition match string. Relevant only when the value of the 'condition-type' parameter is: 'Equals', 'Starts with', 'Ends with', 'Contains'.

ConditionType string

The condition type.

Value string

The condition match string. Relevant only when the value of the 'condition-type' parameter is: 'Equals', 'Starts with', 'Ends with', 'Contains'.

condition_type string

The condition type.

value string

The condition match string. Relevant only when the value of the 'condition-type' parameter is: 'Equals', 'Starts with', 'Ends with', 'Contains'.

conditionType String

The condition type.

value String

The condition match string. Relevant only when the value of the 'condition-type' parameter is: 'Equals', 'Starts with', 'Ends with', 'Contains'.

conditionType string

The condition type.

value string

The condition match string. Relevant only when the value of the 'condition-type' parameter is: 'Equals', 'Starts with', 'Ends with', 'Contains'.

condition_type str

The condition type.

value str

The condition match string. Relevant only when the value of the 'condition-type' parameter is: 'Equals', 'Starts with', 'Ends with', 'Contains'.

conditionType String

The condition type.

value String

The condition match string. Relevant only when the value of the 'condition-type' parameter is: 'Equals', 'Starts with', 'Ends with', 'Contains'.