1. Packages
  2. Checkpoint Provider
  3. API Docs
  4. ManagementServiceTcp
checkpoint 2.9.0 published on Monday, Apr 14, 2025 by checkpointsw

checkpoint.ManagementServiceTcp

Explore with Pulumi AI

checkpoint logo
checkpoint 2.9.0 published on Monday, Apr 14, 2025 by checkpointsw

    This resource allows you to add/update/delete Check Point Service Tcp.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
    import * as checkpoint from "@pulumi/checkpoint";
    
    const example = new checkpoint.ManagementServiceTcp("example", {
        aggressiveAging: {
            enable: "true",
            timeout: "360",
            use_default_timeout: "false",
        },
        keepConnectionsOpenAfterPolicyInstallation: false,
        matchForAny: true,
        port: "5669",
        sessionTimeout: 0,
        syncConnectionsOnCluster: true,
    });
    
    import pulumi
    import pulumi_checkpoint as checkpoint
    
    example = checkpoint.ManagementServiceTcp("example",
        aggressive_aging={
            "enable": "true",
            "timeout": "360",
            "use_default_timeout": "false",
        },
        keep_connections_open_after_policy_installation=False,
        match_for_any=True,
        port="5669",
        session_timeout=0,
        sync_connections_on_cluster=True)
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-terraform-provider/sdks/go/checkpoint/v2/checkpoint"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		_, err := checkpoint.NewManagementServiceTcp(ctx, "example", &checkpoint.ManagementServiceTcpArgs{
    			AggressiveAging: pulumi.StringMap{
    				"enable":              pulumi.String("true"),
    				"timeout":             pulumi.String("360"),
    				"use_default_timeout": pulumi.String("false"),
    			},
    			KeepConnectionsOpenAfterPolicyInstallation: pulumi.Bool(false),
    			MatchForAny:              pulumi.Bool(true),
    			Port:                     pulumi.String("5669"),
    			SessionTimeout:           pulumi.Float64(0),
    			SyncConnectionsOnCluster: pulumi.Bool(true),
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Checkpoint = Pulumi.Checkpoint;
    
    return await Deployment.RunAsync(() => 
    {
        var example = new Checkpoint.ManagementServiceTcp("example", new()
        {
            AggressiveAging = 
            {
                { "enable", "true" },
                { "timeout", "360" },
                { "use_default_timeout", "false" },
            },
            KeepConnectionsOpenAfterPolicyInstallation = false,
            MatchForAny = true,
            Port = "5669",
            SessionTimeout = 0,
            SyncConnectionsOnCluster = true,
        });
    
    });
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.checkpoint.ManagementServiceTcp;
    import com.pulumi.checkpoint.ManagementServiceTcpArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var example = new ManagementServiceTcp("example", ManagementServiceTcpArgs.builder()
                .aggressiveAging(Map.ofEntries(
                    Map.entry("enable", true),
                    Map.entry("timeout", 360),
                    Map.entry("use_default_timeout", false)
                ))
                .keepConnectionsOpenAfterPolicyInstallation(false)
                .matchForAny(true)
                .port(5669)
                .sessionTimeout(0)
                .syncConnectionsOnCluster(true)
                .build());
    
        }
    }
    
    resources:
      example:
        type: checkpoint:ManagementServiceTcp
        properties:
          aggressiveAging:
            enable: true
            timeout: 360
            use_default_timeout: false
          keepConnectionsOpenAfterPolicyInstallation: false
          matchForAny: true
          port: 5669
          sessionTimeout: 0
          syncConnectionsOnCluster: true
    

    Create ManagementServiceTcp Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new ManagementServiceTcp(name: string, args?: ManagementServiceTcpArgs, opts?: CustomResourceOptions);
    @overload
    def ManagementServiceTcp(resource_name: str,
                             args: Optional[ManagementServiceTcpArgs] = None,
                             opts: Optional[ResourceOptions] = None)
    
    @overload
    def ManagementServiceTcp(resource_name: str,
                             opts: Optional[ResourceOptions] = None,
                             aggressive_aging: Optional[Mapping[str, str]] = None,
                             color: Optional[str] = None,
                             comments: Optional[str] = None,
                             ignore_errors: Optional[bool] = None,
                             ignore_warnings: Optional[bool] = None,
                             keep_connections_open_after_policy_installation: Optional[bool] = None,
                             management_service_tcp_id: Optional[str] = None,
                             match_by_protocol_signature: Optional[bool] = None,
                             match_for_any: Optional[bool] = None,
                             name: Optional[str] = None,
                             override_default_settings: Optional[bool] = None,
                             port: Optional[str] = None,
                             protocol: Optional[str] = None,
                             session_timeout: Optional[float] = None,
                             source_port: Optional[str] = None,
                             sync_connections_on_cluster: Optional[bool] = None,
                             tags: Optional[Sequence[str]] = None,
                             use_default_session_timeout: Optional[bool] = None)
    func NewManagementServiceTcp(ctx *Context, name string, args *ManagementServiceTcpArgs, opts ...ResourceOption) (*ManagementServiceTcp, error)
    public ManagementServiceTcp(string name, ManagementServiceTcpArgs? args = null, CustomResourceOptions? opts = null)
    public ManagementServiceTcp(String name, ManagementServiceTcpArgs args)
    public ManagementServiceTcp(String name, ManagementServiceTcpArgs args, CustomResourceOptions options)
    
    type: checkpoint:ManagementServiceTcp
    properties: # The arguments to resource properties.
    options: # Bag of options to control resource's behavior.
    
    

    Parameters

    name string
    The unique name of the resource.
    args ManagementServiceTcpArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args ManagementServiceTcpArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args ManagementServiceTcpArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args ManagementServiceTcpArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args ManagementServiceTcpArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var managementServiceTcpResource = new Checkpoint.ManagementServiceTcp("managementServiceTcpResource", new()
    {
        AggressiveAging = 
        {
            { "string", "string" },
        },
        Color = "string",
        Comments = "string",
        IgnoreErrors = false,
        IgnoreWarnings = false,
        KeepConnectionsOpenAfterPolicyInstallation = false,
        ManagementServiceTcpId = "string",
        MatchByProtocolSignature = false,
        MatchForAny = false,
        Name = "string",
        OverrideDefaultSettings = false,
        Port = "string",
        Protocol = "string",
        SessionTimeout = 0,
        SourcePort = "string",
        SyncConnectionsOnCluster = false,
        Tags = new[]
        {
            "string",
        },
        UseDefaultSessionTimeout = false,
    });
    
    example, err := checkpoint.NewManagementServiceTcp(ctx, "managementServiceTcpResource", &checkpoint.ManagementServiceTcpArgs{
    	AggressiveAging: pulumi.StringMap{
    		"string": pulumi.String("string"),
    	},
    	Color:          pulumi.String("string"),
    	Comments:       pulumi.String("string"),
    	IgnoreErrors:   pulumi.Bool(false),
    	IgnoreWarnings: pulumi.Bool(false),
    	KeepConnectionsOpenAfterPolicyInstallation: pulumi.Bool(false),
    	ManagementServiceTcpId:                     pulumi.String("string"),
    	MatchByProtocolSignature:                   pulumi.Bool(false),
    	MatchForAny:                                pulumi.Bool(false),
    	Name:                                       pulumi.String("string"),
    	OverrideDefaultSettings:                    pulumi.Bool(false),
    	Port:                                       pulumi.String("string"),
    	Protocol:                                   pulumi.String("string"),
    	SessionTimeout:                             pulumi.Float64(0),
    	SourcePort:                                 pulumi.String("string"),
    	SyncConnectionsOnCluster:                   pulumi.Bool(false),
    	Tags: pulumi.StringArray{
    		pulumi.String("string"),
    	},
    	UseDefaultSessionTimeout: pulumi.Bool(false),
    })
    
    var managementServiceTcpResource = new ManagementServiceTcp("managementServiceTcpResource", ManagementServiceTcpArgs.builder()
        .aggressiveAging(Map.of("string", "string"))
        .color("string")
        .comments("string")
        .ignoreErrors(false)
        .ignoreWarnings(false)
        .keepConnectionsOpenAfterPolicyInstallation(false)
        .managementServiceTcpId("string")
        .matchByProtocolSignature(false)
        .matchForAny(false)
        .name("string")
        .overrideDefaultSettings(false)
        .port("string")
        .protocol("string")
        .sessionTimeout(0)
        .sourcePort("string")
        .syncConnectionsOnCluster(false)
        .tags("string")
        .useDefaultSessionTimeout(false)
        .build());
    
    management_service_tcp_resource = checkpoint.ManagementServiceTcp("managementServiceTcpResource",
        aggressive_aging={
            "string": "string",
        },
        color="string",
        comments="string",
        ignore_errors=False,
        ignore_warnings=False,
        keep_connections_open_after_policy_installation=False,
        management_service_tcp_id="string",
        match_by_protocol_signature=False,
        match_for_any=False,
        name="string",
        override_default_settings=False,
        port="string",
        protocol="string",
        session_timeout=0,
        source_port="string",
        sync_connections_on_cluster=False,
        tags=["string"],
        use_default_session_timeout=False)
    
    const managementServiceTcpResource = new checkpoint.ManagementServiceTcp("managementServiceTcpResource", {
        aggressiveAging: {
            string: "string",
        },
        color: "string",
        comments: "string",
        ignoreErrors: false,
        ignoreWarnings: false,
        keepConnectionsOpenAfterPolicyInstallation: false,
        managementServiceTcpId: "string",
        matchByProtocolSignature: false,
        matchForAny: false,
        name: "string",
        overrideDefaultSettings: false,
        port: "string",
        protocol: "string",
        sessionTimeout: 0,
        sourcePort: "string",
        syncConnectionsOnCluster: false,
        tags: ["string"],
        useDefaultSessionTimeout: false,
    });
    
    type: checkpoint:ManagementServiceTcp
    properties:
        aggressiveAging:
            string: string
        color: string
        comments: string
        ignoreErrors: false
        ignoreWarnings: false
        keepConnectionsOpenAfterPolicyInstallation: false
        managementServiceTcpId: string
        matchByProtocolSignature: false
        matchForAny: false
        name: string
        overrideDefaultSettings: false
        port: string
        protocol: string
        sessionTimeout: 0
        sourcePort: string
        syncConnectionsOnCluster: false
        tags:
            - string
        useDefaultSessionTimeout: false
    

    ManagementServiceTcp Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The ManagementServiceTcp resource accepts the following input properties:

    AggressiveAging Dictionary<string, string>
    Sets short (aggressive) timeouts for idle connections. Aggressive Aging blocks are documented below.
    Color string
    Color of the object. Should be one of existing colors.
    Comments string
    Comments string.
    IgnoreErrors bool
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    IgnoreWarnings bool
    Apply changes ignoring warnings.
    KeepConnectionsOpenAfterPolicyInstallation bool
    Keep connections open after policy has been installed even if they are not allowed under the new policy. This overrides the settings in the Connection Persistence page. If you change this property, the change will not affect open connections, but only future connections.
    ManagementServiceTcpId string
    MatchByProtocolSignature bool
    A value of true enables matching by the selected protocol's signature - the signature identifies the protocol as genuine. Select this option to limit the port to the specified protocol. If the selected protocol does not support matching by signature, this field cannot be set to true.
    MatchForAny bool
    Indicates whether this service is used when 'Any' is set as the rule's service and there are several service objects with the same source port and protocol.
    Name string
    Object name. Should be unique in the domain.
    OverrideDefaultSettings bool
    Indicates whether this service is a Data Domain service which has been overridden.
    Port string
    The number of the port used to provide this service. To specify a port range, place a hyphen between the lowest and highest port numbers, for example 44-55.
    Protocol string
    Select the protocol type associated with the service, and by implication, the management server (if any) that enforces Content Security and Authentication for the service. Selecting a Protocol Type invokes the specific protocol handlers for each protocol type, thus enabling higher level of security by parsing the protocol, and higher level of connectivity by tracking dynamic actions (such as opening of ports).
    SessionTimeout double
    Time (in seconds) before the session times out.
    SourcePort string
    Port number for the client side service. If specified, only those Source port Numbers will be Accepted, Dropped, or Rejected during packet inspection. Otherwise, the source port is not inspected.
    SyncConnectionsOnCluster bool
    Enables state-synchronized High Availability or Load Sharing on a ClusterXL or OPSEC-certified cluster.
    Tags List<string>
    Collection of tag identifiers.
    UseDefaultSessionTimeout bool
    Use default virtual session timeout.
    AggressiveAging map[string]string
    Sets short (aggressive) timeouts for idle connections. Aggressive Aging blocks are documented below.
    Color string
    Color of the object. Should be one of existing colors.
    Comments string
    Comments string.
    IgnoreErrors bool
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    IgnoreWarnings bool
    Apply changes ignoring warnings.
    KeepConnectionsOpenAfterPolicyInstallation bool
    Keep connections open after policy has been installed even if they are not allowed under the new policy. This overrides the settings in the Connection Persistence page. If you change this property, the change will not affect open connections, but only future connections.
    ManagementServiceTcpId string
    MatchByProtocolSignature bool
    A value of true enables matching by the selected protocol's signature - the signature identifies the protocol as genuine. Select this option to limit the port to the specified protocol. If the selected protocol does not support matching by signature, this field cannot be set to true.
    MatchForAny bool
    Indicates whether this service is used when 'Any' is set as the rule's service and there are several service objects with the same source port and protocol.
    Name string
    Object name. Should be unique in the domain.
    OverrideDefaultSettings bool
    Indicates whether this service is a Data Domain service which has been overridden.
    Port string
    The number of the port used to provide this service. To specify a port range, place a hyphen between the lowest and highest port numbers, for example 44-55.
    Protocol string
    Select the protocol type associated with the service, and by implication, the management server (if any) that enforces Content Security and Authentication for the service. Selecting a Protocol Type invokes the specific protocol handlers for each protocol type, thus enabling higher level of security by parsing the protocol, and higher level of connectivity by tracking dynamic actions (such as opening of ports).
    SessionTimeout float64
    Time (in seconds) before the session times out.
    SourcePort string
    Port number for the client side service. If specified, only those Source port Numbers will be Accepted, Dropped, or Rejected during packet inspection. Otherwise, the source port is not inspected.
    SyncConnectionsOnCluster bool
    Enables state-synchronized High Availability or Load Sharing on a ClusterXL or OPSEC-certified cluster.
    Tags []string
    Collection of tag identifiers.
    UseDefaultSessionTimeout bool
    Use default virtual session timeout.
    aggressiveAging Map<String,String>
    Sets short (aggressive) timeouts for idle connections. Aggressive Aging blocks are documented below.
    color String
    Color of the object. Should be one of existing colors.
    comments String
    Comments string.
    ignoreErrors Boolean
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    ignoreWarnings Boolean
    Apply changes ignoring warnings.
    keepConnectionsOpenAfterPolicyInstallation Boolean
    Keep connections open after policy has been installed even if they are not allowed under the new policy. This overrides the settings in the Connection Persistence page. If you change this property, the change will not affect open connections, but only future connections.
    managementServiceTcpId String
    matchByProtocolSignature Boolean
    A value of true enables matching by the selected protocol's signature - the signature identifies the protocol as genuine. Select this option to limit the port to the specified protocol. If the selected protocol does not support matching by signature, this field cannot be set to true.
    matchForAny Boolean
    Indicates whether this service is used when 'Any' is set as the rule's service and there are several service objects with the same source port and protocol.
    name String
    Object name. Should be unique in the domain.
    overrideDefaultSettings Boolean
    Indicates whether this service is a Data Domain service which has been overridden.
    port String
    The number of the port used to provide this service. To specify a port range, place a hyphen between the lowest and highest port numbers, for example 44-55.
    protocol String
    Select the protocol type associated with the service, and by implication, the management server (if any) that enforces Content Security and Authentication for the service. Selecting a Protocol Type invokes the specific protocol handlers for each protocol type, thus enabling higher level of security by parsing the protocol, and higher level of connectivity by tracking dynamic actions (such as opening of ports).
    sessionTimeout Double
    Time (in seconds) before the session times out.
    sourcePort String
    Port number for the client side service. If specified, only those Source port Numbers will be Accepted, Dropped, or Rejected during packet inspection. Otherwise, the source port is not inspected.
    syncConnectionsOnCluster Boolean
    Enables state-synchronized High Availability or Load Sharing on a ClusterXL or OPSEC-certified cluster.
    tags List<String>
    Collection of tag identifiers.
    useDefaultSessionTimeout Boolean
    Use default virtual session timeout.
    aggressiveAging {[key: string]: string}
    Sets short (aggressive) timeouts for idle connections. Aggressive Aging blocks are documented below.
    color string
    Color of the object. Should be one of existing colors.
    comments string
    Comments string.
    ignoreErrors boolean
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    ignoreWarnings boolean
    Apply changes ignoring warnings.
    keepConnectionsOpenAfterPolicyInstallation boolean
    Keep connections open after policy has been installed even if they are not allowed under the new policy. This overrides the settings in the Connection Persistence page. If you change this property, the change will not affect open connections, but only future connections.
    managementServiceTcpId string
    matchByProtocolSignature boolean
    A value of true enables matching by the selected protocol's signature - the signature identifies the protocol as genuine. Select this option to limit the port to the specified protocol. If the selected protocol does not support matching by signature, this field cannot be set to true.
    matchForAny boolean
    Indicates whether this service is used when 'Any' is set as the rule's service and there are several service objects with the same source port and protocol.
    name string
    Object name. Should be unique in the domain.
    overrideDefaultSettings boolean
    Indicates whether this service is a Data Domain service which has been overridden.
    port string
    The number of the port used to provide this service. To specify a port range, place a hyphen between the lowest and highest port numbers, for example 44-55.
    protocol string
    Select the protocol type associated with the service, and by implication, the management server (if any) that enforces Content Security and Authentication for the service. Selecting a Protocol Type invokes the specific protocol handlers for each protocol type, thus enabling higher level of security by parsing the protocol, and higher level of connectivity by tracking dynamic actions (such as opening of ports).
    sessionTimeout number
    Time (in seconds) before the session times out.
    sourcePort string
    Port number for the client side service. If specified, only those Source port Numbers will be Accepted, Dropped, or Rejected during packet inspection. Otherwise, the source port is not inspected.
    syncConnectionsOnCluster boolean
    Enables state-synchronized High Availability or Load Sharing on a ClusterXL or OPSEC-certified cluster.
    tags string[]
    Collection of tag identifiers.
    useDefaultSessionTimeout boolean
    Use default virtual session timeout.
    aggressive_aging Mapping[str, str]
    Sets short (aggressive) timeouts for idle connections. Aggressive Aging blocks are documented below.
    color str
    Color of the object. Should be one of existing colors.
    comments str
    Comments string.
    ignore_errors bool
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    ignore_warnings bool
    Apply changes ignoring warnings.
    keep_connections_open_after_policy_installation bool
    Keep connections open after policy has been installed even if they are not allowed under the new policy. This overrides the settings in the Connection Persistence page. If you change this property, the change will not affect open connections, but only future connections.
    management_service_tcp_id str
    match_by_protocol_signature bool
    A value of true enables matching by the selected protocol's signature - the signature identifies the protocol as genuine. Select this option to limit the port to the specified protocol. If the selected protocol does not support matching by signature, this field cannot be set to true.
    match_for_any bool
    Indicates whether this service is used when 'Any' is set as the rule's service and there are several service objects with the same source port and protocol.
    name str
    Object name. Should be unique in the domain.
    override_default_settings bool
    Indicates whether this service is a Data Domain service which has been overridden.
    port str
    The number of the port used to provide this service. To specify a port range, place a hyphen between the lowest and highest port numbers, for example 44-55.
    protocol str
    Select the protocol type associated with the service, and by implication, the management server (if any) that enforces Content Security and Authentication for the service. Selecting a Protocol Type invokes the specific protocol handlers for each protocol type, thus enabling higher level of security by parsing the protocol, and higher level of connectivity by tracking dynamic actions (such as opening of ports).
    session_timeout float
    Time (in seconds) before the session times out.
    source_port str
    Port number for the client side service. If specified, only those Source port Numbers will be Accepted, Dropped, or Rejected during packet inspection. Otherwise, the source port is not inspected.
    sync_connections_on_cluster bool
    Enables state-synchronized High Availability or Load Sharing on a ClusterXL or OPSEC-certified cluster.
    tags Sequence[str]
    Collection of tag identifiers.
    use_default_session_timeout bool
    Use default virtual session timeout.
    aggressiveAging Map<String>
    Sets short (aggressive) timeouts for idle connections. Aggressive Aging blocks are documented below.
    color String
    Color of the object. Should be one of existing colors.
    comments String
    Comments string.
    ignoreErrors Boolean
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    ignoreWarnings Boolean
    Apply changes ignoring warnings.
    keepConnectionsOpenAfterPolicyInstallation Boolean
    Keep connections open after policy has been installed even if they are not allowed under the new policy. This overrides the settings in the Connection Persistence page. If you change this property, the change will not affect open connections, but only future connections.
    managementServiceTcpId String
    matchByProtocolSignature Boolean
    A value of true enables matching by the selected protocol's signature - the signature identifies the protocol as genuine. Select this option to limit the port to the specified protocol. If the selected protocol does not support matching by signature, this field cannot be set to true.
    matchForAny Boolean
    Indicates whether this service is used when 'Any' is set as the rule's service and there are several service objects with the same source port and protocol.
    name String
    Object name. Should be unique in the domain.
    overrideDefaultSettings Boolean
    Indicates whether this service is a Data Domain service which has been overridden.
    port String
    The number of the port used to provide this service. To specify a port range, place a hyphen between the lowest and highest port numbers, for example 44-55.
    protocol String
    Select the protocol type associated with the service, and by implication, the management server (if any) that enforces Content Security and Authentication for the service. Selecting a Protocol Type invokes the specific protocol handlers for each protocol type, thus enabling higher level of security by parsing the protocol, and higher level of connectivity by tracking dynamic actions (such as opening of ports).
    sessionTimeout Number
    Time (in seconds) before the session times out.
    sourcePort String
    Port number for the client side service. If specified, only those Source port Numbers will be Accepted, Dropped, or Rejected during packet inspection. Otherwise, the source port is not inspected.
    syncConnectionsOnCluster Boolean
    Enables state-synchronized High Availability or Load Sharing on a ClusterXL or OPSEC-certified cluster.
    tags List<String>
    Collection of tag identifiers.
    useDefaultSessionTimeout Boolean
    Use default virtual session timeout.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the ManagementServiceTcp resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing ManagementServiceTcp Resource

    Get an existing ManagementServiceTcp resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: ManagementServiceTcpState, opts?: CustomResourceOptions): ManagementServiceTcp
    @staticmethod
    def get(resource_name: str,
            id: str,
            opts: Optional[ResourceOptions] = None,
            aggressive_aging: Optional[Mapping[str, str]] = None,
            color: Optional[str] = None,
            comments: Optional[str] = None,
            ignore_errors: Optional[bool] = None,
            ignore_warnings: Optional[bool] = None,
            keep_connections_open_after_policy_installation: Optional[bool] = None,
            management_service_tcp_id: Optional[str] = None,
            match_by_protocol_signature: Optional[bool] = None,
            match_for_any: Optional[bool] = None,
            name: Optional[str] = None,
            override_default_settings: Optional[bool] = None,
            port: Optional[str] = None,
            protocol: Optional[str] = None,
            session_timeout: Optional[float] = None,
            source_port: Optional[str] = None,
            sync_connections_on_cluster: Optional[bool] = None,
            tags: Optional[Sequence[str]] = None,
            use_default_session_timeout: Optional[bool] = None) -> ManagementServiceTcp
    func GetManagementServiceTcp(ctx *Context, name string, id IDInput, state *ManagementServiceTcpState, opts ...ResourceOption) (*ManagementServiceTcp, error)
    public static ManagementServiceTcp Get(string name, Input<string> id, ManagementServiceTcpState? state, CustomResourceOptions? opts = null)
    public static ManagementServiceTcp get(String name, Output<String> id, ManagementServiceTcpState state, CustomResourceOptions options)
    resources:  _:    type: checkpoint:ManagementServiceTcp    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AggressiveAging Dictionary<string, string>
    Sets short (aggressive) timeouts for idle connections. Aggressive Aging blocks are documented below.
    Color string
    Color of the object. Should be one of existing colors.
    Comments string
    Comments string.
    IgnoreErrors bool
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    IgnoreWarnings bool
    Apply changes ignoring warnings.
    KeepConnectionsOpenAfterPolicyInstallation bool
    Keep connections open after policy has been installed even if they are not allowed under the new policy. This overrides the settings in the Connection Persistence page. If you change this property, the change will not affect open connections, but only future connections.
    ManagementServiceTcpId string
    MatchByProtocolSignature bool
    A value of true enables matching by the selected protocol's signature - the signature identifies the protocol as genuine. Select this option to limit the port to the specified protocol. If the selected protocol does not support matching by signature, this field cannot be set to true.
    MatchForAny bool
    Indicates whether this service is used when 'Any' is set as the rule's service and there are several service objects with the same source port and protocol.
    Name string
    Object name. Should be unique in the domain.
    OverrideDefaultSettings bool
    Indicates whether this service is a Data Domain service which has been overridden.
    Port string
    The number of the port used to provide this service. To specify a port range, place a hyphen between the lowest and highest port numbers, for example 44-55.
    Protocol string
    Select the protocol type associated with the service, and by implication, the management server (if any) that enforces Content Security and Authentication for the service. Selecting a Protocol Type invokes the specific protocol handlers for each protocol type, thus enabling higher level of security by parsing the protocol, and higher level of connectivity by tracking dynamic actions (such as opening of ports).
    SessionTimeout double
    Time (in seconds) before the session times out.
    SourcePort string
    Port number for the client side service. If specified, only those Source port Numbers will be Accepted, Dropped, or Rejected during packet inspection. Otherwise, the source port is not inspected.
    SyncConnectionsOnCluster bool
    Enables state-synchronized High Availability or Load Sharing on a ClusterXL or OPSEC-certified cluster.
    Tags List<string>
    Collection of tag identifiers.
    UseDefaultSessionTimeout bool
    Use default virtual session timeout.
    AggressiveAging map[string]string
    Sets short (aggressive) timeouts for idle connections. Aggressive Aging blocks are documented below.
    Color string
    Color of the object. Should be one of existing colors.
    Comments string
    Comments string.
    IgnoreErrors bool
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    IgnoreWarnings bool
    Apply changes ignoring warnings.
    KeepConnectionsOpenAfterPolicyInstallation bool
    Keep connections open after policy has been installed even if they are not allowed under the new policy. This overrides the settings in the Connection Persistence page. If you change this property, the change will not affect open connections, but only future connections.
    ManagementServiceTcpId string
    MatchByProtocolSignature bool
    A value of true enables matching by the selected protocol's signature - the signature identifies the protocol as genuine. Select this option to limit the port to the specified protocol. If the selected protocol does not support matching by signature, this field cannot be set to true.
    MatchForAny bool
    Indicates whether this service is used when 'Any' is set as the rule's service and there are several service objects with the same source port and protocol.
    Name string
    Object name. Should be unique in the domain.
    OverrideDefaultSettings bool
    Indicates whether this service is a Data Domain service which has been overridden.
    Port string
    The number of the port used to provide this service. To specify a port range, place a hyphen between the lowest and highest port numbers, for example 44-55.
    Protocol string
    Select the protocol type associated with the service, and by implication, the management server (if any) that enforces Content Security and Authentication for the service. Selecting a Protocol Type invokes the specific protocol handlers for each protocol type, thus enabling higher level of security by parsing the protocol, and higher level of connectivity by tracking dynamic actions (such as opening of ports).
    SessionTimeout float64
    Time (in seconds) before the session times out.
    SourcePort string
    Port number for the client side service. If specified, only those Source port Numbers will be Accepted, Dropped, or Rejected during packet inspection. Otherwise, the source port is not inspected.
    SyncConnectionsOnCluster bool
    Enables state-synchronized High Availability or Load Sharing on a ClusterXL or OPSEC-certified cluster.
    Tags []string
    Collection of tag identifiers.
    UseDefaultSessionTimeout bool
    Use default virtual session timeout.
    aggressiveAging Map<String,String>
    Sets short (aggressive) timeouts for idle connections. Aggressive Aging blocks are documented below.
    color String
    Color of the object. Should be one of existing colors.
    comments String
    Comments string.
    ignoreErrors Boolean
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    ignoreWarnings Boolean
    Apply changes ignoring warnings.
    keepConnectionsOpenAfterPolicyInstallation Boolean
    Keep connections open after policy has been installed even if they are not allowed under the new policy. This overrides the settings in the Connection Persistence page. If you change this property, the change will not affect open connections, but only future connections.
    managementServiceTcpId String
    matchByProtocolSignature Boolean
    A value of true enables matching by the selected protocol's signature - the signature identifies the protocol as genuine. Select this option to limit the port to the specified protocol. If the selected protocol does not support matching by signature, this field cannot be set to true.
    matchForAny Boolean
    Indicates whether this service is used when 'Any' is set as the rule's service and there are several service objects with the same source port and protocol.
    name String
    Object name. Should be unique in the domain.
    overrideDefaultSettings Boolean
    Indicates whether this service is a Data Domain service which has been overridden.
    port String
    The number of the port used to provide this service. To specify a port range, place a hyphen between the lowest and highest port numbers, for example 44-55.
    protocol String
    Select the protocol type associated with the service, and by implication, the management server (if any) that enforces Content Security and Authentication for the service. Selecting a Protocol Type invokes the specific protocol handlers for each protocol type, thus enabling higher level of security by parsing the protocol, and higher level of connectivity by tracking dynamic actions (such as opening of ports).
    sessionTimeout Double
    Time (in seconds) before the session times out.
    sourcePort String
    Port number for the client side service. If specified, only those Source port Numbers will be Accepted, Dropped, or Rejected during packet inspection. Otherwise, the source port is not inspected.
    syncConnectionsOnCluster Boolean
    Enables state-synchronized High Availability or Load Sharing on a ClusterXL or OPSEC-certified cluster.
    tags List<String>
    Collection of tag identifiers.
    useDefaultSessionTimeout Boolean
    Use default virtual session timeout.
    aggressiveAging {[key: string]: string}
    Sets short (aggressive) timeouts for idle connections. Aggressive Aging blocks are documented below.
    color string
    Color of the object. Should be one of existing colors.
    comments string
    Comments string.
    ignoreErrors boolean
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    ignoreWarnings boolean
    Apply changes ignoring warnings.
    keepConnectionsOpenAfterPolicyInstallation boolean
    Keep connections open after policy has been installed even if they are not allowed under the new policy. This overrides the settings in the Connection Persistence page. If you change this property, the change will not affect open connections, but only future connections.
    managementServiceTcpId string
    matchByProtocolSignature boolean
    A value of true enables matching by the selected protocol's signature - the signature identifies the protocol as genuine. Select this option to limit the port to the specified protocol. If the selected protocol does not support matching by signature, this field cannot be set to true.
    matchForAny boolean
    Indicates whether this service is used when 'Any' is set as the rule's service and there are several service objects with the same source port and protocol.
    name string
    Object name. Should be unique in the domain.
    overrideDefaultSettings boolean
    Indicates whether this service is a Data Domain service which has been overridden.
    port string
    The number of the port used to provide this service. To specify a port range, place a hyphen between the lowest and highest port numbers, for example 44-55.
    protocol string
    Select the protocol type associated with the service, and by implication, the management server (if any) that enforces Content Security and Authentication for the service. Selecting a Protocol Type invokes the specific protocol handlers for each protocol type, thus enabling higher level of security by parsing the protocol, and higher level of connectivity by tracking dynamic actions (such as opening of ports).
    sessionTimeout number
    Time (in seconds) before the session times out.
    sourcePort string
    Port number for the client side service. If specified, only those Source port Numbers will be Accepted, Dropped, or Rejected during packet inspection. Otherwise, the source port is not inspected.
    syncConnectionsOnCluster boolean
    Enables state-synchronized High Availability or Load Sharing on a ClusterXL or OPSEC-certified cluster.
    tags string[]
    Collection of tag identifiers.
    useDefaultSessionTimeout boolean
    Use default virtual session timeout.
    aggressive_aging Mapping[str, str]
    Sets short (aggressive) timeouts for idle connections. Aggressive Aging blocks are documented below.
    color str
    Color of the object. Should be one of existing colors.
    comments str
    Comments string.
    ignore_errors bool
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    ignore_warnings bool
    Apply changes ignoring warnings.
    keep_connections_open_after_policy_installation bool
    Keep connections open after policy has been installed even if they are not allowed under the new policy. This overrides the settings in the Connection Persistence page. If you change this property, the change will not affect open connections, but only future connections.
    management_service_tcp_id str
    match_by_protocol_signature bool
    A value of true enables matching by the selected protocol's signature - the signature identifies the protocol as genuine. Select this option to limit the port to the specified protocol. If the selected protocol does not support matching by signature, this field cannot be set to true.
    match_for_any bool
    Indicates whether this service is used when 'Any' is set as the rule's service and there are several service objects with the same source port and protocol.
    name str
    Object name. Should be unique in the domain.
    override_default_settings bool
    Indicates whether this service is a Data Domain service which has been overridden.
    port str
    The number of the port used to provide this service. To specify a port range, place a hyphen between the lowest and highest port numbers, for example 44-55.
    protocol str
    Select the protocol type associated with the service, and by implication, the management server (if any) that enforces Content Security and Authentication for the service. Selecting a Protocol Type invokes the specific protocol handlers for each protocol type, thus enabling higher level of security by parsing the protocol, and higher level of connectivity by tracking dynamic actions (such as opening of ports).
    session_timeout float
    Time (in seconds) before the session times out.
    source_port str
    Port number for the client side service. If specified, only those Source port Numbers will be Accepted, Dropped, or Rejected during packet inspection. Otherwise, the source port is not inspected.
    sync_connections_on_cluster bool
    Enables state-synchronized High Availability or Load Sharing on a ClusterXL or OPSEC-certified cluster.
    tags Sequence[str]
    Collection of tag identifiers.
    use_default_session_timeout bool
    Use default virtual session timeout.
    aggressiveAging Map<String>
    Sets short (aggressive) timeouts for idle connections. Aggressive Aging blocks are documented below.
    color String
    Color of the object. Should be one of existing colors.
    comments String
    Comments string.
    ignoreErrors Boolean
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    ignoreWarnings Boolean
    Apply changes ignoring warnings.
    keepConnectionsOpenAfterPolicyInstallation Boolean
    Keep connections open after policy has been installed even if they are not allowed under the new policy. This overrides the settings in the Connection Persistence page. If you change this property, the change will not affect open connections, but only future connections.
    managementServiceTcpId String
    matchByProtocolSignature Boolean
    A value of true enables matching by the selected protocol's signature - the signature identifies the protocol as genuine. Select this option to limit the port to the specified protocol. If the selected protocol does not support matching by signature, this field cannot be set to true.
    matchForAny Boolean
    Indicates whether this service is used when 'Any' is set as the rule's service and there are several service objects with the same source port and protocol.
    name String
    Object name. Should be unique in the domain.
    overrideDefaultSettings Boolean
    Indicates whether this service is a Data Domain service which has been overridden.
    port String
    The number of the port used to provide this service. To specify a port range, place a hyphen between the lowest and highest port numbers, for example 44-55.
    protocol String
    Select the protocol type associated with the service, and by implication, the management server (if any) that enforces Content Security and Authentication for the service. Selecting a Protocol Type invokes the specific protocol handlers for each protocol type, thus enabling higher level of security by parsing the protocol, and higher level of connectivity by tracking dynamic actions (such as opening of ports).
    sessionTimeout Number
    Time (in seconds) before the session times out.
    sourcePort String
    Port number for the client side service. If specified, only those Source port Numbers will be Accepted, Dropped, or Rejected during packet inspection. Otherwise, the source port is not inspected.
    syncConnectionsOnCluster Boolean
    Enables state-synchronized High Availability or Load Sharing on a ClusterXL or OPSEC-certified cluster.
    tags List<String>
    Collection of tag identifiers.
    useDefaultSessionTimeout Boolean
    Use default virtual session timeout.

    Package Details

    Repository
    checkpoint checkpointsw/terraform-provider-checkpoint
    License
    Notes
    This Pulumi package is based on the checkpoint Terraform Provider.
    checkpoint logo
    checkpoint 2.9.0 published on Monday, Apr 14, 2025 by checkpointsw