Viewing docs for checkpoint 3.0.0
published on Monday, Mar 30, 2026 by checkpointsw
published on Monday, Mar 30, 2026 by checkpointsw
Viewing docs for checkpoint 3.0.0
published on Monday, Mar 30, 2026 by checkpointsw
published on Monday, Mar 30, 2026 by checkpointsw
This resource allows you to execute Check Point Simple Gateway.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as checkpoint from "@pulumi/checkpoint";
const example = new checkpoint.ManagementSimpleGateway("example", {
name: "gw1",
ipv4Address: "192.0.2.1",
});
import pulumi
import pulumi_checkpoint as checkpoint
example = checkpoint.ManagementSimpleGateway("example",
name="gw1",
ipv4_address="192.0.2.1")
package main
import (
"github.com/pulumi/pulumi-terraform-provider/sdks/go/checkpoint/v3/checkpoint"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := checkpoint.NewManagementSimpleGateway(ctx, "example", &checkpoint.ManagementSimpleGatewayArgs{
Name: pulumi.String("gw1"),
Ipv4Address: pulumi.String("192.0.2.1"),
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Checkpoint = Pulumi.Checkpoint;
return await Deployment.RunAsync(() =>
{
var example = new Checkpoint.ManagementSimpleGateway("example", new()
{
Name = "gw1",
Ipv4Address = "192.0.2.1",
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.checkpoint.ManagementSimpleGateway;
import com.pulumi.checkpoint.ManagementSimpleGatewayArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var example = new ManagementSimpleGateway("example", ManagementSimpleGatewayArgs.builder()
.name("gw1")
.ipv4Address("192.0.2.1")
.build());
}
}
resources:
example:
type: checkpoint:ManagementSimpleGateway
properties:
name: gw1
ipv4Address: 192.0.2.1
Create ManagementSimpleGateway Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new ManagementSimpleGateway(name: string, args?: ManagementSimpleGatewayArgs, opts?: CustomResourceOptions);@overload
def ManagementSimpleGateway(resource_name: str,
args: Optional[ManagementSimpleGatewayArgs] = None,
opts: Optional[ResourceOptions] = None)
@overload
def ManagementSimpleGateway(resource_name: str,
opts: Optional[ResourceOptions] = None,
advanced_settings: Optional[ManagementSimpleGatewayAdvancedSettingsArgs] = None,
anti_bot: Optional[bool] = None,
anti_virus: Optional[bool] = None,
application_control: Optional[bool] = None,
application_control_and_url_filtering_settings: Optional[ManagementSimpleGatewayApplicationControlAndUrlFilteringSettingsArgs] = None,
color: Optional[str] = None,
comments: Optional[str] = None,
content_awareness: Optional[bool] = None,
enable_https_inspection: Optional[bool] = None,
fetch_policies: Optional[Sequence[str]] = None,
firewall: Optional[bool] = None,
firewall_settings: Optional[ManagementSimpleGatewayFirewallSettingsArgs] = None,
hit_count: Optional[bool] = None,
https_inspection: Optional[ManagementSimpleGatewayHttpsInspectionArgs] = None,
icap_server: Optional[bool] = None,
identity_awareness: Optional[bool] = None,
identity_awareness_settings: Optional[ManagementSimpleGatewayIdentityAwarenessSettingsArgs] = None,
ignore_warnings: Optional[bool] = None,
interfaces: Optional[Sequence[ManagementSimpleGatewayInterfaceArgs]] = None,
ips: Optional[bool] = None,
ips_settings: Optional[ManagementSimpleGatewayIpsSettingsArgs] = None,
ips_update_policy: Optional[str] = None,
ipv4_address: Optional[str] = None,
ipv6_address: Optional[str] = None,
logs_settings: Optional[ManagementSimpleGatewayLogsSettingsArgs] = None,
management_simple_gateway_id: Optional[str] = None,
name: Optional[str] = None,
nat_hide_internal_interfaces: Optional[bool] = None,
nat_settings: Optional[ManagementSimpleGatewayNatSettingsArgs] = None,
one_time_password: Optional[str] = None,
os_name: Optional[str] = None,
platform_portal_settings: Optional[ManagementSimpleGatewayPlatformPortalSettingsArgs] = None,
proxy_settings: Optional[ManagementSimpleGatewayProxySettingsArgs] = None,
qos: Optional[bool] = None,
save_logs_locally: Optional[bool] = None,
send_alerts_to_servers: Optional[Sequence[str]] = None,
send_logs_to_backup_servers: Optional[Sequence[str]] = None,
send_logs_to_servers: Optional[Sequence[str]] = None,
tags: Optional[Sequence[str]] = None,
threat_emulation: Optional[bool] = None,
threat_extraction: Optional[bool] = None,
url_filtering: Optional[bool] = None,
usercheck_portal_settings: Optional[ManagementSimpleGatewayUsercheckPortalSettingsArgs] = None,
version: Optional[str] = None,
vpn: Optional[bool] = None,
vpn_settings: Optional[ManagementSimpleGatewayVpnSettingsArgs] = None,
zero_phishing: Optional[bool] = None,
zero_phishing_fqdn: Optional[str] = None)func NewManagementSimpleGateway(ctx *Context, name string, args *ManagementSimpleGatewayArgs, opts ...ResourceOption) (*ManagementSimpleGateway, error)public ManagementSimpleGateway(string name, ManagementSimpleGatewayArgs? args = null, CustomResourceOptions? opts = null)
public ManagementSimpleGateway(String name, ManagementSimpleGatewayArgs args)
public ManagementSimpleGateway(String name, ManagementSimpleGatewayArgs args, CustomResourceOptions options)
type: checkpoint:ManagementSimpleGateway
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args ManagementSimpleGatewayArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args ManagementSimpleGatewayArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args ManagementSimpleGatewayArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args ManagementSimpleGatewayArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args ManagementSimpleGatewayArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var managementSimpleGatewayResource = new Checkpoint.ManagementSimpleGateway("managementSimpleGatewayResource", new()
{
AdvancedSettings = new Checkpoint.Inputs.ManagementSimpleGatewayAdvancedSettingsArgs
{
ConnectionPersistence = "string",
Sam = new Checkpoint.Inputs.ManagementSimpleGatewayAdvancedSettingsSamArgs
{
ForwardToOtherSamServers = false,
PurgeSamFile = new Checkpoint.Inputs.ManagementSimpleGatewayAdvancedSettingsSamPurgeSamFileArgs
{
Enabled = false,
PurgeWhenSizeReachesTo = 0,
},
UseEarlyVersions = new Checkpoint.Inputs.ManagementSimpleGatewayAdvancedSettingsSamUseEarlyVersionsArgs
{
CompatibilityMode = "string",
Enabled = false,
},
},
},
AntiBot = false,
AntiVirus = false,
ApplicationControl = false,
ApplicationControlAndUrlFilteringSettings = new Checkpoint.Inputs.ManagementSimpleGatewayApplicationControlAndUrlFilteringSettingsArgs
{
GlobalSettingsMode = "string",
OverrideGlobalSettings = new Checkpoint.Inputs.ManagementSimpleGatewayApplicationControlAndUrlFilteringSettingsOverrideGlobalSettingsArgs
{
FailMode = "string",
WebsiteCategorization = new Checkpoint.Inputs.ManagementSimpleGatewayApplicationControlAndUrlFilteringSettingsOverrideGlobalSettingsWebsiteCategorizationArgs
{
CustomMode = new Checkpoint.Inputs.ManagementSimpleGatewayApplicationControlAndUrlFilteringSettingsOverrideGlobalSettingsWebsiteCategorizationCustomModeArgs
{
SocialNetworkingWidgets = "string",
UrlFiltering = "string",
},
Mode = "string",
},
},
},
Color = "string",
Comments = "string",
ContentAwareness = false,
EnableHttpsInspection = false,
FetchPolicies = new[]
{
"string",
},
Firewall = false,
FirewallSettings = new Checkpoint.Inputs.ManagementSimpleGatewayFirewallSettingsArgs
{
AutoCalculateConnectionsHashTableSizeAndMemoryPool = false,
AutoMaximumLimitForConcurrentConnections = false,
ConnectionsHashSize = 0,
MaximumLimitForConcurrentConnections = 0,
MaximumMemoryPoolSize = 0,
MemoryPoolSize = 0,
},
HitCount = false,
HttpsInspection = new Checkpoint.Inputs.ManagementSimpleGatewayHttpsInspectionArgs
{
BypassOnFailure = new Checkpoint.Inputs.ManagementSimpleGatewayHttpsInspectionBypassOnFailureArgs
{
OverrideProfile = false,
Value = false,
},
DenyExpiredServerCert = new Checkpoint.Inputs.ManagementSimpleGatewayHttpsInspectionDenyExpiredServerCertArgs
{
OverrideProfile = false,
Value = false,
},
DenyRevokedServerCert = new Checkpoint.Inputs.ManagementSimpleGatewayHttpsInspectionDenyRevokedServerCertArgs
{
OverrideProfile = false,
Value = false,
},
DenyUntrustedServerCert = new Checkpoint.Inputs.ManagementSimpleGatewayHttpsInspectionDenyUntrustedServerCertArgs
{
OverrideProfile = false,
Value = false,
},
SiteCategorizationAllowMode = new Checkpoint.Inputs.ManagementSimpleGatewayHttpsInspectionSiteCategorizationAllowModeArgs
{
OverrideProfile = false,
Value = "string",
},
},
IcapServer = false,
IdentityAwareness = false,
IdentityAwarenessSettings = new Checkpoint.Inputs.ManagementSimpleGatewayIdentityAwarenessSettingsArgs
{
BrowserBasedAuthentication = false,
BrowserBasedAuthenticationSettings = new Checkpoint.Inputs.ManagementSimpleGatewayIdentityAwarenessSettingsBrowserBasedAuthenticationSettingsArgs
{
AuthenticationSettings = new Checkpoint.Inputs.ManagementSimpleGatewayIdentityAwarenessSettingsBrowserBasedAuthenticationSettingsAuthenticationSettingsArgs
{
AuthenticationMethod = "string",
IdentityProviders = new[]
{
"string",
},
Radius = "string",
UsersDirectories = new Checkpoint.Inputs.ManagementSimpleGatewayIdentityAwarenessSettingsBrowserBasedAuthenticationSettingsAuthenticationSettingsUsersDirectoriesArgs
{
ExternalUserProfile = false,
InternalUsers = false,
Specifics = new[]
{
"string",
},
UsersFromExternalDirectories = "string",
},
},
BrowserBasedAuthenticationPortalSettings = new Checkpoint.Inputs.ManagementSimpleGatewayIdentityAwarenessSettingsBrowserBasedAuthenticationSettingsBrowserBasedAuthenticationPortalSettingsArgs
{
Accessibility = new Checkpoint.Inputs.ManagementSimpleGatewayIdentityAwarenessSettingsBrowserBasedAuthenticationSettingsBrowserBasedAuthenticationPortalSettingsAccessibilityArgs
{
AllowAccessFrom = "string",
InternalAccessSettings = new Checkpoint.Inputs.ManagementSimpleGatewayIdentityAwarenessSettingsBrowserBasedAuthenticationSettingsBrowserBasedAuthenticationPortalSettingsAccessibilityInternalAccessSettingsArgs
{
Dmz = false,
Undefined = false,
Vpn = false,
},
},
CertificateSettings = new Checkpoint.Inputs.ManagementSimpleGatewayIdentityAwarenessSettingsBrowserBasedAuthenticationSettingsBrowserBasedAuthenticationPortalSettingsCertificateSettingsArgs
{
Base64Certificate = "string",
Base64Password = "string",
},
PortalWebSettings = new Checkpoint.Inputs.ManagementSimpleGatewayIdentityAwarenessSettingsBrowserBasedAuthenticationSettingsBrowserBasedAuthenticationPortalSettingsPortalWebSettingsArgs
{
Aliases = new[]
{
"string",
},
MainUrl = "string",
},
},
},
IdentityAgent = false,
IdentityAgentSettings = new Checkpoint.Inputs.ManagementSimpleGatewayIdentityAwarenessSettingsIdentityAgentSettingsArgs
{
AgentsIntervalKeepalive = 0,
AuthenticationSettings = new Checkpoint.Inputs.ManagementSimpleGatewayIdentityAwarenessSettingsIdentityAgentSettingsAuthenticationSettingsArgs
{
AuthenticationMethod = "string",
Radius = "string",
UsersDirectories = new Checkpoint.Inputs.ManagementSimpleGatewayIdentityAwarenessSettingsIdentityAgentSettingsAuthenticationSettingsUsersDirectoriesArgs
{
ExternalUserProfile = false,
InternalUsers = false,
Specifics = new[]
{
"string",
},
UsersFromExternalDirectories = "string",
},
},
IdentityAgentPortalSettings = new Checkpoint.Inputs.ManagementSimpleGatewayIdentityAwarenessSettingsIdentityAgentSettingsIdentityAgentPortalSettingsArgs
{
Accessibility = new Checkpoint.Inputs.ManagementSimpleGatewayIdentityAwarenessSettingsIdentityAgentSettingsIdentityAgentPortalSettingsAccessibilityArgs
{
AllowAccessFrom = "string",
InternalAccessSettings = new Checkpoint.Inputs.ManagementSimpleGatewayIdentityAwarenessSettingsIdentityAgentSettingsIdentityAgentPortalSettingsAccessibilityInternalAccessSettingsArgs
{
Dmz = false,
Undefined = false,
Vpn = false,
},
},
},
UserReauthenticateInterval = 0,
},
IdentityCollector = false,
IdentityCollectorSettings = new Checkpoint.Inputs.ManagementSimpleGatewayIdentityAwarenessSettingsIdentityCollectorSettingsArgs
{
AuthorizedClients = new[]
{
new Checkpoint.Inputs.ManagementSimpleGatewayIdentityAwarenessSettingsIdentityCollectorSettingsAuthorizedClientArgs
{
Client = "string",
ClientSecret = "string",
},
},
AuthenticationSettings = new Checkpoint.Inputs.ManagementSimpleGatewayIdentityAwarenessSettingsIdentityCollectorSettingsAuthenticationSettingsArgs
{
UsersDirectories = new Checkpoint.Inputs.ManagementSimpleGatewayIdentityAwarenessSettingsIdentityCollectorSettingsAuthenticationSettingsUsersDirectoriesArgs
{
ExternalUserProfile = false,
InternalUsers = false,
Specifics = new[]
{
"string",
},
UsersFromExternalDirectories = "string",
},
},
ClientAccessPermissions = new Checkpoint.Inputs.ManagementSimpleGatewayIdentityAwarenessSettingsIdentityCollectorSettingsClientAccessPermissionsArgs
{
Accessibility = new Checkpoint.Inputs.ManagementSimpleGatewayIdentityAwarenessSettingsIdentityCollectorSettingsClientAccessPermissionsAccessibilityArgs
{
AllowAccessFrom = "string",
InternalAccessSettings = new Checkpoint.Inputs.ManagementSimpleGatewayIdentityAwarenessSettingsIdentityCollectorSettingsClientAccessPermissionsAccessibilityInternalAccessSettingsArgs
{
Dmz = false,
Undefined = false,
Vpn = false,
},
},
},
},
IdentitySharingSettings = new Checkpoint.Inputs.ManagementSimpleGatewayIdentityAwarenessSettingsIdentitySharingSettingsArgs
{
ReceiveFromOtherGateways = false,
ReceiveFroms = new[]
{
"string",
},
ShareWithOtherGateways = false,
},
ProxySettings = new Checkpoint.Inputs.ManagementSimpleGatewayIdentityAwarenessSettingsProxySettingsArgs
{
DetectUsingXForwardFor = false,
},
RemoteAccess = false,
},
IgnoreWarnings = false,
Interfaces = new[]
{
new Checkpoint.Inputs.ManagementSimpleGatewayInterfaceArgs
{
Name = "string",
Ipv6MaskLength = "string",
SecurityZone = false,
Comments = "string",
Ipv4Address = "string",
Ipv4MaskLength = "string",
Ipv4NetworkMask = "string",
Color = "string",
Ipv6NetworkMask = "string",
Ipv6Address = "string",
AntiSpoofingSettings = new Checkpoint.Inputs.ManagementSimpleGatewayInterfaceAntiSpoofingSettingsArgs
{
Action = "string",
},
AntiSpoofing = false,
SecurityZoneSettings = new Checkpoint.Inputs.ManagementSimpleGatewayInterfaceSecurityZoneSettingsArgs
{
AutoCalculated = false,
SpecificZone = "string",
},
Topology = "string",
TopologyAutomaticCalculation = "string",
TopologySettings = new Checkpoint.Inputs.ManagementSimpleGatewayInterfaceTopologySettingsArgs
{
InterfaceLeadsToDmz = false,
IpAddressBehindThisInterface = "string",
SpecificNetwork = "string",
},
},
},
Ips = false,
IpsSettings = new Checkpoint.Inputs.ManagementSimpleGatewayIpsSettingsArgs
{
ActivationMode = "string",
BypassAllUnderLoad = false,
BypassTrackMethod = "string",
CpuUsageHighThreshold = 0,
CpuUsageLowThreshold = 0,
MemoryUsageHighThreshold = 0,
MemoryUsageLowThreshold = 0,
SendThreatCloudInfo = false,
TopCpuConsumingProtections = new Checkpoint.Inputs.ManagementSimpleGatewayIpsSettingsTopCpuConsumingProtectionsArgs
{
DisablePeriod = 0,
DisableUnderLoad = false,
},
},
IpsUpdatePolicy = "string",
Ipv4Address = "string",
Ipv6Address = "string",
LogsSettings = new Checkpoint.Inputs.ManagementSimpleGatewayLogsSettingsArgs
{
AlertWhenFreeDiskSpaceBelow = false,
AlertWhenFreeDiskSpaceBelowMetrics = "string",
AlertWhenFreeDiskSpaceBelowThreshold = 0,
AlertWhenFreeDiskSpaceBelowType = "string",
BeforeDeleteKeepLogsFromTheLastDays = false,
BeforeDeleteKeepLogsFromTheLastDaysThreshold = 0,
BeforeDeleteRunScript = false,
BeforeDeleteRunScriptCommand = "string",
DeleteIndexFilesOlderThanDays = false,
DeleteIndexFilesOlderThanDaysThreshold = 0,
DeleteIndexFilesWhenIndexSizeAbove = false,
DeleteIndexFilesWhenIndexSizeAboveMetrics = "string",
DeleteIndexFilesWhenIndexSizeAboveThreshold = 0,
DeleteWhenFreeDiskSpaceBelow = false,
DeleteWhenFreeDiskSpaceBelowMetrics = "string",
DeleteWhenFreeDiskSpaceBelowThreshold = 0,
DetectNewCitrixIcaApplicationNames = false,
ForwardLogsToLogServer = false,
ForwardLogsToLogServerName = "string",
ForwardLogsToLogServerScheduleName = "string",
PerformLogRotateBeforeLogForwarding = false,
RejectConnectionsWhenFreeDiskSpaceBelowThreshold = false,
ReserveForPacketCaptureMetrics = "string",
ReserveForPacketCaptureThreshold = 0,
RotateLogByFileSize = false,
RotateLogFileSizeThreshold = 0,
RotateLogOnSchedule = false,
RotateLogScheduleName = "string",
StopLoggingWhenFreeDiskSpaceBelow = false,
StopLoggingWhenFreeDiskSpaceBelowMetrics = "string",
StopLoggingWhenFreeDiskSpaceBelowThreshold = 0,
TurnOnQosLogging = false,
UpdateAccountLogEvery = 0,
},
ManagementSimpleGatewayId = "string",
Name = "string",
NatHideInternalInterfaces = false,
NatSettings = new Checkpoint.Inputs.ManagementSimpleGatewayNatSettingsArgs
{
AutoRule = false,
HideBehind = "string",
InstallOn = "string",
Ipv4Address = "string",
Ipv6Address = "string",
Method = "string",
},
OneTimePassword = "string",
OsName = "string",
PlatformPortalSettings = new Checkpoint.Inputs.ManagementSimpleGatewayPlatformPortalSettingsArgs
{
Accessibility = new Checkpoint.Inputs.ManagementSimpleGatewayPlatformPortalSettingsAccessibilityArgs
{
AllowAccessFrom = "string",
InternalAccessSettings = new Checkpoint.Inputs.ManagementSimpleGatewayPlatformPortalSettingsAccessibilityInternalAccessSettingsArgs
{
Dmz = false,
Undefined = false,
Vpn = false,
},
},
CertificateSettings = new Checkpoint.Inputs.ManagementSimpleGatewayPlatformPortalSettingsCertificateSettingsArgs
{
Base64Certificate = "string",
Base64Password = "string",
},
PortalWebSettings = new Checkpoint.Inputs.ManagementSimpleGatewayPlatformPortalSettingsPortalWebSettingsArgs
{
Aliases = new[]
{
"string",
},
MainUrl = "string",
},
},
ProxySettings = new Checkpoint.Inputs.ManagementSimpleGatewayProxySettingsArgs
{
Port = 0,
ProxyServer = "string",
UseCustomProxy = false,
},
Qos = false,
SaveLogsLocally = false,
SendAlertsToServers = new[]
{
"string",
},
SendLogsToBackupServers = new[]
{
"string",
},
SendLogsToServers = new[]
{
"string",
},
Tags = new[]
{
"string",
},
ThreatEmulation = false,
ThreatExtraction = false,
UrlFiltering = false,
UsercheckPortalSettings = new Checkpoint.Inputs.ManagementSimpleGatewayUsercheckPortalSettingsArgs
{
Accessibility = new Checkpoint.Inputs.ManagementSimpleGatewayUsercheckPortalSettingsAccessibilityArgs
{
AllowAccessFrom = "string",
InternalAccessSettings = new Checkpoint.Inputs.ManagementSimpleGatewayUsercheckPortalSettingsAccessibilityInternalAccessSettingsArgs
{
Dmz = false,
Undefined = false,
Vpn = false,
},
},
CertificateSettings = new Checkpoint.Inputs.ManagementSimpleGatewayUsercheckPortalSettingsCertificateSettingsArgs
{
Base64Certificate = "string",
Base64Password = "string",
},
Enabled = false,
PortalWebSettings = new Checkpoint.Inputs.ManagementSimpleGatewayUsercheckPortalSettingsPortalWebSettingsArgs
{
Aliases = new[]
{
"string",
},
MainUrl = "string",
},
},
Version = "string",
Vpn = false,
VpnSettings = new Checkpoint.Inputs.ManagementSimpleGatewayVpnSettingsArgs
{
Authentication = new Checkpoint.Inputs.ManagementSimpleGatewayVpnSettingsAuthenticationArgs
{
AuthenticationClients = new[]
{
"string",
},
},
LinkSelection = new Checkpoint.Inputs.ManagementSimpleGatewayVpnSettingsLinkSelectionArgs
{
DnsResolvingHostname = "string",
IpAddress = "string",
IpSelection = "string",
},
MaximumConcurrentIkeNegotiations = 0,
MaximumConcurrentTunnels = 0,
OfficeMode = new Checkpoint.Inputs.ManagementSimpleGatewayVpnSettingsOfficeModeArgs
{
AllocateIpAddressFrom = new Checkpoint.Inputs.ManagementSimpleGatewayVpnSettingsOfficeModeAllocateIpAddressFromArgs
{
AllocateMethod = "string",
DhcpMacAddress = "string",
DhcpServer = "string",
ManualNetwork = "string",
OptionalParameters = new Checkpoint.Inputs.ManagementSimpleGatewayVpnSettingsOfficeModeAllocateIpAddressFromOptionalParametersArgs
{
DnsSuffixes = "string",
FirstBackupDnsServer = "string",
FirstBackupWinsServer = "string",
IpLeaseDuration = 0,
PrimaryDnsServer = "string",
PrimaryWinsServer = "string",
SecondBackupDnsServer = "string",
SecondBackupWinsServer = "string",
UseFirstBackupDnsServer = false,
UseFirstBackupWinsServer = false,
UsePrimaryDnsServer = false,
UsePrimaryWinsServer = false,
UseSecondBackupDnsServer = false,
UseSecondBackupWinsServer = false,
},
RadiusServer = false,
UseAllocateMethod = false,
VirtualIpAddress = "string",
},
AntiSpoofingAdditionalAddresses = "string",
Group = "string",
Mode = "string",
PerformAntiSpoofing = false,
SupportMultipleInterfaces = false,
},
RemoteAccess = new Checkpoint.Inputs.ManagementSimpleGatewayVpnSettingsRemoteAccessArgs
{
AllowVpnClientsToRouteTraffic = false,
L2tpAuthMethod = "string",
L2tpCertificate = "string",
NatTraversalService = "string",
SupportL2tp = false,
SupportNatTraversalMechanism = false,
SupportVisitorMode = false,
VisitorModeInterface = "string",
VisitorModeService = "string",
},
VpnDomain = "string",
VpnDomainExcludeExternalIpAddresses = false,
VpnDomainType = "string",
},
ZeroPhishing = false,
ZeroPhishingFqdn = "string",
});
example, err := checkpoint.NewManagementSimpleGateway(ctx, "managementSimpleGatewayResource", &checkpoint.ManagementSimpleGatewayArgs{
AdvancedSettings: &checkpoint.ManagementSimpleGatewayAdvancedSettingsArgs{
ConnectionPersistence: pulumi.String("string"),
Sam: &checkpoint.ManagementSimpleGatewayAdvancedSettingsSamArgs{
ForwardToOtherSamServers: pulumi.Bool(false),
PurgeSamFile: &checkpoint.ManagementSimpleGatewayAdvancedSettingsSamPurgeSamFileArgs{
Enabled: pulumi.Bool(false),
PurgeWhenSizeReachesTo: pulumi.Float64(0),
},
UseEarlyVersions: &checkpoint.ManagementSimpleGatewayAdvancedSettingsSamUseEarlyVersionsArgs{
CompatibilityMode: pulumi.String("string"),
Enabled: pulumi.Bool(false),
},
},
},
AntiBot: pulumi.Bool(false),
AntiVirus: pulumi.Bool(false),
ApplicationControl: pulumi.Bool(false),
ApplicationControlAndUrlFilteringSettings: &checkpoint.ManagementSimpleGatewayApplicationControlAndUrlFilteringSettingsArgs{
GlobalSettingsMode: pulumi.String("string"),
OverrideGlobalSettings: &checkpoint.ManagementSimpleGatewayApplicationControlAndUrlFilteringSettingsOverrideGlobalSettingsArgs{
FailMode: pulumi.String("string"),
WebsiteCategorization: &checkpoint.ManagementSimpleGatewayApplicationControlAndUrlFilteringSettingsOverrideGlobalSettingsWebsiteCategorizationArgs{
CustomMode: &checkpoint.ManagementSimpleGatewayApplicationControlAndUrlFilteringSettingsOverrideGlobalSettingsWebsiteCategorizationCustomModeArgs{
SocialNetworkingWidgets: pulumi.String("string"),
UrlFiltering: pulumi.String("string"),
},
Mode: pulumi.String("string"),
},
},
},
Color: pulumi.String("string"),
Comments: pulumi.String("string"),
ContentAwareness: pulumi.Bool(false),
EnableHttpsInspection: pulumi.Bool(false),
FetchPolicies: pulumi.StringArray{
pulumi.String("string"),
},
Firewall: pulumi.Bool(false),
FirewallSettings: &checkpoint.ManagementSimpleGatewayFirewallSettingsArgs{
AutoCalculateConnectionsHashTableSizeAndMemoryPool: pulumi.Bool(false),
AutoMaximumLimitForConcurrentConnections: pulumi.Bool(false),
ConnectionsHashSize: pulumi.Float64(0),
MaximumLimitForConcurrentConnections: pulumi.Float64(0),
MaximumMemoryPoolSize: pulumi.Float64(0),
MemoryPoolSize: pulumi.Float64(0),
},
HitCount: pulumi.Bool(false),
HttpsInspection: &checkpoint.ManagementSimpleGatewayHttpsInspectionArgs{
BypassOnFailure: &checkpoint.ManagementSimpleGatewayHttpsInspectionBypassOnFailureArgs{
OverrideProfile: pulumi.Bool(false),
Value: pulumi.Bool(false),
},
DenyExpiredServerCert: &checkpoint.ManagementSimpleGatewayHttpsInspectionDenyExpiredServerCertArgs{
OverrideProfile: pulumi.Bool(false),
Value: pulumi.Bool(false),
},
DenyRevokedServerCert: &checkpoint.ManagementSimpleGatewayHttpsInspectionDenyRevokedServerCertArgs{
OverrideProfile: pulumi.Bool(false),
Value: pulumi.Bool(false),
},
DenyUntrustedServerCert: &checkpoint.ManagementSimpleGatewayHttpsInspectionDenyUntrustedServerCertArgs{
OverrideProfile: pulumi.Bool(false),
Value: pulumi.Bool(false),
},
SiteCategorizationAllowMode: &checkpoint.ManagementSimpleGatewayHttpsInspectionSiteCategorizationAllowModeArgs{
OverrideProfile: pulumi.Bool(false),
Value: pulumi.String("string"),
},
},
IcapServer: pulumi.Bool(false),
IdentityAwareness: pulumi.Bool(false),
IdentityAwarenessSettings: &checkpoint.ManagementSimpleGatewayIdentityAwarenessSettingsArgs{
BrowserBasedAuthentication: pulumi.Bool(false),
BrowserBasedAuthenticationSettings: &checkpoint.ManagementSimpleGatewayIdentityAwarenessSettingsBrowserBasedAuthenticationSettingsArgs{
AuthenticationSettings: &checkpoint.ManagementSimpleGatewayIdentityAwarenessSettingsBrowserBasedAuthenticationSettingsAuthenticationSettingsArgs{
AuthenticationMethod: pulumi.String("string"),
IdentityProviders: pulumi.StringArray{
pulumi.String("string"),
},
Radius: pulumi.String("string"),
UsersDirectories: &checkpoint.ManagementSimpleGatewayIdentityAwarenessSettingsBrowserBasedAuthenticationSettingsAuthenticationSettingsUsersDirectoriesArgs{
ExternalUserProfile: pulumi.Bool(false),
InternalUsers: pulumi.Bool(false),
Specifics: pulumi.StringArray{
pulumi.String("string"),
},
UsersFromExternalDirectories: pulumi.String("string"),
},
},
BrowserBasedAuthenticationPortalSettings: &checkpoint.ManagementSimpleGatewayIdentityAwarenessSettingsBrowserBasedAuthenticationSettingsBrowserBasedAuthenticationPortalSettingsArgs{
Accessibility: &checkpoint.ManagementSimpleGatewayIdentityAwarenessSettingsBrowserBasedAuthenticationSettingsBrowserBasedAuthenticationPortalSettingsAccessibilityArgs{
AllowAccessFrom: pulumi.String("string"),
InternalAccessSettings: &checkpoint.ManagementSimpleGatewayIdentityAwarenessSettingsBrowserBasedAuthenticationSettingsBrowserBasedAuthenticationPortalSettingsAccessibilityInternalAccessSettingsArgs{
Dmz: pulumi.Bool(false),
Undefined: pulumi.Bool(false),
Vpn: pulumi.Bool(false),
},
},
CertificateSettings: &checkpoint.ManagementSimpleGatewayIdentityAwarenessSettingsBrowserBasedAuthenticationSettingsBrowserBasedAuthenticationPortalSettingsCertificateSettingsArgs{
Base64Certificate: pulumi.String("string"),
Base64Password: pulumi.String("string"),
},
PortalWebSettings: &checkpoint.ManagementSimpleGatewayIdentityAwarenessSettingsBrowserBasedAuthenticationSettingsBrowserBasedAuthenticationPortalSettingsPortalWebSettingsArgs{
Aliases: pulumi.StringArray{
pulumi.String("string"),
},
MainUrl: pulumi.String("string"),
},
},
},
IdentityAgent: pulumi.Bool(false),
IdentityAgentSettings: &checkpoint.ManagementSimpleGatewayIdentityAwarenessSettingsIdentityAgentSettingsArgs{
AgentsIntervalKeepalive: pulumi.Float64(0),
AuthenticationSettings: &checkpoint.ManagementSimpleGatewayIdentityAwarenessSettingsIdentityAgentSettingsAuthenticationSettingsArgs{
AuthenticationMethod: pulumi.String("string"),
Radius: pulumi.String("string"),
UsersDirectories: &checkpoint.ManagementSimpleGatewayIdentityAwarenessSettingsIdentityAgentSettingsAuthenticationSettingsUsersDirectoriesArgs{
ExternalUserProfile: pulumi.Bool(false),
InternalUsers: pulumi.Bool(false),
Specifics: pulumi.StringArray{
pulumi.String("string"),
},
UsersFromExternalDirectories: pulumi.String("string"),
},
},
IdentityAgentPortalSettings: &checkpoint.ManagementSimpleGatewayIdentityAwarenessSettingsIdentityAgentSettingsIdentityAgentPortalSettingsArgs{
Accessibility: &checkpoint.ManagementSimpleGatewayIdentityAwarenessSettingsIdentityAgentSettingsIdentityAgentPortalSettingsAccessibilityArgs{
AllowAccessFrom: pulumi.String("string"),
InternalAccessSettings: &checkpoint.ManagementSimpleGatewayIdentityAwarenessSettingsIdentityAgentSettingsIdentityAgentPortalSettingsAccessibilityInternalAccessSettingsArgs{
Dmz: pulumi.Bool(false),
Undefined: pulumi.Bool(false),
Vpn: pulumi.Bool(false),
},
},
},
UserReauthenticateInterval: pulumi.Float64(0),
},
IdentityCollector: pulumi.Bool(false),
IdentityCollectorSettings: &checkpoint.ManagementSimpleGatewayIdentityAwarenessSettingsIdentityCollectorSettingsArgs{
AuthorizedClients: checkpoint.ManagementSimpleGatewayIdentityAwarenessSettingsIdentityCollectorSettingsAuthorizedClientArray{
&checkpoint.ManagementSimpleGatewayIdentityAwarenessSettingsIdentityCollectorSettingsAuthorizedClientArgs{
Client: pulumi.String("string"),
ClientSecret: pulumi.String("string"),
},
},
AuthenticationSettings: &checkpoint.ManagementSimpleGatewayIdentityAwarenessSettingsIdentityCollectorSettingsAuthenticationSettingsArgs{
UsersDirectories: &checkpoint.ManagementSimpleGatewayIdentityAwarenessSettingsIdentityCollectorSettingsAuthenticationSettingsUsersDirectoriesArgs{
ExternalUserProfile: pulumi.Bool(false),
InternalUsers: pulumi.Bool(false),
Specifics: pulumi.StringArray{
pulumi.String("string"),
},
UsersFromExternalDirectories: pulumi.String("string"),
},
},
ClientAccessPermissions: &checkpoint.ManagementSimpleGatewayIdentityAwarenessSettingsIdentityCollectorSettingsClientAccessPermissionsArgs{
Accessibility: &checkpoint.ManagementSimpleGatewayIdentityAwarenessSettingsIdentityCollectorSettingsClientAccessPermissionsAccessibilityArgs{
AllowAccessFrom: pulumi.String("string"),
InternalAccessSettings: &checkpoint.ManagementSimpleGatewayIdentityAwarenessSettingsIdentityCollectorSettingsClientAccessPermissionsAccessibilityInternalAccessSettingsArgs{
Dmz: pulumi.Bool(false),
Undefined: pulumi.Bool(false),
Vpn: pulumi.Bool(false),
},
},
},
},
IdentitySharingSettings: &checkpoint.ManagementSimpleGatewayIdentityAwarenessSettingsIdentitySharingSettingsArgs{
ReceiveFromOtherGateways: pulumi.Bool(false),
ReceiveFroms: pulumi.StringArray{
pulumi.String("string"),
},
ShareWithOtherGateways: pulumi.Bool(false),
},
ProxySettings: &checkpoint.ManagementSimpleGatewayIdentityAwarenessSettingsProxySettingsArgs{
DetectUsingXForwardFor: pulumi.Bool(false),
},
RemoteAccess: pulumi.Bool(false),
},
IgnoreWarnings: pulumi.Bool(false),
Interfaces: checkpoint.ManagementSimpleGatewayInterfaceArray{
&checkpoint.ManagementSimpleGatewayInterfaceArgs{
Name: pulumi.String("string"),
Ipv6MaskLength: pulumi.String("string"),
SecurityZone: pulumi.Bool(false),
Comments: pulumi.String("string"),
Ipv4Address: pulumi.String("string"),
Ipv4MaskLength: pulumi.String("string"),
Ipv4NetworkMask: pulumi.String("string"),
Color: pulumi.String("string"),
Ipv6NetworkMask: pulumi.String("string"),
Ipv6Address: pulumi.String("string"),
AntiSpoofingSettings: &checkpoint.ManagementSimpleGatewayInterfaceAntiSpoofingSettingsArgs{
Action: pulumi.String("string"),
},
AntiSpoofing: pulumi.Bool(false),
SecurityZoneSettings: &checkpoint.ManagementSimpleGatewayInterfaceSecurityZoneSettingsArgs{
AutoCalculated: pulumi.Bool(false),
SpecificZone: pulumi.String("string"),
},
Topology: pulumi.String("string"),
TopologyAutomaticCalculation: pulumi.String("string"),
TopologySettings: &checkpoint.ManagementSimpleGatewayInterfaceTopologySettingsArgs{
InterfaceLeadsToDmz: pulumi.Bool(false),
IpAddressBehindThisInterface: pulumi.String("string"),
SpecificNetwork: pulumi.String("string"),
},
},
},
Ips: pulumi.Bool(false),
IpsSettings: &checkpoint.ManagementSimpleGatewayIpsSettingsArgs{
ActivationMode: pulumi.String("string"),
BypassAllUnderLoad: pulumi.Bool(false),
BypassTrackMethod: pulumi.String("string"),
CpuUsageHighThreshold: pulumi.Float64(0),
CpuUsageLowThreshold: pulumi.Float64(0),
MemoryUsageHighThreshold: pulumi.Float64(0),
MemoryUsageLowThreshold: pulumi.Float64(0),
SendThreatCloudInfo: pulumi.Bool(false),
TopCpuConsumingProtections: &checkpoint.ManagementSimpleGatewayIpsSettingsTopCpuConsumingProtectionsArgs{
DisablePeriod: pulumi.Float64(0),
DisableUnderLoad: pulumi.Bool(false),
},
},
IpsUpdatePolicy: pulumi.String("string"),
Ipv4Address: pulumi.String("string"),
Ipv6Address: pulumi.String("string"),
LogsSettings: &checkpoint.ManagementSimpleGatewayLogsSettingsArgs{
AlertWhenFreeDiskSpaceBelow: pulumi.Bool(false),
AlertWhenFreeDiskSpaceBelowMetrics: pulumi.String("string"),
AlertWhenFreeDiskSpaceBelowThreshold: pulumi.Float64(0),
AlertWhenFreeDiskSpaceBelowType: pulumi.String("string"),
BeforeDeleteKeepLogsFromTheLastDays: pulumi.Bool(false),
BeforeDeleteKeepLogsFromTheLastDaysThreshold: pulumi.Float64(0),
BeforeDeleteRunScript: pulumi.Bool(false),
BeforeDeleteRunScriptCommand: pulumi.String("string"),
DeleteIndexFilesOlderThanDays: pulumi.Bool(false),
DeleteIndexFilesOlderThanDaysThreshold: pulumi.Float64(0),
DeleteIndexFilesWhenIndexSizeAbove: pulumi.Bool(false),
DeleteIndexFilesWhenIndexSizeAboveMetrics: pulumi.String("string"),
DeleteIndexFilesWhenIndexSizeAboveThreshold: pulumi.Float64(0),
DeleteWhenFreeDiskSpaceBelow: pulumi.Bool(false),
DeleteWhenFreeDiskSpaceBelowMetrics: pulumi.String("string"),
DeleteWhenFreeDiskSpaceBelowThreshold: pulumi.Float64(0),
DetectNewCitrixIcaApplicationNames: pulumi.Bool(false),
ForwardLogsToLogServer: pulumi.Bool(false),
ForwardLogsToLogServerName: pulumi.String("string"),
ForwardLogsToLogServerScheduleName: pulumi.String("string"),
PerformLogRotateBeforeLogForwarding: pulumi.Bool(false),
RejectConnectionsWhenFreeDiskSpaceBelowThreshold: pulumi.Bool(false),
ReserveForPacketCaptureMetrics: pulumi.String("string"),
ReserveForPacketCaptureThreshold: pulumi.Float64(0),
RotateLogByFileSize: pulumi.Bool(false),
RotateLogFileSizeThreshold: pulumi.Float64(0),
RotateLogOnSchedule: pulumi.Bool(false),
RotateLogScheduleName: pulumi.String("string"),
StopLoggingWhenFreeDiskSpaceBelow: pulumi.Bool(false),
StopLoggingWhenFreeDiskSpaceBelowMetrics: pulumi.String("string"),
StopLoggingWhenFreeDiskSpaceBelowThreshold: pulumi.Float64(0),
TurnOnQosLogging: pulumi.Bool(false),
UpdateAccountLogEvery: pulumi.Float64(0),
},
ManagementSimpleGatewayId: pulumi.String("string"),
Name: pulumi.String("string"),
NatHideInternalInterfaces: pulumi.Bool(false),
NatSettings: &checkpoint.ManagementSimpleGatewayNatSettingsArgs{
AutoRule: pulumi.Bool(false),
HideBehind: pulumi.String("string"),
InstallOn: pulumi.String("string"),
Ipv4Address: pulumi.String("string"),
Ipv6Address: pulumi.String("string"),
Method: pulumi.String("string"),
},
OneTimePassword: pulumi.String("string"),
OsName: pulumi.String("string"),
PlatformPortalSettings: &checkpoint.ManagementSimpleGatewayPlatformPortalSettingsArgs{
Accessibility: &checkpoint.ManagementSimpleGatewayPlatformPortalSettingsAccessibilityArgs{
AllowAccessFrom: pulumi.String("string"),
InternalAccessSettings: &checkpoint.ManagementSimpleGatewayPlatformPortalSettingsAccessibilityInternalAccessSettingsArgs{
Dmz: pulumi.Bool(false),
Undefined: pulumi.Bool(false),
Vpn: pulumi.Bool(false),
},
},
CertificateSettings: &checkpoint.ManagementSimpleGatewayPlatformPortalSettingsCertificateSettingsArgs{
Base64Certificate: pulumi.String("string"),
Base64Password: pulumi.String("string"),
},
PortalWebSettings: &checkpoint.ManagementSimpleGatewayPlatformPortalSettingsPortalWebSettingsArgs{
Aliases: pulumi.StringArray{
pulumi.String("string"),
},
MainUrl: pulumi.String("string"),
},
},
ProxySettings: &checkpoint.ManagementSimpleGatewayProxySettingsArgs{
Port: pulumi.Float64(0),
ProxyServer: pulumi.String("string"),
UseCustomProxy: pulumi.Bool(false),
},
Qos: pulumi.Bool(false),
SaveLogsLocally: pulumi.Bool(false),
SendAlertsToServers: pulumi.StringArray{
pulumi.String("string"),
},
SendLogsToBackupServers: pulumi.StringArray{
pulumi.String("string"),
},
SendLogsToServers: pulumi.StringArray{
pulumi.String("string"),
},
Tags: pulumi.StringArray{
pulumi.String("string"),
},
ThreatEmulation: pulumi.Bool(false),
ThreatExtraction: pulumi.Bool(false),
UrlFiltering: pulumi.Bool(false),
UsercheckPortalSettings: &checkpoint.ManagementSimpleGatewayUsercheckPortalSettingsArgs{
Accessibility: &checkpoint.ManagementSimpleGatewayUsercheckPortalSettingsAccessibilityArgs{
AllowAccessFrom: pulumi.String("string"),
InternalAccessSettings: &checkpoint.ManagementSimpleGatewayUsercheckPortalSettingsAccessibilityInternalAccessSettingsArgs{
Dmz: pulumi.Bool(false),
Undefined: pulumi.Bool(false),
Vpn: pulumi.Bool(false),
},
},
CertificateSettings: &checkpoint.ManagementSimpleGatewayUsercheckPortalSettingsCertificateSettingsArgs{
Base64Certificate: pulumi.String("string"),
Base64Password: pulumi.String("string"),
},
Enabled: pulumi.Bool(false),
PortalWebSettings: &checkpoint.ManagementSimpleGatewayUsercheckPortalSettingsPortalWebSettingsArgs{
Aliases: pulumi.StringArray{
pulumi.String("string"),
},
MainUrl: pulumi.String("string"),
},
},
Version: pulumi.String("string"),
Vpn: pulumi.Bool(false),
VpnSettings: &checkpoint.ManagementSimpleGatewayVpnSettingsArgs{
Authentication: &checkpoint.ManagementSimpleGatewayVpnSettingsAuthenticationArgs{
AuthenticationClients: pulumi.StringArray{
pulumi.String("string"),
},
},
LinkSelection: &checkpoint.ManagementSimpleGatewayVpnSettingsLinkSelectionArgs{
DnsResolvingHostname: pulumi.String("string"),
IpAddress: pulumi.String("string"),
IpSelection: pulumi.String("string"),
},
MaximumConcurrentIkeNegotiations: pulumi.Float64(0),
MaximumConcurrentTunnels: pulumi.Float64(0),
OfficeMode: &checkpoint.ManagementSimpleGatewayVpnSettingsOfficeModeArgs{
AllocateIpAddressFrom: &checkpoint.ManagementSimpleGatewayVpnSettingsOfficeModeAllocateIpAddressFromArgs{
AllocateMethod: pulumi.String("string"),
DhcpMacAddress: pulumi.String("string"),
DhcpServer: pulumi.String("string"),
ManualNetwork: pulumi.String("string"),
OptionalParameters: &checkpoint.ManagementSimpleGatewayVpnSettingsOfficeModeAllocateIpAddressFromOptionalParametersArgs{
DnsSuffixes: pulumi.String("string"),
FirstBackupDnsServer: pulumi.String("string"),
FirstBackupWinsServer: pulumi.String("string"),
IpLeaseDuration: pulumi.Float64(0),
PrimaryDnsServer: pulumi.String("string"),
PrimaryWinsServer: pulumi.String("string"),
SecondBackupDnsServer: pulumi.String("string"),
SecondBackupWinsServer: pulumi.String("string"),
UseFirstBackupDnsServer: pulumi.Bool(false),
UseFirstBackupWinsServer: pulumi.Bool(false),
UsePrimaryDnsServer: pulumi.Bool(false),
UsePrimaryWinsServer: pulumi.Bool(false),
UseSecondBackupDnsServer: pulumi.Bool(false),
UseSecondBackupWinsServer: pulumi.Bool(false),
},
RadiusServer: pulumi.Bool(false),
UseAllocateMethod: pulumi.Bool(false),
VirtualIpAddress: pulumi.String("string"),
},
AntiSpoofingAdditionalAddresses: pulumi.String("string"),
Group: pulumi.String("string"),
Mode: pulumi.String("string"),
PerformAntiSpoofing: pulumi.Bool(false),
SupportMultipleInterfaces: pulumi.Bool(false),
},
RemoteAccess: &checkpoint.ManagementSimpleGatewayVpnSettingsRemoteAccessArgs{
AllowVpnClientsToRouteTraffic: pulumi.Bool(false),
L2tpAuthMethod: pulumi.String("string"),
L2tpCertificate: pulumi.String("string"),
NatTraversalService: pulumi.String("string"),
SupportL2tp: pulumi.Bool(false),
SupportNatTraversalMechanism: pulumi.Bool(false),
SupportVisitorMode: pulumi.Bool(false),
VisitorModeInterface: pulumi.String("string"),
VisitorModeService: pulumi.String("string"),
},
VpnDomain: pulumi.String("string"),
VpnDomainExcludeExternalIpAddresses: pulumi.Bool(false),
VpnDomainType: pulumi.String("string"),
},
ZeroPhishing: pulumi.Bool(false),
ZeroPhishingFqdn: pulumi.String("string"),
})
var managementSimpleGatewayResource = new ManagementSimpleGateway("managementSimpleGatewayResource", ManagementSimpleGatewayArgs.builder()
.advancedSettings(ManagementSimpleGatewayAdvancedSettingsArgs.builder()
.connectionPersistence("string")
.sam(ManagementSimpleGatewayAdvancedSettingsSamArgs.builder()
.forwardToOtherSamServers(false)
.purgeSamFile(ManagementSimpleGatewayAdvancedSettingsSamPurgeSamFileArgs.builder()
.enabled(false)
.purgeWhenSizeReachesTo(0.0)
.build())
.useEarlyVersions(ManagementSimpleGatewayAdvancedSettingsSamUseEarlyVersionsArgs.builder()
.compatibilityMode("string")
.enabled(false)
.build())
.build())
.build())
.antiBot(false)
.antiVirus(false)
.applicationControl(false)
.applicationControlAndUrlFilteringSettings(ManagementSimpleGatewayApplicationControlAndUrlFilteringSettingsArgs.builder()
.globalSettingsMode("string")
.overrideGlobalSettings(ManagementSimpleGatewayApplicationControlAndUrlFilteringSettingsOverrideGlobalSettingsArgs.builder()
.failMode("string")
.websiteCategorization(ManagementSimpleGatewayApplicationControlAndUrlFilteringSettingsOverrideGlobalSettingsWebsiteCategorizationArgs.builder()
.customMode(ManagementSimpleGatewayApplicationControlAndUrlFilteringSettingsOverrideGlobalSettingsWebsiteCategorizationCustomModeArgs.builder()
.socialNetworkingWidgets("string")
.urlFiltering("string")
.build())
.mode("string")
.build())
.build())
.build())
.color("string")
.comments("string")
.contentAwareness(false)
.enableHttpsInspection(false)
.fetchPolicies("string")
.firewall(false)
.firewallSettings(ManagementSimpleGatewayFirewallSettingsArgs.builder()
.autoCalculateConnectionsHashTableSizeAndMemoryPool(false)
.autoMaximumLimitForConcurrentConnections(false)
.connectionsHashSize(0.0)
.maximumLimitForConcurrentConnections(0.0)
.maximumMemoryPoolSize(0.0)
.memoryPoolSize(0.0)
.build())
.hitCount(false)
.httpsInspection(ManagementSimpleGatewayHttpsInspectionArgs.builder()
.bypassOnFailure(ManagementSimpleGatewayHttpsInspectionBypassOnFailureArgs.builder()
.overrideProfile(false)
.value(false)
.build())
.denyExpiredServerCert(ManagementSimpleGatewayHttpsInspectionDenyExpiredServerCertArgs.builder()
.overrideProfile(false)
.value(false)
.build())
.denyRevokedServerCert(ManagementSimpleGatewayHttpsInspectionDenyRevokedServerCertArgs.builder()
.overrideProfile(false)
.value(false)
.build())
.denyUntrustedServerCert(ManagementSimpleGatewayHttpsInspectionDenyUntrustedServerCertArgs.builder()
.overrideProfile(false)
.value(false)
.build())
.siteCategorizationAllowMode(ManagementSimpleGatewayHttpsInspectionSiteCategorizationAllowModeArgs.builder()
.overrideProfile(false)
.value("string")
.build())
.build())
.icapServer(false)
.identityAwareness(false)
.identityAwarenessSettings(ManagementSimpleGatewayIdentityAwarenessSettingsArgs.builder()
.browserBasedAuthentication(false)
.browserBasedAuthenticationSettings(ManagementSimpleGatewayIdentityAwarenessSettingsBrowserBasedAuthenticationSettingsArgs.builder()
.authenticationSettings(ManagementSimpleGatewayIdentityAwarenessSettingsBrowserBasedAuthenticationSettingsAuthenticationSettingsArgs.builder()
.authenticationMethod("string")
.identityProviders("string")
.radius("string")
.usersDirectories(ManagementSimpleGatewayIdentityAwarenessSettingsBrowserBasedAuthenticationSettingsAuthenticationSettingsUsersDirectoriesArgs.builder()
.externalUserProfile(false)
.internalUsers(false)
.specifics("string")
.usersFromExternalDirectories("string")
.build())
.build())
.browserBasedAuthenticationPortalSettings(ManagementSimpleGatewayIdentityAwarenessSettingsBrowserBasedAuthenticationSettingsBrowserBasedAuthenticationPortalSettingsArgs.builder()
.accessibility(ManagementSimpleGatewayIdentityAwarenessSettingsBrowserBasedAuthenticationSettingsBrowserBasedAuthenticationPortalSettingsAccessibilityArgs.builder()
.allowAccessFrom("string")
.internalAccessSettings(ManagementSimpleGatewayIdentityAwarenessSettingsBrowserBasedAuthenticationSettingsBrowserBasedAuthenticationPortalSettingsAccessibilityInternalAccessSettingsArgs.builder()
.dmz(false)
.undefined(false)
.vpn(false)
.build())
.build())
.certificateSettings(ManagementSimpleGatewayIdentityAwarenessSettingsBrowserBasedAuthenticationSettingsBrowserBasedAuthenticationPortalSettingsCertificateSettingsArgs.builder()
.base64Certificate("string")
.base64Password("string")
.build())
.portalWebSettings(ManagementSimpleGatewayIdentityAwarenessSettingsBrowserBasedAuthenticationSettingsBrowserBasedAuthenticationPortalSettingsPortalWebSettingsArgs.builder()
.aliases("string")
.mainUrl("string")
.build())
.build())
.build())
.identityAgent(false)
.identityAgentSettings(ManagementSimpleGatewayIdentityAwarenessSettingsIdentityAgentSettingsArgs.builder()
.agentsIntervalKeepalive(0.0)
.authenticationSettings(ManagementSimpleGatewayIdentityAwarenessSettingsIdentityAgentSettingsAuthenticationSettingsArgs.builder()
.authenticationMethod("string")
.radius("string")
.usersDirectories(ManagementSimpleGatewayIdentityAwarenessSettingsIdentityAgentSettingsAuthenticationSettingsUsersDirectoriesArgs.builder()
.externalUserProfile(false)
.internalUsers(false)
.specifics("string")
.usersFromExternalDirectories("string")
.build())
.build())
.identityAgentPortalSettings(ManagementSimpleGatewayIdentityAwarenessSettingsIdentityAgentSettingsIdentityAgentPortalSettingsArgs.builder()
.accessibility(ManagementSimpleGatewayIdentityAwarenessSettingsIdentityAgentSettingsIdentityAgentPortalSettingsAccessibilityArgs.builder()
.allowAccessFrom("string")
.internalAccessSettings(ManagementSimpleGatewayIdentityAwarenessSettingsIdentityAgentSettingsIdentityAgentPortalSettingsAccessibilityInternalAccessSettingsArgs.builder()
.dmz(false)
.undefined(false)
.vpn(false)
.build())
.build())
.build())
.userReauthenticateInterval(0.0)
.build())
.identityCollector(false)
.identityCollectorSettings(ManagementSimpleGatewayIdentityAwarenessSettingsIdentityCollectorSettingsArgs.builder()
.authorizedClients(ManagementSimpleGatewayIdentityAwarenessSettingsIdentityCollectorSettingsAuthorizedClientArgs.builder()
.client("string")
.clientSecret("string")
.build())
.authenticationSettings(ManagementSimpleGatewayIdentityAwarenessSettingsIdentityCollectorSettingsAuthenticationSettingsArgs.builder()
.usersDirectories(ManagementSimpleGatewayIdentityAwarenessSettingsIdentityCollectorSettingsAuthenticationSettingsUsersDirectoriesArgs.builder()
.externalUserProfile(false)
.internalUsers(false)
.specifics("string")
.usersFromExternalDirectories("string")
.build())
.build())
.clientAccessPermissions(ManagementSimpleGatewayIdentityAwarenessSettingsIdentityCollectorSettingsClientAccessPermissionsArgs.builder()
.accessibility(ManagementSimpleGatewayIdentityAwarenessSettingsIdentityCollectorSettingsClientAccessPermissionsAccessibilityArgs.builder()
.allowAccessFrom("string")
.internalAccessSettings(ManagementSimpleGatewayIdentityAwarenessSettingsIdentityCollectorSettingsClientAccessPermissionsAccessibilityInternalAccessSettingsArgs.builder()
.dmz(false)
.undefined(false)
.vpn(false)
.build())
.build())
.build())
.build())
.identitySharingSettings(ManagementSimpleGatewayIdentityAwarenessSettingsIdentitySharingSettingsArgs.builder()
.receiveFromOtherGateways(false)
.receiveFroms("string")
.shareWithOtherGateways(false)
.build())
.proxySettings(ManagementSimpleGatewayIdentityAwarenessSettingsProxySettingsArgs.builder()
.detectUsingXForwardFor(false)
.build())
.remoteAccess(false)
.build())
.ignoreWarnings(false)
.interfaces(ManagementSimpleGatewayInterfaceArgs.builder()
.name("string")
.ipv6MaskLength("string")
.securityZone(false)
.comments("string")
.ipv4Address("string")
.ipv4MaskLength("string")
.ipv4NetworkMask("string")
.color("string")
.ipv6NetworkMask("string")
.ipv6Address("string")
.antiSpoofingSettings(ManagementSimpleGatewayInterfaceAntiSpoofingSettingsArgs.builder()
.action("string")
.build())
.antiSpoofing(false)
.securityZoneSettings(ManagementSimpleGatewayInterfaceSecurityZoneSettingsArgs.builder()
.autoCalculated(false)
.specificZone("string")
.build())
.topology("string")
.topologyAutomaticCalculation("string")
.topologySettings(ManagementSimpleGatewayInterfaceTopologySettingsArgs.builder()
.interfaceLeadsToDmz(false)
.ipAddressBehindThisInterface("string")
.specificNetwork("string")
.build())
.build())
.ips(false)
.ipsSettings(ManagementSimpleGatewayIpsSettingsArgs.builder()
.activationMode("string")
.bypassAllUnderLoad(false)
.bypassTrackMethod("string")
.cpuUsageHighThreshold(0.0)
.cpuUsageLowThreshold(0.0)
.memoryUsageHighThreshold(0.0)
.memoryUsageLowThreshold(0.0)
.sendThreatCloudInfo(false)
.topCpuConsumingProtections(ManagementSimpleGatewayIpsSettingsTopCpuConsumingProtectionsArgs.builder()
.disablePeriod(0.0)
.disableUnderLoad(false)
.build())
.build())
.ipsUpdatePolicy("string")
.ipv4Address("string")
.ipv6Address("string")
.logsSettings(ManagementSimpleGatewayLogsSettingsArgs.builder()
.alertWhenFreeDiskSpaceBelow(false)
.alertWhenFreeDiskSpaceBelowMetrics("string")
.alertWhenFreeDiskSpaceBelowThreshold(0.0)
.alertWhenFreeDiskSpaceBelowType("string")
.beforeDeleteKeepLogsFromTheLastDays(false)
.beforeDeleteKeepLogsFromTheLastDaysThreshold(0.0)
.beforeDeleteRunScript(false)
.beforeDeleteRunScriptCommand("string")
.deleteIndexFilesOlderThanDays(false)
.deleteIndexFilesOlderThanDaysThreshold(0.0)
.deleteIndexFilesWhenIndexSizeAbove(false)
.deleteIndexFilesWhenIndexSizeAboveMetrics("string")
.deleteIndexFilesWhenIndexSizeAboveThreshold(0.0)
.deleteWhenFreeDiskSpaceBelow(false)
.deleteWhenFreeDiskSpaceBelowMetrics("string")
.deleteWhenFreeDiskSpaceBelowThreshold(0.0)
.detectNewCitrixIcaApplicationNames(false)
.forwardLogsToLogServer(false)
.forwardLogsToLogServerName("string")
.forwardLogsToLogServerScheduleName("string")
.performLogRotateBeforeLogForwarding(false)
.rejectConnectionsWhenFreeDiskSpaceBelowThreshold(false)
.reserveForPacketCaptureMetrics("string")
.reserveForPacketCaptureThreshold(0.0)
.rotateLogByFileSize(false)
.rotateLogFileSizeThreshold(0.0)
.rotateLogOnSchedule(false)
.rotateLogScheduleName("string")
.stopLoggingWhenFreeDiskSpaceBelow(false)
.stopLoggingWhenFreeDiskSpaceBelowMetrics("string")
.stopLoggingWhenFreeDiskSpaceBelowThreshold(0.0)
.turnOnQosLogging(false)
.updateAccountLogEvery(0.0)
.build())
.managementSimpleGatewayId("string")
.name("string")
.natHideInternalInterfaces(false)
.natSettings(ManagementSimpleGatewayNatSettingsArgs.builder()
.autoRule(false)
.hideBehind("string")
.installOn("string")
.ipv4Address("string")
.ipv6Address("string")
.method("string")
.build())
.oneTimePassword("string")
.osName("string")
.platformPortalSettings(ManagementSimpleGatewayPlatformPortalSettingsArgs.builder()
.accessibility(ManagementSimpleGatewayPlatformPortalSettingsAccessibilityArgs.builder()
.allowAccessFrom("string")
.internalAccessSettings(ManagementSimpleGatewayPlatformPortalSettingsAccessibilityInternalAccessSettingsArgs.builder()
.dmz(false)
.undefined(false)
.vpn(false)
.build())
.build())
.certificateSettings(ManagementSimpleGatewayPlatformPortalSettingsCertificateSettingsArgs.builder()
.base64Certificate("string")
.base64Password("string")
.build())
.portalWebSettings(ManagementSimpleGatewayPlatformPortalSettingsPortalWebSettingsArgs.builder()
.aliases("string")
.mainUrl("string")
.build())
.build())
.proxySettings(ManagementSimpleGatewayProxySettingsArgs.builder()
.port(0.0)
.proxyServer("string")
.useCustomProxy(false)
.build())
.qos(false)
.saveLogsLocally(false)
.sendAlertsToServers("string")
.sendLogsToBackupServers("string")
.sendLogsToServers("string")
.tags("string")
.threatEmulation(false)
.threatExtraction(false)
.urlFiltering(false)
.usercheckPortalSettings(ManagementSimpleGatewayUsercheckPortalSettingsArgs.builder()
.accessibility(ManagementSimpleGatewayUsercheckPortalSettingsAccessibilityArgs.builder()
.allowAccessFrom("string")
.internalAccessSettings(ManagementSimpleGatewayUsercheckPortalSettingsAccessibilityInternalAccessSettingsArgs.builder()
.dmz(false)
.undefined(false)
.vpn(false)
.build())
.build())
.certificateSettings(ManagementSimpleGatewayUsercheckPortalSettingsCertificateSettingsArgs.builder()
.base64Certificate("string")
.base64Password("string")
.build())
.enabled(false)
.portalWebSettings(ManagementSimpleGatewayUsercheckPortalSettingsPortalWebSettingsArgs.builder()
.aliases("string")
.mainUrl("string")
.build())
.build())
.version("string")
.vpn(false)
.vpnSettings(ManagementSimpleGatewayVpnSettingsArgs.builder()
.authentication(ManagementSimpleGatewayVpnSettingsAuthenticationArgs.builder()
.authenticationClients("string")
.build())
.linkSelection(ManagementSimpleGatewayVpnSettingsLinkSelectionArgs.builder()
.dnsResolvingHostname("string")
.ipAddress("string")
.ipSelection("string")
.build())
.maximumConcurrentIkeNegotiations(0.0)
.maximumConcurrentTunnels(0.0)
.officeMode(ManagementSimpleGatewayVpnSettingsOfficeModeArgs.builder()
.allocateIpAddressFrom(ManagementSimpleGatewayVpnSettingsOfficeModeAllocateIpAddressFromArgs.builder()
.allocateMethod("string")
.dhcpMacAddress("string")
.dhcpServer("string")
.manualNetwork("string")
.optionalParameters(ManagementSimpleGatewayVpnSettingsOfficeModeAllocateIpAddressFromOptionalParametersArgs.builder()
.dnsSuffixes("string")
.firstBackupDnsServer("string")
.firstBackupWinsServer("string")
.ipLeaseDuration(0.0)
.primaryDnsServer("string")
.primaryWinsServer("string")
.secondBackupDnsServer("string")
.secondBackupWinsServer("string")
.useFirstBackupDnsServer(false)
.useFirstBackupWinsServer(false)
.usePrimaryDnsServer(false)
.usePrimaryWinsServer(false)
.useSecondBackupDnsServer(false)
.useSecondBackupWinsServer(false)
.build())
.radiusServer(false)
.useAllocateMethod(false)
.virtualIpAddress("string")
.build())
.antiSpoofingAdditionalAddresses("string")
.group("string")
.mode("string")
.performAntiSpoofing(false)
.supportMultipleInterfaces(false)
.build())
.remoteAccess(ManagementSimpleGatewayVpnSettingsRemoteAccessArgs.builder()
.allowVpnClientsToRouteTraffic(false)
.l2tpAuthMethod("string")
.l2tpCertificate("string")
.natTraversalService("string")
.supportL2tp(false)
.supportNatTraversalMechanism(false)
.supportVisitorMode(false)
.visitorModeInterface("string")
.visitorModeService("string")
.build())
.vpnDomain("string")
.vpnDomainExcludeExternalIpAddresses(false)
.vpnDomainType("string")
.build())
.zeroPhishing(false)
.zeroPhishingFqdn("string")
.build());
management_simple_gateway_resource = checkpoint.ManagementSimpleGateway("managementSimpleGatewayResource",
advanced_settings={
"connection_persistence": "string",
"sam": {
"forward_to_other_sam_servers": False,
"purge_sam_file": {
"enabled": False,
"purge_when_size_reaches_to": float(0),
},
"use_early_versions": {
"compatibility_mode": "string",
"enabled": False,
},
},
},
anti_bot=False,
anti_virus=False,
application_control=False,
application_control_and_url_filtering_settings={
"global_settings_mode": "string",
"override_global_settings": {
"fail_mode": "string",
"website_categorization": {
"custom_mode": {
"social_networking_widgets": "string",
"url_filtering": "string",
},
"mode": "string",
},
},
},
color="string",
comments="string",
content_awareness=False,
enable_https_inspection=False,
fetch_policies=["string"],
firewall=False,
firewall_settings={
"auto_calculate_connections_hash_table_size_and_memory_pool": False,
"auto_maximum_limit_for_concurrent_connections": False,
"connections_hash_size": float(0),
"maximum_limit_for_concurrent_connections": float(0),
"maximum_memory_pool_size": float(0),
"memory_pool_size": float(0),
},
hit_count=False,
https_inspection={
"bypass_on_failure": {
"override_profile": False,
"value": False,
},
"deny_expired_server_cert": {
"override_profile": False,
"value": False,
},
"deny_revoked_server_cert": {
"override_profile": False,
"value": False,
},
"deny_untrusted_server_cert": {
"override_profile": False,
"value": False,
},
"site_categorization_allow_mode": {
"override_profile": False,
"value": "string",
},
},
icap_server=False,
identity_awareness=False,
identity_awareness_settings={
"browser_based_authentication": False,
"browser_based_authentication_settings": {
"authentication_settings": {
"authentication_method": "string",
"identity_providers": ["string"],
"radius": "string",
"users_directories": {
"external_user_profile": False,
"internal_users": False,
"specifics": ["string"],
"users_from_external_directories": "string",
},
},
"browser_based_authentication_portal_settings": {
"accessibility": {
"allow_access_from": "string",
"internal_access_settings": {
"dmz": False,
"undefined": False,
"vpn": False,
},
},
"certificate_settings": {
"base64_certificate": "string",
"base64_password": "string",
},
"portal_web_settings": {
"aliases": ["string"],
"main_url": "string",
},
},
},
"identity_agent": False,
"identity_agent_settings": {
"agents_interval_keepalive": float(0),
"authentication_settings": {
"authentication_method": "string",
"radius": "string",
"users_directories": {
"external_user_profile": False,
"internal_users": False,
"specifics": ["string"],
"users_from_external_directories": "string",
},
},
"identity_agent_portal_settings": {
"accessibility": {
"allow_access_from": "string",
"internal_access_settings": {
"dmz": False,
"undefined": False,
"vpn": False,
},
},
},
"user_reauthenticate_interval": float(0),
},
"identity_collector": False,
"identity_collector_settings": {
"authorized_clients": [{
"client": "string",
"client_secret": "string",
}],
"authentication_settings": {
"users_directories": {
"external_user_profile": False,
"internal_users": False,
"specifics": ["string"],
"users_from_external_directories": "string",
},
},
"client_access_permissions": {
"accessibility": {
"allow_access_from": "string",
"internal_access_settings": {
"dmz": False,
"undefined": False,
"vpn": False,
},
},
},
},
"identity_sharing_settings": {
"receive_from_other_gateways": False,
"receive_froms": ["string"],
"share_with_other_gateways": False,
},
"proxy_settings": {
"detect_using_x_forward_for": False,
},
"remote_access": False,
},
ignore_warnings=False,
interfaces=[{
"name": "string",
"ipv6_mask_length": "string",
"security_zone": False,
"comments": "string",
"ipv4_address": "string",
"ipv4_mask_length": "string",
"ipv4_network_mask": "string",
"color": "string",
"ipv6_network_mask": "string",
"ipv6_address": "string",
"anti_spoofing_settings": {
"action": "string",
},
"anti_spoofing": False,
"security_zone_settings": {
"auto_calculated": False,
"specific_zone": "string",
},
"topology": "string",
"topology_automatic_calculation": "string",
"topology_settings": {
"interface_leads_to_dmz": False,
"ip_address_behind_this_interface": "string",
"specific_network": "string",
},
}],
ips=False,
ips_settings={
"activation_mode": "string",
"bypass_all_under_load": False,
"bypass_track_method": "string",
"cpu_usage_high_threshold": float(0),
"cpu_usage_low_threshold": float(0),
"memory_usage_high_threshold": float(0),
"memory_usage_low_threshold": float(0),
"send_threat_cloud_info": False,
"top_cpu_consuming_protections": {
"disable_period": float(0),
"disable_under_load": False,
},
},
ips_update_policy="string",
ipv4_address="string",
ipv6_address="string",
logs_settings={
"alert_when_free_disk_space_below": False,
"alert_when_free_disk_space_below_metrics": "string",
"alert_when_free_disk_space_below_threshold": float(0),
"alert_when_free_disk_space_below_type": "string",
"before_delete_keep_logs_from_the_last_days": False,
"before_delete_keep_logs_from_the_last_days_threshold": float(0),
"before_delete_run_script": False,
"before_delete_run_script_command": "string",
"delete_index_files_older_than_days": False,
"delete_index_files_older_than_days_threshold": float(0),
"delete_index_files_when_index_size_above": False,
"delete_index_files_when_index_size_above_metrics": "string",
"delete_index_files_when_index_size_above_threshold": float(0),
"delete_when_free_disk_space_below": False,
"delete_when_free_disk_space_below_metrics": "string",
"delete_when_free_disk_space_below_threshold": float(0),
"detect_new_citrix_ica_application_names": False,
"forward_logs_to_log_server": False,
"forward_logs_to_log_server_name": "string",
"forward_logs_to_log_server_schedule_name": "string",
"perform_log_rotate_before_log_forwarding": False,
"reject_connections_when_free_disk_space_below_threshold": False,
"reserve_for_packet_capture_metrics": "string",
"reserve_for_packet_capture_threshold": float(0),
"rotate_log_by_file_size": False,
"rotate_log_file_size_threshold": float(0),
"rotate_log_on_schedule": False,
"rotate_log_schedule_name": "string",
"stop_logging_when_free_disk_space_below": False,
"stop_logging_when_free_disk_space_below_metrics": "string",
"stop_logging_when_free_disk_space_below_threshold": float(0),
"turn_on_qos_logging": False,
"update_account_log_every": float(0),
},
management_simple_gateway_id="string",
name="string",
nat_hide_internal_interfaces=False,
nat_settings={
"auto_rule": False,
"hide_behind": "string",
"install_on": "string",
"ipv4_address": "string",
"ipv6_address": "string",
"method": "string",
},
one_time_password="string",
os_name="string",
platform_portal_settings={
"accessibility": {
"allow_access_from": "string",
"internal_access_settings": {
"dmz": False,
"undefined": False,
"vpn": False,
},
},
"certificate_settings": {
"base64_certificate": "string",
"base64_password": "string",
},
"portal_web_settings": {
"aliases": ["string"],
"main_url": "string",
},
},
proxy_settings={
"port": float(0),
"proxy_server": "string",
"use_custom_proxy": False,
},
qos=False,
save_logs_locally=False,
send_alerts_to_servers=["string"],
send_logs_to_backup_servers=["string"],
send_logs_to_servers=["string"],
tags=["string"],
threat_emulation=False,
threat_extraction=False,
url_filtering=False,
usercheck_portal_settings={
"accessibility": {
"allow_access_from": "string",
"internal_access_settings": {
"dmz": False,
"undefined": False,
"vpn": False,
},
},
"certificate_settings": {
"base64_certificate": "string",
"base64_password": "string",
},
"enabled": False,
"portal_web_settings": {
"aliases": ["string"],
"main_url": "string",
},
},
version="string",
vpn=False,
vpn_settings={
"authentication": {
"authentication_clients": ["string"],
},
"link_selection": {
"dns_resolving_hostname": "string",
"ip_address": "string",
"ip_selection": "string",
},
"maximum_concurrent_ike_negotiations": float(0),
"maximum_concurrent_tunnels": float(0),
"office_mode": {
"allocate_ip_address_from": {
"allocate_method": "string",
"dhcp_mac_address": "string",
"dhcp_server": "string",
"manual_network": "string",
"optional_parameters": {
"dns_suffixes": "string",
"first_backup_dns_server": "string",
"first_backup_wins_server": "string",
"ip_lease_duration": float(0),
"primary_dns_server": "string",
"primary_wins_server": "string",
"second_backup_dns_server": "string",
"second_backup_wins_server": "string",
"use_first_backup_dns_server": False,
"use_first_backup_wins_server": False,
"use_primary_dns_server": False,
"use_primary_wins_server": False,
"use_second_backup_dns_server": False,
"use_second_backup_wins_server": False,
},
"radius_server": False,
"use_allocate_method": False,
"virtual_ip_address": "string",
},
"anti_spoofing_additional_addresses": "string",
"group": "string",
"mode": "string",
"perform_anti_spoofing": False,
"support_multiple_interfaces": False,
},
"remote_access": {
"allow_vpn_clients_to_route_traffic": False,
"l2tp_auth_method": "string",
"l2tp_certificate": "string",
"nat_traversal_service": "string",
"support_l2tp": False,
"support_nat_traversal_mechanism": False,
"support_visitor_mode": False,
"visitor_mode_interface": "string",
"visitor_mode_service": "string",
},
"vpn_domain": "string",
"vpn_domain_exclude_external_ip_addresses": False,
"vpn_domain_type": "string",
},
zero_phishing=False,
zero_phishing_fqdn="string")
const managementSimpleGatewayResource = new checkpoint.ManagementSimpleGateway("managementSimpleGatewayResource", {
advancedSettings: {
connectionPersistence: "string",
sam: {
forwardToOtherSamServers: false,
purgeSamFile: {
enabled: false,
purgeWhenSizeReachesTo: 0,
},
useEarlyVersions: {
compatibilityMode: "string",
enabled: false,
},
},
},
antiBot: false,
antiVirus: false,
applicationControl: false,
applicationControlAndUrlFilteringSettings: {
globalSettingsMode: "string",
overrideGlobalSettings: {
failMode: "string",
websiteCategorization: {
customMode: {
socialNetworkingWidgets: "string",
urlFiltering: "string",
},
mode: "string",
},
},
},
color: "string",
comments: "string",
contentAwareness: false,
enableHttpsInspection: false,
fetchPolicies: ["string"],
firewall: false,
firewallSettings: {
autoCalculateConnectionsHashTableSizeAndMemoryPool: false,
autoMaximumLimitForConcurrentConnections: false,
connectionsHashSize: 0,
maximumLimitForConcurrentConnections: 0,
maximumMemoryPoolSize: 0,
memoryPoolSize: 0,
},
hitCount: false,
httpsInspection: {
bypassOnFailure: {
overrideProfile: false,
value: false,
},
denyExpiredServerCert: {
overrideProfile: false,
value: false,
},
denyRevokedServerCert: {
overrideProfile: false,
value: false,
},
denyUntrustedServerCert: {
overrideProfile: false,
value: false,
},
siteCategorizationAllowMode: {
overrideProfile: false,
value: "string",
},
},
icapServer: false,
identityAwareness: false,
identityAwarenessSettings: {
browserBasedAuthentication: false,
browserBasedAuthenticationSettings: {
authenticationSettings: {
authenticationMethod: "string",
identityProviders: ["string"],
radius: "string",
usersDirectories: {
externalUserProfile: false,
internalUsers: false,
specifics: ["string"],
usersFromExternalDirectories: "string",
},
},
browserBasedAuthenticationPortalSettings: {
accessibility: {
allowAccessFrom: "string",
internalAccessSettings: {
dmz: false,
undefined: false,
vpn: false,
},
},
certificateSettings: {
base64Certificate: "string",
base64Password: "string",
},
portalWebSettings: {
aliases: ["string"],
mainUrl: "string",
},
},
},
identityAgent: false,
identityAgentSettings: {
agentsIntervalKeepalive: 0,
authenticationSettings: {
authenticationMethod: "string",
radius: "string",
usersDirectories: {
externalUserProfile: false,
internalUsers: false,
specifics: ["string"],
usersFromExternalDirectories: "string",
},
},
identityAgentPortalSettings: {
accessibility: {
allowAccessFrom: "string",
internalAccessSettings: {
dmz: false,
undefined: false,
vpn: false,
},
},
},
userReauthenticateInterval: 0,
},
identityCollector: false,
identityCollectorSettings: {
authorizedClients: [{
client: "string",
clientSecret: "string",
}],
authenticationSettings: {
usersDirectories: {
externalUserProfile: false,
internalUsers: false,
specifics: ["string"],
usersFromExternalDirectories: "string",
},
},
clientAccessPermissions: {
accessibility: {
allowAccessFrom: "string",
internalAccessSettings: {
dmz: false,
undefined: false,
vpn: false,
},
},
},
},
identitySharingSettings: {
receiveFromOtherGateways: false,
receiveFroms: ["string"],
shareWithOtherGateways: false,
},
proxySettings: {
detectUsingXForwardFor: false,
},
remoteAccess: false,
},
ignoreWarnings: false,
interfaces: [{
name: "string",
ipv6MaskLength: "string",
securityZone: false,
comments: "string",
ipv4Address: "string",
ipv4MaskLength: "string",
ipv4NetworkMask: "string",
color: "string",
ipv6NetworkMask: "string",
ipv6Address: "string",
antiSpoofingSettings: {
action: "string",
},
antiSpoofing: false,
securityZoneSettings: {
autoCalculated: false,
specificZone: "string",
},
topology: "string",
topologyAutomaticCalculation: "string",
topologySettings: {
interfaceLeadsToDmz: false,
ipAddressBehindThisInterface: "string",
specificNetwork: "string",
},
}],
ips: false,
ipsSettings: {
activationMode: "string",
bypassAllUnderLoad: false,
bypassTrackMethod: "string",
cpuUsageHighThreshold: 0,
cpuUsageLowThreshold: 0,
memoryUsageHighThreshold: 0,
memoryUsageLowThreshold: 0,
sendThreatCloudInfo: false,
topCpuConsumingProtections: {
disablePeriod: 0,
disableUnderLoad: false,
},
},
ipsUpdatePolicy: "string",
ipv4Address: "string",
ipv6Address: "string",
logsSettings: {
alertWhenFreeDiskSpaceBelow: false,
alertWhenFreeDiskSpaceBelowMetrics: "string",
alertWhenFreeDiskSpaceBelowThreshold: 0,
alertWhenFreeDiskSpaceBelowType: "string",
beforeDeleteKeepLogsFromTheLastDays: false,
beforeDeleteKeepLogsFromTheLastDaysThreshold: 0,
beforeDeleteRunScript: false,
beforeDeleteRunScriptCommand: "string",
deleteIndexFilesOlderThanDays: false,
deleteIndexFilesOlderThanDaysThreshold: 0,
deleteIndexFilesWhenIndexSizeAbove: false,
deleteIndexFilesWhenIndexSizeAboveMetrics: "string",
deleteIndexFilesWhenIndexSizeAboveThreshold: 0,
deleteWhenFreeDiskSpaceBelow: false,
deleteWhenFreeDiskSpaceBelowMetrics: "string",
deleteWhenFreeDiskSpaceBelowThreshold: 0,
detectNewCitrixIcaApplicationNames: false,
forwardLogsToLogServer: false,
forwardLogsToLogServerName: "string",
forwardLogsToLogServerScheduleName: "string",
performLogRotateBeforeLogForwarding: false,
rejectConnectionsWhenFreeDiskSpaceBelowThreshold: false,
reserveForPacketCaptureMetrics: "string",
reserveForPacketCaptureThreshold: 0,
rotateLogByFileSize: false,
rotateLogFileSizeThreshold: 0,
rotateLogOnSchedule: false,
rotateLogScheduleName: "string",
stopLoggingWhenFreeDiskSpaceBelow: false,
stopLoggingWhenFreeDiskSpaceBelowMetrics: "string",
stopLoggingWhenFreeDiskSpaceBelowThreshold: 0,
turnOnQosLogging: false,
updateAccountLogEvery: 0,
},
managementSimpleGatewayId: "string",
name: "string",
natHideInternalInterfaces: false,
natSettings: {
autoRule: false,
hideBehind: "string",
installOn: "string",
ipv4Address: "string",
ipv6Address: "string",
method: "string",
},
oneTimePassword: "string",
osName: "string",
platformPortalSettings: {
accessibility: {
allowAccessFrom: "string",
internalAccessSettings: {
dmz: false,
undefined: false,
vpn: false,
},
},
certificateSettings: {
base64Certificate: "string",
base64Password: "string",
},
portalWebSettings: {
aliases: ["string"],
mainUrl: "string",
},
},
proxySettings: {
port: 0,
proxyServer: "string",
useCustomProxy: false,
},
qos: false,
saveLogsLocally: false,
sendAlertsToServers: ["string"],
sendLogsToBackupServers: ["string"],
sendLogsToServers: ["string"],
tags: ["string"],
threatEmulation: false,
threatExtraction: false,
urlFiltering: false,
usercheckPortalSettings: {
accessibility: {
allowAccessFrom: "string",
internalAccessSettings: {
dmz: false,
undefined: false,
vpn: false,
},
},
certificateSettings: {
base64Certificate: "string",
base64Password: "string",
},
enabled: false,
portalWebSettings: {
aliases: ["string"],
mainUrl: "string",
},
},
version: "string",
vpn: false,
vpnSettings: {
authentication: {
authenticationClients: ["string"],
},
linkSelection: {
dnsResolvingHostname: "string",
ipAddress: "string",
ipSelection: "string",
},
maximumConcurrentIkeNegotiations: 0,
maximumConcurrentTunnels: 0,
officeMode: {
allocateIpAddressFrom: {
allocateMethod: "string",
dhcpMacAddress: "string",
dhcpServer: "string",
manualNetwork: "string",
optionalParameters: {
dnsSuffixes: "string",
firstBackupDnsServer: "string",
firstBackupWinsServer: "string",
ipLeaseDuration: 0,
primaryDnsServer: "string",
primaryWinsServer: "string",
secondBackupDnsServer: "string",
secondBackupWinsServer: "string",
useFirstBackupDnsServer: false,
useFirstBackupWinsServer: false,
usePrimaryDnsServer: false,
usePrimaryWinsServer: false,
useSecondBackupDnsServer: false,
useSecondBackupWinsServer: false,
},
radiusServer: false,
useAllocateMethod: false,
virtualIpAddress: "string",
},
antiSpoofingAdditionalAddresses: "string",
group: "string",
mode: "string",
performAntiSpoofing: false,
supportMultipleInterfaces: false,
},
remoteAccess: {
allowVpnClientsToRouteTraffic: false,
l2tpAuthMethod: "string",
l2tpCertificate: "string",
natTraversalService: "string",
supportL2tp: false,
supportNatTraversalMechanism: false,
supportVisitorMode: false,
visitorModeInterface: "string",
visitorModeService: "string",
},
vpnDomain: "string",
vpnDomainExcludeExternalIpAddresses: false,
vpnDomainType: "string",
},
zeroPhishing: false,
zeroPhishingFqdn: "string",
});
type: checkpoint:ManagementSimpleGateway
properties:
advancedSettings:
connectionPersistence: string
sam:
forwardToOtherSamServers: false
purgeSamFile:
enabled: false
purgeWhenSizeReachesTo: 0
useEarlyVersions:
compatibilityMode: string
enabled: false
antiBot: false
antiVirus: false
applicationControl: false
applicationControlAndUrlFilteringSettings:
globalSettingsMode: string
overrideGlobalSettings:
failMode: string
websiteCategorization:
customMode:
socialNetworkingWidgets: string
urlFiltering: string
mode: string
color: string
comments: string
contentAwareness: false
enableHttpsInspection: false
fetchPolicies:
- string
firewall: false
firewallSettings:
autoCalculateConnectionsHashTableSizeAndMemoryPool: false
autoMaximumLimitForConcurrentConnections: false
connectionsHashSize: 0
maximumLimitForConcurrentConnections: 0
maximumMemoryPoolSize: 0
memoryPoolSize: 0
hitCount: false
httpsInspection:
bypassOnFailure:
overrideProfile: false
value: false
denyExpiredServerCert:
overrideProfile: false
value: false
denyRevokedServerCert:
overrideProfile: false
value: false
denyUntrustedServerCert:
overrideProfile: false
value: false
siteCategorizationAllowMode:
overrideProfile: false
value: string
icapServer: false
identityAwareness: false
identityAwarenessSettings:
browserBasedAuthentication: false
browserBasedAuthenticationSettings:
authenticationSettings:
authenticationMethod: string
identityProviders:
- string
radius: string
usersDirectories:
externalUserProfile: false
internalUsers: false
specifics:
- string
usersFromExternalDirectories: string
browserBasedAuthenticationPortalSettings:
accessibility:
allowAccessFrom: string
internalAccessSettings:
dmz: false
undefined: false
vpn: false
certificateSettings:
base64Certificate: string
base64Password: string
portalWebSettings:
aliases:
- string
mainUrl: string
identityAgent: false
identityAgentSettings:
agentsIntervalKeepalive: 0
authenticationSettings:
authenticationMethod: string
radius: string
usersDirectories:
externalUserProfile: false
internalUsers: false
specifics:
- string
usersFromExternalDirectories: string
identityAgentPortalSettings:
accessibility:
allowAccessFrom: string
internalAccessSettings:
dmz: false
undefined: false
vpn: false
userReauthenticateInterval: 0
identityCollector: false
identityCollectorSettings:
authenticationSettings:
usersDirectories:
externalUserProfile: false
internalUsers: false
specifics:
- string
usersFromExternalDirectories: string
authorizedClients:
- client: string
clientSecret: string
clientAccessPermissions:
accessibility:
allowAccessFrom: string
internalAccessSettings:
dmz: false
undefined: false
vpn: false
identitySharingSettings:
receiveFromOtherGateways: false
receiveFroms:
- string
shareWithOtherGateways: false
proxySettings:
detectUsingXForwardFor: false
remoteAccess: false
ignoreWarnings: false
interfaces:
- antiSpoofing: false
antiSpoofingSettings:
action: string
color: string
comments: string
ipv4Address: string
ipv4MaskLength: string
ipv4NetworkMask: string
ipv6Address: string
ipv6MaskLength: string
ipv6NetworkMask: string
name: string
securityZone: false
securityZoneSettings:
autoCalculated: false
specificZone: string
topology: string
topologyAutomaticCalculation: string
topologySettings:
interfaceLeadsToDmz: false
ipAddressBehindThisInterface: string
specificNetwork: string
ips: false
ipsSettings:
activationMode: string
bypassAllUnderLoad: false
bypassTrackMethod: string
cpuUsageHighThreshold: 0
cpuUsageLowThreshold: 0
memoryUsageHighThreshold: 0
memoryUsageLowThreshold: 0
sendThreatCloudInfo: false
topCpuConsumingProtections:
disablePeriod: 0
disableUnderLoad: false
ipsUpdatePolicy: string
ipv4Address: string
ipv6Address: string
logsSettings:
alertWhenFreeDiskSpaceBelow: false
alertWhenFreeDiskSpaceBelowMetrics: string
alertWhenFreeDiskSpaceBelowThreshold: 0
alertWhenFreeDiskSpaceBelowType: string
beforeDeleteKeepLogsFromTheLastDays: false
beforeDeleteKeepLogsFromTheLastDaysThreshold: 0
beforeDeleteRunScript: false
beforeDeleteRunScriptCommand: string
deleteIndexFilesOlderThanDays: false
deleteIndexFilesOlderThanDaysThreshold: 0
deleteIndexFilesWhenIndexSizeAbove: false
deleteIndexFilesWhenIndexSizeAboveMetrics: string
deleteIndexFilesWhenIndexSizeAboveThreshold: 0
deleteWhenFreeDiskSpaceBelow: false
deleteWhenFreeDiskSpaceBelowMetrics: string
deleteWhenFreeDiskSpaceBelowThreshold: 0
detectNewCitrixIcaApplicationNames: false
forwardLogsToLogServer: false
forwardLogsToLogServerName: string
forwardLogsToLogServerScheduleName: string
performLogRotateBeforeLogForwarding: false
rejectConnectionsWhenFreeDiskSpaceBelowThreshold: false
reserveForPacketCaptureMetrics: string
reserveForPacketCaptureThreshold: 0
rotateLogByFileSize: false
rotateLogFileSizeThreshold: 0
rotateLogOnSchedule: false
rotateLogScheduleName: string
stopLoggingWhenFreeDiskSpaceBelow: false
stopLoggingWhenFreeDiskSpaceBelowMetrics: string
stopLoggingWhenFreeDiskSpaceBelowThreshold: 0
turnOnQosLogging: false
updateAccountLogEvery: 0
managementSimpleGatewayId: string
name: string
natHideInternalInterfaces: false
natSettings:
autoRule: false
hideBehind: string
installOn: string
ipv4Address: string
ipv6Address: string
method: string
oneTimePassword: string
osName: string
platformPortalSettings:
accessibility:
allowAccessFrom: string
internalAccessSettings:
dmz: false
undefined: false
vpn: false
certificateSettings:
base64Certificate: string
base64Password: string
portalWebSettings:
aliases:
- string
mainUrl: string
proxySettings:
port: 0
proxyServer: string
useCustomProxy: false
qos: false
saveLogsLocally: false
sendAlertsToServers:
- string
sendLogsToBackupServers:
- string
sendLogsToServers:
- string
tags:
- string
threatEmulation: false
threatExtraction: false
urlFiltering: false
usercheckPortalSettings:
accessibility:
allowAccessFrom: string
internalAccessSettings:
dmz: false
undefined: false
vpn: false
certificateSettings:
base64Certificate: string
base64Password: string
enabled: false
portalWebSettings:
aliases:
- string
mainUrl: string
version: string
vpn: false
vpnSettings:
authentication:
authenticationClients:
- string
linkSelection:
dnsResolvingHostname: string
ipAddress: string
ipSelection: string
maximumConcurrentIkeNegotiations: 0
maximumConcurrentTunnels: 0
officeMode:
allocateIpAddressFrom:
allocateMethod: string
dhcpMacAddress: string
dhcpServer: string
manualNetwork: string
optionalParameters:
dnsSuffixes: string
firstBackupDnsServer: string
firstBackupWinsServer: string
ipLeaseDuration: 0
primaryDnsServer: string
primaryWinsServer: string
secondBackupDnsServer: string
secondBackupWinsServer: string
useFirstBackupDnsServer: false
useFirstBackupWinsServer: false
usePrimaryDnsServer: false
usePrimaryWinsServer: false
useSecondBackupDnsServer: false
useSecondBackupWinsServer: false
radiusServer: false
useAllocateMethod: false
virtualIpAddress: string
antiSpoofingAdditionalAddresses: string
group: string
mode: string
performAntiSpoofing: false
supportMultipleInterfaces: false
remoteAccess:
allowVpnClientsToRouteTraffic: false
l2tpAuthMethod: string
l2tpCertificate: string
natTraversalService: string
supportL2tp: false
supportNatTraversalMechanism: false
supportVisitorMode: false
visitorModeInterface: string
visitorModeService: string
vpnDomain: string
vpnDomainExcludeExternalIpAddresses: false
vpnDomainType: string
zeroPhishing: false
zeroPhishingFqdn: string
ManagementSimpleGateway Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The ManagementSimpleGateway resource accepts the following input properties:
- Advanced
Settings ManagementSimple Gateway Advanced Settings - N/Aadvanced_settings blocks are documented below.
- Anti
Bot bool - Anti-Bot blade enabled.
- Anti
Virus bool - Anti-Virus blade enabled.
- Application
Control bool - Application Control blade enabled.
- Application
Control ManagementAnd Url Filtering Settings Simple Gateway Application Control And Url Filtering Settings - Gateway Application Control and URL filtering settings.application_control_and_url_filtering_settings blocks are documented below.
- Color string
- Color of the object. Should be one of existing colors.
- Comments string
- Comments string.
- Content
Awareness bool - Content Awareness blade enabled.
- Enable
Https boolInspection - Enable HTTPS Inspection after defining an outbound inspection certificate. To define the outbound certificate use outbound inspection certificate API.
- Fetch
Policies List<string> - Security management server(s) to fetch the policy from.fetch_policy blocks are documented below.
- Firewall bool
- Firewall blade enabled.
- Firewall
Settings ManagementSimple Gateway Firewall Settings - N/Afirewall_settings blocks are documented below.
- Hit
Count bool - Hit count tracks the number of connections each rule matches.
- Https
Inspection ManagementSimple Gateway Https Inspection - HTTPS inspection.https_inspection blocks are documented below.
- Icap
Server bool - ICAP Server enabled.
- Identity
Awareness bool - Identity awareness blade enabled.
- Identity
Awareness ManagementSettings Simple Gateway Identity Awareness Settings - Gateway Identity Awareness settings.identity_awareness_settings blocks are documented below.
- Ignore
Warnings bool - Apply changes ignoring warnings.
- Interfaces
List<Management
Simple Gateway Interface> - Network interfaces.interfaces blocks are documented below.
- Ips bool
- Intrusion Prevention System blade enabled.
- Ips
Settings ManagementSimple Gateway Ips Settings - Gateway IPS settings.ips_settings blocks are documented below.
- Ips
Update stringPolicy - Specifies whether the IPS will be downloaded from the Management or directly to the Gateway.
- Ipv4Address string
- IPv4 address.
- Ipv6Address string
- IPv6 address.
- Logs
Settings ManagementSimple Gateway Logs Settings - Logs settings that apply to Quantum Security Gateways that run Gaia OS.logs_settings blocks are documented below.
- Management
Simple stringGateway Id - Name string
- Object name.
- Nat
Hide boolInternal Interfaces - Hide internal networks behind the Gateway's external IP.
- Nat
Settings ManagementSimple Gateway Nat Settings - NAT settings.nat_settings blocks are documented below.
- One
Time stringPassword - N/A
- Os
Name string - Gateway platform operating system.
- Platform
Portal ManagementSettings Simple Gateway Platform Portal Settings - Platform portal settings.platform_portal_settings blocks are documented below.
- Proxy
Settings ManagementSimple Gateway Proxy Settings - Proxy Server for Gateway.proxy_settings blocks are documented below.
- Qos bool
- QoS.
- Save
Logs boolLocally - Save logs locally on the gateway.
- Send
Alerts List<string>To Servers - Server(s) to send alerts to.send_alerts_to_server blocks are documented below.
- Send
Logs List<string>To Backup Servers - Backup server(s) to send logs to.send_logs_to_backup_server blocks are documented below.
- Send
Logs List<string>To Servers - Server(s) to send logs to.send_logs_to_server blocks are documented below.
- List<string>
- Collection of tag identifiers.tags blocks are documented below.
- Threat
Emulation bool - Threat Emulation blade enabled.
- Threat
Extraction bool - Threat Extraction blade enabled.
- Url
Filtering bool - URL Filtering blade enabled.
- Usercheck
Portal ManagementSettings Simple Gateway Usercheck Portal Settings - UserCheck portal settings.usercheck_portal_settings blocks are documented below.
- Version string
- Gateway platform version.
- Vpn bool
- VPN blade enabled.
- Vpn
Settings ManagementSimple Gateway Vpn Settings - Gateway VPN settings.vpn_settings blocks are documented below.
- Zero
Phishing bool - Zero Phishing blade enabled.
- Zero
Phishing stringFqdn - Zero Phishing gateway FQDN.
- Advanced
Settings ManagementSimple Gateway Advanced Settings Args - N/Aadvanced_settings blocks are documented below.
- Anti
Bot bool - Anti-Bot blade enabled.
- Anti
Virus bool - Anti-Virus blade enabled.
- Application
Control bool - Application Control blade enabled.
- Application
Control ManagementAnd Url Filtering Settings Simple Gateway Application Control And Url Filtering Settings Args - Gateway Application Control and URL filtering settings.application_control_and_url_filtering_settings blocks are documented below.
- Color string
- Color of the object. Should be one of existing colors.
- Comments string
- Comments string.
- Content
Awareness bool - Content Awareness blade enabled.
- Enable
Https boolInspection - Enable HTTPS Inspection after defining an outbound inspection certificate. To define the outbound certificate use outbound inspection certificate API.
- Fetch
Policies []string - Security management server(s) to fetch the policy from.fetch_policy blocks are documented below.
- Firewall bool
- Firewall blade enabled.
- Firewall
Settings ManagementSimple Gateway Firewall Settings Args - N/Afirewall_settings blocks are documented below.
- Hit
Count bool - Hit count tracks the number of connections each rule matches.
- Https
Inspection ManagementSimple Gateway Https Inspection Args - HTTPS inspection.https_inspection blocks are documented below.
- Icap
Server bool - ICAP Server enabled.
- Identity
Awareness bool - Identity awareness blade enabled.
- Identity
Awareness ManagementSettings Simple Gateway Identity Awareness Settings Args - Gateway Identity Awareness settings.identity_awareness_settings blocks are documented below.
- Ignore
Warnings bool - Apply changes ignoring warnings.
- Interfaces
[]Management
Simple Gateway Interface Args - Network interfaces.interfaces blocks are documented below.
- Ips bool
- Intrusion Prevention System blade enabled.
- Ips
Settings ManagementSimple Gateway Ips Settings Args - Gateway IPS settings.ips_settings blocks are documented below.
- Ips
Update stringPolicy - Specifies whether the IPS will be downloaded from the Management or directly to the Gateway.
- Ipv4Address string
- IPv4 address.
- Ipv6Address string
- IPv6 address.
- Logs
Settings ManagementSimple Gateway Logs Settings Args - Logs settings that apply to Quantum Security Gateways that run Gaia OS.logs_settings blocks are documented below.
- Management
Simple stringGateway Id - Name string
- Object name.
- Nat
Hide boolInternal Interfaces - Hide internal networks behind the Gateway's external IP.
- Nat
Settings ManagementSimple Gateway Nat Settings Args - NAT settings.nat_settings blocks are documented below.
- One
Time stringPassword - N/A
- Os
Name string - Gateway platform operating system.
- Platform
Portal ManagementSettings Simple Gateway Platform Portal Settings Args - Platform portal settings.platform_portal_settings blocks are documented below.
- Proxy
Settings ManagementSimple Gateway Proxy Settings Args - Proxy Server for Gateway.proxy_settings blocks are documented below.
- Qos bool
- QoS.
- Save
Logs boolLocally - Save logs locally on the gateway.
- Send
Alerts []stringTo Servers - Server(s) to send alerts to.send_alerts_to_server blocks are documented below.
- Send
Logs []stringTo Backup Servers - Backup server(s) to send logs to.send_logs_to_backup_server blocks are documented below.
- Send
Logs []stringTo Servers - Server(s) to send logs to.send_logs_to_server blocks are documented below.
- []string
- Collection of tag identifiers.tags blocks are documented below.
- Threat
Emulation bool - Threat Emulation blade enabled.
- Threat
Extraction bool - Threat Extraction blade enabled.
- Url
Filtering bool - URL Filtering blade enabled.
- Usercheck
Portal ManagementSettings Simple Gateway Usercheck Portal Settings Args - UserCheck portal settings.usercheck_portal_settings blocks are documented below.
- Version string
- Gateway platform version.
- Vpn bool
- VPN blade enabled.
- Vpn
Settings ManagementSimple Gateway Vpn Settings Args - Gateway VPN settings.vpn_settings blocks are documented below.
- Zero
Phishing bool - Zero Phishing blade enabled.
- Zero
Phishing stringFqdn - Zero Phishing gateway FQDN.
- advanced
Settings ManagementSimple Gateway Advanced Settings - N/Aadvanced_settings blocks are documented below.
- anti
Bot Boolean - Anti-Bot blade enabled.
- anti
Virus Boolean - Anti-Virus blade enabled.
- application
Control Boolean - Application Control blade enabled.
- application
Control ManagementAnd Url Filtering Settings Simple Gateway Application Control And Url Filtering Settings - Gateway Application Control and URL filtering settings.application_control_and_url_filtering_settings blocks are documented below.
- color String
- Color of the object. Should be one of existing colors.
- comments String
- Comments string.
- content
Awareness Boolean - Content Awareness blade enabled.
- enable
Https BooleanInspection - Enable HTTPS Inspection after defining an outbound inspection certificate. To define the outbound certificate use outbound inspection certificate API.
- fetch
Policies List<String> - Security management server(s) to fetch the policy from.fetch_policy blocks are documented below.
- firewall Boolean
- Firewall blade enabled.
- firewall
Settings ManagementSimple Gateway Firewall Settings - N/Afirewall_settings blocks are documented below.
- hit
Count Boolean - Hit count tracks the number of connections each rule matches.
- https
Inspection ManagementSimple Gateway Https Inspection - HTTPS inspection.https_inspection blocks are documented below.
- icap
Server Boolean - ICAP Server enabled.
- identity
Awareness Boolean - Identity awareness blade enabled.
- identity
Awareness ManagementSettings Simple Gateway Identity Awareness Settings - Gateway Identity Awareness settings.identity_awareness_settings blocks are documented below.
- ignore
Warnings Boolean - Apply changes ignoring warnings.
- interfaces
List<Management
Simple Gateway Interface> - Network interfaces.interfaces blocks are documented below.
- ips Boolean
- Intrusion Prevention System blade enabled.
- ips
Settings ManagementSimple Gateway Ips Settings - Gateway IPS settings.ips_settings blocks are documented below.
- ips
Update StringPolicy - Specifies whether the IPS will be downloaded from the Management or directly to the Gateway.
- ipv4Address String
- IPv4 address.
- ipv6Address String
- IPv6 address.
- logs
Settings ManagementSimple Gateway Logs Settings - Logs settings that apply to Quantum Security Gateways that run Gaia OS.logs_settings blocks are documented below.
- management
Simple StringGateway Id - name String
- Object name.
- nat
Hide BooleanInternal Interfaces - Hide internal networks behind the Gateway's external IP.
- nat
Settings ManagementSimple Gateway Nat Settings - NAT settings.nat_settings blocks are documented below.
- one
Time StringPassword - N/A
- os
Name String - Gateway platform operating system.
- platform
Portal ManagementSettings Simple Gateway Platform Portal Settings - Platform portal settings.platform_portal_settings blocks are documented below.
- proxy
Settings ManagementSimple Gateway Proxy Settings - Proxy Server for Gateway.proxy_settings blocks are documented below.
- qos Boolean
- QoS.
- save
Logs BooleanLocally - Save logs locally on the gateway.
- send
Alerts List<String>To Servers - Server(s) to send alerts to.send_alerts_to_server blocks are documented below.
- send
Logs List<String>To Backup Servers - Backup server(s) to send logs to.send_logs_to_backup_server blocks are documented below.
- send
Logs List<String>To Servers - Server(s) to send logs to.send_logs_to_server blocks are documented below.
- List<String>
- Collection of tag identifiers.tags blocks are documented below.
- threat
Emulation Boolean - Threat Emulation blade enabled.
- threat
Extraction Boolean - Threat Extraction blade enabled.
- url
Filtering Boolean - URL Filtering blade enabled.
- usercheck
Portal ManagementSettings Simple Gateway Usercheck Portal Settings - UserCheck portal settings.usercheck_portal_settings blocks are documented below.
- version String
- Gateway platform version.
- vpn Boolean
- VPN blade enabled.
- vpn
Settings ManagementSimple Gateway Vpn Settings - Gateway VPN settings.vpn_settings blocks are documented below.
- zero
Phishing Boolean - Zero Phishing blade enabled.
- zero
Phishing StringFqdn - Zero Phishing gateway FQDN.
- advanced
Settings ManagementSimple Gateway Advanced Settings - N/Aadvanced_settings blocks are documented below.
- anti
Bot boolean - Anti-Bot blade enabled.
- anti
Virus boolean - Anti-Virus blade enabled.
- application
Control boolean - Application Control blade enabled.
- application
Control ManagementAnd Url Filtering Settings Simple Gateway Application Control And Url Filtering Settings - Gateway Application Control and URL filtering settings.application_control_and_url_filtering_settings blocks are documented below.
- color string
- Color of the object. Should be one of existing colors.
- comments string
- Comments string.
- content
Awareness boolean - Content Awareness blade enabled.
- enable
Https booleanInspection - Enable HTTPS Inspection after defining an outbound inspection certificate. To define the outbound certificate use outbound inspection certificate API.
- fetch
Policies string[] - Security management server(s) to fetch the policy from.fetch_policy blocks are documented below.
- firewall boolean
- Firewall blade enabled.
- firewall
Settings ManagementSimple Gateway Firewall Settings - N/Afirewall_settings blocks are documented below.
- hit
Count boolean - Hit count tracks the number of connections each rule matches.
- https
Inspection ManagementSimple Gateway Https Inspection - HTTPS inspection.https_inspection blocks are documented below.
- icap
Server boolean - ICAP Server enabled.
- identity
Awareness boolean - Identity awareness blade enabled.
- identity
Awareness ManagementSettings Simple Gateway Identity Awareness Settings - Gateway Identity Awareness settings.identity_awareness_settings blocks are documented below.
- ignore
Warnings boolean - Apply changes ignoring warnings.
- interfaces
Management
Simple Gateway Interface[] - Network interfaces.interfaces blocks are documented below.
- ips boolean
- Intrusion Prevention System blade enabled.
- ips
Settings ManagementSimple Gateway Ips Settings - Gateway IPS settings.ips_settings blocks are documented below.
- ips
Update stringPolicy - Specifies whether the IPS will be downloaded from the Management or directly to the Gateway.
- ipv4Address string
- IPv4 address.
- ipv6Address string
- IPv6 address.
- logs
Settings ManagementSimple Gateway Logs Settings - Logs settings that apply to Quantum Security Gateways that run Gaia OS.logs_settings blocks are documented below.
- management
Simple stringGateway Id - name string
- Object name.
- nat
Hide booleanInternal Interfaces - Hide internal networks behind the Gateway's external IP.
- nat
Settings ManagementSimple Gateway Nat Settings - NAT settings.nat_settings blocks are documented below.
- one
Time stringPassword - N/A
- os
Name string - Gateway platform operating system.
- platform
Portal ManagementSettings Simple Gateway Platform Portal Settings - Platform portal settings.platform_portal_settings blocks are documented below.
- proxy
Settings ManagementSimple Gateway Proxy Settings - Proxy Server for Gateway.proxy_settings blocks are documented below.
- qos boolean
- QoS.
- save
Logs booleanLocally - Save logs locally on the gateway.
- send
Alerts string[]To Servers - Server(s) to send alerts to.send_alerts_to_server blocks are documented below.
- send
Logs string[]To Backup Servers - Backup server(s) to send logs to.send_logs_to_backup_server blocks are documented below.
- send
Logs string[]To Servers - Server(s) to send logs to.send_logs_to_server blocks are documented below.
- string[]
- Collection of tag identifiers.tags blocks are documented below.
- threat
Emulation boolean - Threat Emulation blade enabled.
- threat
Extraction boolean - Threat Extraction blade enabled.
- url
Filtering boolean - URL Filtering blade enabled.
- usercheck
Portal ManagementSettings Simple Gateway Usercheck Portal Settings - UserCheck portal settings.usercheck_portal_settings blocks are documented below.
- version string
- Gateway platform version.
- vpn boolean
- VPN blade enabled.
- vpn
Settings ManagementSimple Gateway Vpn Settings - Gateway VPN settings.vpn_settings blocks are documented below.
- zero
Phishing boolean - Zero Phishing blade enabled.
- zero
Phishing stringFqdn - Zero Phishing gateway FQDN.
- advanced_
settings ManagementSimple Gateway Advanced Settings Args - N/Aadvanced_settings blocks are documented below.
- anti_
bot bool - Anti-Bot blade enabled.
- anti_
virus bool - Anti-Virus blade enabled.
- application_
control bool - Application Control blade enabled.
- application_
control_ Managementand_ url_ filtering_ settings Simple Gateway Application Control And Url Filtering Settings Args - Gateway Application Control and URL filtering settings.application_control_and_url_filtering_settings blocks are documented below.
- color str
- Color of the object. Should be one of existing colors.
- comments str
- Comments string.
- content_
awareness bool - Content Awareness blade enabled.
- enable_
https_ boolinspection - Enable HTTPS Inspection after defining an outbound inspection certificate. To define the outbound certificate use outbound inspection certificate API.
- fetch_
policies Sequence[str] - Security management server(s) to fetch the policy from.fetch_policy blocks are documented below.
- firewall bool
- Firewall blade enabled.
- firewall_
settings ManagementSimple Gateway Firewall Settings Args - N/Afirewall_settings blocks are documented below.
- hit_
count bool - Hit count tracks the number of connections each rule matches.
- https_
inspection ManagementSimple Gateway Https Inspection Args - HTTPS inspection.https_inspection blocks are documented below.
- icap_
server bool - ICAP Server enabled.
- identity_
awareness bool - Identity awareness blade enabled.
- identity_
awareness_ Managementsettings Simple Gateway Identity Awareness Settings Args - Gateway Identity Awareness settings.identity_awareness_settings blocks are documented below.
- ignore_
warnings bool - Apply changes ignoring warnings.
- interfaces
Sequence[Management
Simple Gateway Interface Args] - Network interfaces.interfaces blocks are documented below.
- ips bool
- Intrusion Prevention System blade enabled.
- ips_
settings ManagementSimple Gateway Ips Settings Args - Gateway IPS settings.ips_settings blocks are documented below.
- ips_
update_ strpolicy - Specifies whether the IPS will be downloaded from the Management or directly to the Gateway.
- ipv4_
address str - IPv4 address.
- ipv6_
address str - IPv6 address.
- logs_
settings ManagementSimple Gateway Logs Settings Args - Logs settings that apply to Quantum Security Gateways that run Gaia OS.logs_settings blocks are documented below.
- management_
simple_ strgateway_ id - name str
- Object name.
- nat_
hide_ boolinternal_ interfaces - Hide internal networks behind the Gateway's external IP.
- nat_
settings ManagementSimple Gateway Nat Settings Args - NAT settings.nat_settings blocks are documented below.
- one_
time_ strpassword - N/A
- os_
name str - Gateway platform operating system.
- platform_
portal_ Managementsettings Simple Gateway Platform Portal Settings Args - Platform portal settings.platform_portal_settings blocks are documented below.
- proxy_
settings ManagementSimple Gateway Proxy Settings Args - Proxy Server for Gateway.proxy_settings blocks are documented below.
- qos bool
- QoS.
- save_
logs_ boollocally - Save logs locally on the gateway.
- send_
alerts_ Sequence[str]to_ servers - Server(s) to send alerts to.send_alerts_to_server blocks are documented below.
- send_
logs_ Sequence[str]to_ backup_ servers - Backup server(s) to send logs to.send_logs_to_backup_server blocks are documented below.
- send_
logs_ Sequence[str]to_ servers - Server(s) to send logs to.send_logs_to_server blocks are documented below.
- Sequence[str]
- Collection of tag identifiers.tags blocks are documented below.
- threat_
emulation bool - Threat Emulation blade enabled.
- threat_
extraction bool - Threat Extraction blade enabled.
- url_
filtering bool - URL Filtering blade enabled.
- usercheck_
portal_ Managementsettings Simple Gateway Usercheck Portal Settings Args - UserCheck portal settings.usercheck_portal_settings blocks are documented below.
- version str
- Gateway platform version.
- vpn bool
- VPN blade enabled.
- vpn_
settings ManagementSimple Gateway Vpn Settings Args - Gateway VPN settings.vpn_settings blocks are documented below.
- zero_
phishing bool - Zero Phishing blade enabled.
- zero_
phishing_ strfqdn - Zero Phishing gateway FQDN.
- advanced
Settings Property Map - N/Aadvanced_settings blocks are documented below.
- anti
Bot Boolean - Anti-Bot blade enabled.
- anti
Virus Boolean - Anti-Virus blade enabled.
- application
Control Boolean - Application Control blade enabled.
- application
Control Property MapAnd Url Filtering Settings - Gateway Application Control and URL filtering settings.application_control_and_url_filtering_settings blocks are documented below.
- color String
- Color of the object. Should be one of existing colors.
- comments String
- Comments string.
- content
Awareness Boolean - Content Awareness blade enabled.
- enable
Https BooleanInspection - Enable HTTPS Inspection after defining an outbound inspection certificate. To define the outbound certificate use outbound inspection certificate API.
- fetch
Policies List<String> - Security management server(s) to fetch the policy from.fetch_policy blocks are documented below.
- firewall Boolean
- Firewall blade enabled.
- firewall
Settings Property Map - N/Afirewall_settings blocks are documented below.
- hit
Count Boolean - Hit count tracks the number of connections each rule matches.
- https
Inspection Property Map - HTTPS inspection.https_inspection blocks are documented below.
- icap
Server Boolean - ICAP Server enabled.
- identity
Awareness Boolean - Identity awareness blade enabled.
- identity
Awareness Property MapSettings - Gateway Identity Awareness settings.identity_awareness_settings blocks are documented below.
- ignore
Warnings Boolean - Apply changes ignoring warnings.
- interfaces List<Property Map>
- Network interfaces.interfaces blocks are documented below.
- ips Boolean
- Intrusion Prevention System blade enabled.
- ips
Settings Property Map - Gateway IPS settings.ips_settings blocks are documented below.
- ips
Update StringPolicy - Specifies whether the IPS will be downloaded from the Management or directly to the Gateway.
- ipv4Address String
- IPv4 address.
- ipv6Address String
- IPv6 address.
- logs
Settings Property Map - Logs settings that apply to Quantum Security Gateways that run Gaia OS.logs_settings blocks are documented below.
- management
Simple StringGateway Id - name String
- Object name.
- nat
Hide BooleanInternal Interfaces - Hide internal networks behind the Gateway's external IP.
- nat
Settings Property Map - NAT settings.nat_settings blocks are documented below.
- one
Time StringPassword - N/A
- os
Name String - Gateway platform operating system.
- platform
Portal Property MapSettings - Platform portal settings.platform_portal_settings blocks are documented below.
- proxy
Settings Property Map - Proxy Server for Gateway.proxy_settings blocks are documented below.
- qos Boolean
- QoS.
- save
Logs BooleanLocally - Save logs locally on the gateway.
- send
Alerts List<String>To Servers - Server(s) to send alerts to.send_alerts_to_server blocks are documented below.
- send
Logs List<String>To Backup Servers - Backup server(s) to send logs to.send_logs_to_backup_server blocks are documented below.
- send
Logs List<String>To Servers - Server(s) to send logs to.send_logs_to_server blocks are documented below.
- List<String>
- Collection of tag identifiers.tags blocks are documented below.
- threat
Emulation Boolean - Threat Emulation blade enabled.
- threat
Extraction Boolean - Threat Extraction blade enabled.
- url
Filtering Boolean - URL Filtering blade enabled.
- usercheck
Portal Property MapSettings - UserCheck portal settings.usercheck_portal_settings blocks are documented below.
- version String
- Gateway platform version.
- vpn Boolean
- VPN blade enabled.
- vpn
Settings Property Map - Gateway VPN settings.vpn_settings blocks are documented below.
- zero
Phishing Boolean - Zero Phishing blade enabled.
- zero
Phishing StringFqdn - Zero Phishing gateway FQDN.
Outputs
All input properties are implicitly available as output properties. Additionally, the ManagementSimpleGateway resource produces the following output properties:
- dynamic_
ip bool - Dynamic IP address.
- hardware str
- Gateway platform hardware type.
- id str
- The provider-assigned unique ID for this managed resource.
- sic_
name str - Secure Internal Communication name.
- sic_
state str - Secure Internal Communication state.
Look up Existing ManagementSimpleGateway Resource
Get an existing ManagementSimpleGateway resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: ManagementSimpleGatewayState, opts?: CustomResourceOptions): ManagementSimpleGateway@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
advanced_settings: Optional[ManagementSimpleGatewayAdvancedSettingsArgs] = None,
anti_bot: Optional[bool] = None,
anti_virus: Optional[bool] = None,
application_control: Optional[bool] = None,
application_control_and_url_filtering_settings: Optional[ManagementSimpleGatewayApplicationControlAndUrlFilteringSettingsArgs] = None,
color: Optional[str] = None,
comments: Optional[str] = None,
content_awareness: Optional[bool] = None,
dynamic_ip: Optional[bool] = None,
enable_https_inspection: Optional[bool] = None,
fetch_policies: Optional[Sequence[str]] = None,
firewall: Optional[bool] = None,
firewall_settings: Optional[ManagementSimpleGatewayFirewallSettingsArgs] = None,
hardware: Optional[str] = None,
hit_count: Optional[bool] = None,
https_inspection: Optional[ManagementSimpleGatewayHttpsInspectionArgs] = None,
icap_server: Optional[bool] = None,
identity_awareness: Optional[bool] = None,
identity_awareness_settings: Optional[ManagementSimpleGatewayIdentityAwarenessSettingsArgs] = None,
ignore_warnings: Optional[bool] = None,
interfaces: Optional[Sequence[ManagementSimpleGatewayInterfaceArgs]] = None,
ips: Optional[bool] = None,
ips_settings: Optional[ManagementSimpleGatewayIpsSettingsArgs] = None,
ips_update_policy: Optional[str] = None,
ipv4_address: Optional[str] = None,
ipv6_address: Optional[str] = None,
logs_settings: Optional[ManagementSimpleGatewayLogsSettingsArgs] = None,
management_simple_gateway_id: Optional[str] = None,
name: Optional[str] = None,
nat_hide_internal_interfaces: Optional[bool] = None,
nat_settings: Optional[ManagementSimpleGatewayNatSettingsArgs] = None,
one_time_password: Optional[str] = None,
os_name: Optional[str] = None,
platform_portal_settings: Optional[ManagementSimpleGatewayPlatformPortalSettingsArgs] = None,
proxy_settings: Optional[ManagementSimpleGatewayProxySettingsArgs] = None,
qos: Optional[bool] = None,
save_logs_locally: Optional[bool] = None,
send_alerts_to_servers: Optional[Sequence[str]] = None,
send_logs_to_backup_servers: Optional[Sequence[str]] = None,
send_logs_to_servers: Optional[Sequence[str]] = None,
sic_name: Optional[str] = None,
sic_state: Optional[str] = None,
tags: Optional[Sequence[str]] = None,
threat_emulation: Optional[bool] = None,
threat_extraction: Optional[bool] = None,
url_filtering: Optional[bool] = None,
usercheck_portal_settings: Optional[ManagementSimpleGatewayUsercheckPortalSettingsArgs] = None,
version: Optional[str] = None,
vpn: Optional[bool] = None,
vpn_settings: Optional[ManagementSimpleGatewayVpnSettingsArgs] = None,
zero_phishing: Optional[bool] = None,
zero_phishing_fqdn: Optional[str] = None) -> ManagementSimpleGatewayfunc GetManagementSimpleGateway(ctx *Context, name string, id IDInput, state *ManagementSimpleGatewayState, opts ...ResourceOption) (*ManagementSimpleGateway, error)public static ManagementSimpleGateway Get(string name, Input<string> id, ManagementSimpleGatewayState? state, CustomResourceOptions? opts = null)public static ManagementSimpleGateway get(String name, Output<String> id, ManagementSimpleGatewayState state, CustomResourceOptions options)resources: _: type: checkpoint:ManagementSimpleGateway get: id: ${id}- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Advanced
Settings ManagementSimple Gateway Advanced Settings - N/Aadvanced_settings blocks are documented below.
- Anti
Bot bool - Anti-Bot blade enabled.
- Anti
Virus bool - Anti-Virus blade enabled.
- Application
Control bool - Application Control blade enabled.
- Application
Control ManagementAnd Url Filtering Settings Simple Gateway Application Control And Url Filtering Settings - Gateway Application Control and URL filtering settings.application_control_and_url_filtering_settings blocks are documented below.
- Color string
- Color of the object. Should be one of existing colors.
- Comments string
- Comments string.
- Content
Awareness bool - Content Awareness blade enabled.
- Dynamic
Ip bool - Dynamic IP address.
- Enable
Https boolInspection - Enable HTTPS Inspection after defining an outbound inspection certificate. To define the outbound certificate use outbound inspection certificate API.
- Fetch
Policies List<string> - Security management server(s) to fetch the policy from.fetch_policy blocks are documented below.
- Firewall bool
- Firewall blade enabled.
- Firewall
Settings ManagementSimple Gateway Firewall Settings - N/Afirewall_settings blocks are documented below.
- Hardware string
- Gateway platform hardware type.
- Hit
Count bool - Hit count tracks the number of connections each rule matches.
- Https
Inspection ManagementSimple Gateway Https Inspection - HTTPS inspection.https_inspection blocks are documented below.
- Icap
Server bool - ICAP Server enabled.
- Identity
Awareness bool - Identity awareness blade enabled.
- Identity
Awareness ManagementSettings Simple Gateway Identity Awareness Settings - Gateway Identity Awareness settings.identity_awareness_settings blocks are documented below.
- Ignore
Warnings bool - Apply changes ignoring warnings.
- Interfaces
List<Management
Simple Gateway Interface> - Network interfaces.interfaces blocks are documented below.
- Ips bool
- Intrusion Prevention System blade enabled.
- Ips
Settings ManagementSimple Gateway Ips Settings - Gateway IPS settings.ips_settings blocks are documented below.
- Ips
Update stringPolicy - Specifies whether the IPS will be downloaded from the Management or directly to the Gateway.
- Ipv4Address string
- IPv4 address.
- Ipv6Address string
- IPv6 address.
- Logs
Settings ManagementSimple Gateway Logs Settings - Logs settings that apply to Quantum Security Gateways that run Gaia OS.logs_settings blocks are documented below.
- Management
Simple stringGateway Id - Name string
- Object name.
- Nat
Hide boolInternal Interfaces - Hide internal networks behind the Gateway's external IP.
- Nat
Settings ManagementSimple Gateway Nat Settings - NAT settings.nat_settings blocks are documented below.
- One
Time stringPassword - N/A
- Os
Name string - Gateway platform operating system.
- Platform
Portal ManagementSettings Simple Gateway Platform Portal Settings - Platform portal settings.platform_portal_settings blocks are documented below.
- Proxy
Settings ManagementSimple Gateway Proxy Settings - Proxy Server for Gateway.proxy_settings blocks are documented below.
- Qos bool
- QoS.
- Save
Logs boolLocally - Save logs locally on the gateway.
- Send
Alerts List<string>To Servers - Server(s) to send alerts to.send_alerts_to_server blocks are documented below.
- Send
Logs List<string>To Backup Servers - Backup server(s) to send logs to.send_logs_to_backup_server blocks are documented below.
- Send
Logs List<string>To Servers - Server(s) to send logs to.send_logs_to_server blocks are documented below.
- Sic
Name string - Secure Internal Communication name.
- Sic
State string - Secure Internal Communication state.
- List<string>
- Collection of tag identifiers.tags blocks are documented below.
- Threat
Emulation bool - Threat Emulation blade enabled.
- Threat
Extraction bool - Threat Extraction blade enabled.
- Url
Filtering bool - URL Filtering blade enabled.
- Usercheck
Portal ManagementSettings Simple Gateway Usercheck Portal Settings - UserCheck portal settings.usercheck_portal_settings blocks are documented below.
- Version string
- Gateway platform version.
- Vpn bool
- VPN blade enabled.
- Vpn
Settings ManagementSimple Gateway Vpn Settings - Gateway VPN settings.vpn_settings blocks are documented below.
- Zero
Phishing bool - Zero Phishing blade enabled.
- Zero
Phishing stringFqdn - Zero Phishing gateway FQDN.
- Advanced
Settings ManagementSimple Gateway Advanced Settings Args - N/Aadvanced_settings blocks are documented below.
- Anti
Bot bool - Anti-Bot blade enabled.
- Anti
Virus bool - Anti-Virus blade enabled.
- Application
Control bool - Application Control blade enabled.
- Application
Control ManagementAnd Url Filtering Settings Simple Gateway Application Control And Url Filtering Settings Args - Gateway Application Control and URL filtering settings.application_control_and_url_filtering_settings blocks are documented below.
- Color string
- Color of the object. Should be one of existing colors.
- Comments string
- Comments string.
- Content
Awareness bool - Content Awareness blade enabled.
- Dynamic
Ip bool - Dynamic IP address.
- Enable
Https boolInspection - Enable HTTPS Inspection after defining an outbound inspection certificate. To define the outbound certificate use outbound inspection certificate API.
- Fetch
Policies []string - Security management server(s) to fetch the policy from.fetch_policy blocks are documented below.
- Firewall bool
- Firewall blade enabled.
- Firewall
Settings ManagementSimple Gateway Firewall Settings Args - N/Afirewall_settings blocks are documented below.
- Hardware string
- Gateway platform hardware type.
- Hit
Count bool - Hit count tracks the number of connections each rule matches.
- Https
Inspection ManagementSimple Gateway Https Inspection Args - HTTPS inspection.https_inspection blocks are documented below.
- Icap
Server bool - ICAP Server enabled.
- Identity
Awareness bool - Identity awareness blade enabled.
- Identity
Awareness ManagementSettings Simple Gateway Identity Awareness Settings Args - Gateway Identity Awareness settings.identity_awareness_settings blocks are documented below.
- Ignore
Warnings bool - Apply changes ignoring warnings.
- Interfaces
[]Management
Simple Gateway Interface Args - Network interfaces.interfaces blocks are documented below.
- Ips bool
- Intrusion Prevention System blade enabled.
- Ips
Settings ManagementSimple Gateway Ips Settings Args - Gateway IPS settings.ips_settings blocks are documented below.
- Ips
Update stringPolicy - Specifies whether the IPS will be downloaded from the Management or directly to the Gateway.
- Ipv4Address string
- IPv4 address.
- Ipv6Address string
- IPv6 address.
- Logs
Settings ManagementSimple Gateway Logs Settings Args - Logs settings that apply to Quantum Security Gateways that run Gaia OS.logs_settings blocks are documented below.
- Management
Simple stringGateway Id - Name string
- Object name.
- Nat
Hide boolInternal Interfaces - Hide internal networks behind the Gateway's external IP.
- Nat
Settings ManagementSimple Gateway Nat Settings Args - NAT settings.nat_settings blocks are documented below.
- One
Time stringPassword - N/A
- Os
Name string - Gateway platform operating system.
- Platform
Portal ManagementSettings Simple Gateway Platform Portal Settings Args - Platform portal settings.platform_portal_settings blocks are documented below.
- Proxy
Settings ManagementSimple Gateway Proxy Settings Args - Proxy Server for Gateway.proxy_settings blocks are documented below.
- Qos bool
- QoS.
- Save
Logs boolLocally - Save logs locally on the gateway.
- Send
Alerts []stringTo Servers - Server(s) to send alerts to.send_alerts_to_server blocks are documented below.
- Send
Logs []stringTo Backup Servers - Backup server(s) to send logs to.send_logs_to_backup_server blocks are documented below.
- Send
Logs []stringTo Servers - Server(s) to send logs to.send_logs_to_server blocks are documented below.
- Sic
Name string - Secure Internal Communication name.
- Sic
State string - Secure Internal Communication state.
- []string
- Collection of tag identifiers.tags blocks are documented below.
- Threat
Emulation bool - Threat Emulation blade enabled.
- Threat
Extraction bool - Threat Extraction blade enabled.
- Url
Filtering bool - URL Filtering blade enabled.
- Usercheck
Portal ManagementSettings Simple Gateway Usercheck Portal Settings Args - UserCheck portal settings.usercheck_portal_settings blocks are documented below.
- Version string
- Gateway platform version.
- Vpn bool
- VPN blade enabled.
- Vpn
Settings ManagementSimple Gateway Vpn Settings Args - Gateway VPN settings.vpn_settings blocks are documented below.
- Zero
Phishing bool - Zero Phishing blade enabled.
- Zero
Phishing stringFqdn - Zero Phishing gateway FQDN.
- advanced
Settings ManagementSimple Gateway Advanced Settings - N/Aadvanced_settings blocks are documented below.
- anti
Bot Boolean - Anti-Bot blade enabled.
- anti
Virus Boolean - Anti-Virus blade enabled.
- application
Control Boolean - Application Control blade enabled.
- application
Control ManagementAnd Url Filtering Settings Simple Gateway Application Control And Url Filtering Settings - Gateway Application Control and URL filtering settings.application_control_and_url_filtering_settings blocks are documented below.
- color String
- Color of the object. Should be one of existing colors.
- comments String
- Comments string.
- content
Awareness Boolean - Content Awareness blade enabled.
- dynamic
Ip Boolean - Dynamic IP address.
- enable
Https BooleanInspection - Enable HTTPS Inspection after defining an outbound inspection certificate. To define the outbound certificate use outbound inspection certificate API.
- fetch
Policies List<String> - Security management server(s) to fetch the policy from.fetch_policy blocks are documented below.
- firewall Boolean
- Firewall blade enabled.
- firewall
Settings ManagementSimple Gateway Firewall Settings - N/Afirewall_settings blocks are documented below.
- hardware String
- Gateway platform hardware type.
- hit
Count Boolean - Hit count tracks the number of connections each rule matches.
- https
Inspection ManagementSimple Gateway Https Inspection - HTTPS inspection.https_inspection blocks are documented below.
- icap
Server Boolean - ICAP Server enabled.
- identity
Awareness Boolean - Identity awareness blade enabled.
- identity
Awareness ManagementSettings Simple Gateway Identity Awareness Settings - Gateway Identity Awareness settings.identity_awareness_settings blocks are documented below.
- ignore
Warnings Boolean - Apply changes ignoring warnings.
- interfaces
List<Management
Simple Gateway Interface> - Network interfaces.interfaces blocks are documented below.
- ips Boolean
- Intrusion Prevention System blade enabled.
- ips
Settings ManagementSimple Gateway Ips Settings - Gateway IPS settings.ips_settings blocks are documented below.
- ips
Update StringPolicy - Specifies whether the IPS will be downloaded from the Management or directly to the Gateway.
- ipv4Address String
- IPv4 address.
- ipv6Address String
- IPv6 address.
- logs
Settings ManagementSimple Gateway Logs Settings - Logs settings that apply to Quantum Security Gateways that run Gaia OS.logs_settings blocks are documented below.
- management
Simple StringGateway Id - name String
- Object name.
- nat
Hide BooleanInternal Interfaces - Hide internal networks behind the Gateway's external IP.
- nat
Settings ManagementSimple Gateway Nat Settings - NAT settings.nat_settings blocks are documented below.
- one
Time StringPassword - N/A
- os
Name String - Gateway platform operating system.
- platform
Portal ManagementSettings Simple Gateway Platform Portal Settings - Platform portal settings.platform_portal_settings blocks are documented below.
- proxy
Settings ManagementSimple Gateway Proxy Settings - Proxy Server for Gateway.proxy_settings blocks are documented below.
- qos Boolean
- QoS.
- save
Logs BooleanLocally - Save logs locally on the gateway.
- send
Alerts List<String>To Servers - Server(s) to send alerts to.send_alerts_to_server blocks are documented below.
- send
Logs List<String>To Backup Servers - Backup server(s) to send logs to.send_logs_to_backup_server blocks are documented below.
- send
Logs List<String>To Servers - Server(s) to send logs to.send_logs_to_server blocks are documented below.
- sic
Name String - Secure Internal Communication name.
- sic
State String - Secure Internal Communication state.
- List<String>
- Collection of tag identifiers.tags blocks are documented below.
- threat
Emulation Boolean - Threat Emulation blade enabled.
- threat
Extraction Boolean - Threat Extraction blade enabled.
- url
Filtering Boolean - URL Filtering blade enabled.
- usercheck
Portal ManagementSettings Simple Gateway Usercheck Portal Settings - UserCheck portal settings.usercheck_portal_settings blocks are documented below.
- version String
- Gateway platform version.
- vpn Boolean
- VPN blade enabled.
- vpn
Settings ManagementSimple Gateway Vpn Settings - Gateway VPN settings.vpn_settings blocks are documented below.
- zero
Phishing Boolean - Zero Phishing blade enabled.
- zero
Phishing StringFqdn - Zero Phishing gateway FQDN.
- advanced
Settings ManagementSimple Gateway Advanced Settings - N/Aadvanced_settings blocks are documented below.
- anti
Bot boolean - Anti-Bot blade enabled.
- anti
Virus boolean - Anti-Virus blade enabled.
- application
Control boolean - Application Control blade enabled.
- application
Control ManagementAnd Url Filtering Settings Simple Gateway Application Control And Url Filtering Settings - Gateway Application Control and URL filtering settings.application_control_and_url_filtering_settings blocks are documented below.
- color string
- Color of the object. Should be one of existing colors.
- comments string
- Comments string.
- content
Awareness boolean - Content Awareness blade enabled.
- dynamic
Ip boolean - Dynamic IP address.
- enable
Https booleanInspection - Enable HTTPS Inspection after defining an outbound inspection certificate. To define the outbound certificate use outbound inspection certificate API.
- fetch
Policies string[] - Security management server(s) to fetch the policy from.fetch_policy blocks are documented below.
- firewall boolean
- Firewall blade enabled.
- firewall
Settings ManagementSimple Gateway Firewall Settings - N/Afirewall_settings blocks are documented below.
- hardware string
- Gateway platform hardware type.
- hit
Count boolean - Hit count tracks the number of connections each rule matches.
- https
Inspection ManagementSimple Gateway Https Inspection - HTTPS inspection.https_inspection blocks are documented below.
- icap
Server boolean - ICAP Server enabled.
- identity
Awareness boolean - Identity awareness blade enabled.
- identity
Awareness ManagementSettings Simple Gateway Identity Awareness Settings - Gateway Identity Awareness settings.identity_awareness_settings blocks are documented below.
- ignore
Warnings boolean - Apply changes ignoring warnings.
- interfaces
Management
Simple Gateway Interface[] - Network interfaces.interfaces blocks are documented below.
- ips boolean
- Intrusion Prevention System blade enabled.
- ips
Settings ManagementSimple Gateway Ips Settings - Gateway IPS settings.ips_settings blocks are documented below.
- ips
Update stringPolicy - Specifies whether the IPS will be downloaded from the Management or directly to the Gateway.
- ipv4Address string
- IPv4 address.
- ipv6Address string
- IPv6 address.
- logs
Settings ManagementSimple Gateway Logs Settings - Logs settings that apply to Quantum Security Gateways that run Gaia OS.logs_settings blocks are documented below.
- management
Simple stringGateway Id - name string
- Object name.
- nat
Hide booleanInternal Interfaces - Hide internal networks behind the Gateway's external IP.
- nat
Settings ManagementSimple Gateway Nat Settings - NAT settings.nat_settings blocks are documented below.
- one
Time stringPassword - N/A
- os
Name string - Gateway platform operating system.
- platform
Portal ManagementSettings Simple Gateway Platform Portal Settings - Platform portal settings.platform_portal_settings blocks are documented below.
- proxy
Settings ManagementSimple Gateway Proxy Settings - Proxy Server for Gateway.proxy_settings blocks are documented below.
- qos boolean
- QoS.
- save
Logs booleanLocally - Save logs locally on the gateway.
- send
Alerts string[]To Servers - Server(s) to send alerts to.send_alerts_to_server blocks are documented below.
- send
Logs string[]To Backup Servers - Backup server(s) to send logs to.send_logs_to_backup_server blocks are documented below.
- send
Logs string[]To Servers - Server(s) to send logs to.send_logs_to_server blocks are documented below.
- sic
Name string - Secure Internal Communication name.
- sic
State string - Secure Internal Communication state.
- string[]
- Collection of tag identifiers.tags blocks are documented below.
- threat
Emulation boolean - Threat Emulation blade enabled.
- threat
Extraction boolean - Threat Extraction blade enabled.
- url
Filtering boolean - URL Filtering blade enabled.
- usercheck
Portal ManagementSettings Simple Gateway Usercheck Portal Settings - UserCheck portal settings.usercheck_portal_settings blocks are documented below.
- version string
- Gateway platform version.
- vpn boolean
- VPN blade enabled.
- vpn
Settings ManagementSimple Gateway Vpn Settings - Gateway VPN settings.vpn_settings blocks are documented below.
- zero
Phishing boolean - Zero Phishing blade enabled.
- zero
Phishing stringFqdn - Zero Phishing gateway FQDN.
- advanced_
settings ManagementSimple Gateway Advanced Settings Args - N/Aadvanced_settings blocks are documented below.
- anti_
bot bool - Anti-Bot blade enabled.
- anti_
virus bool - Anti-Virus blade enabled.
- application_
control bool - Application Control blade enabled.
- application_
control_ Managementand_ url_ filtering_ settings Simple Gateway Application Control And Url Filtering Settings Args - Gateway Application Control and URL filtering settings.application_control_and_url_filtering_settings blocks are documented below.
- color str
- Color of the object. Should be one of existing colors.
- comments str
- Comments string.
- content_
awareness bool - Content Awareness blade enabled.
- dynamic_
ip bool - Dynamic IP address.
- enable_
https_ boolinspection - Enable HTTPS Inspection after defining an outbound inspection certificate. To define the outbound certificate use outbound inspection certificate API.
- fetch_
policies Sequence[str] - Security management server(s) to fetch the policy from.fetch_policy blocks are documented below.
- firewall bool
- Firewall blade enabled.
- firewall_
settings ManagementSimple Gateway Firewall Settings Args - N/Afirewall_settings blocks are documented below.
- hardware str
- Gateway platform hardware type.
- hit_
count bool - Hit count tracks the number of connections each rule matches.
- https_
inspection ManagementSimple Gateway Https Inspection Args - HTTPS inspection.https_inspection blocks are documented below.
- icap_
server bool - ICAP Server enabled.
- identity_
awareness bool - Identity awareness blade enabled.
- identity_
awareness_ Managementsettings Simple Gateway Identity Awareness Settings Args - Gateway Identity Awareness settings.identity_awareness_settings blocks are documented below.
- ignore_
warnings bool - Apply changes ignoring warnings.
- interfaces
Sequence[Management
Simple Gateway Interface Args] - Network interfaces.interfaces blocks are documented below.
- ips bool
- Intrusion Prevention System blade enabled.
- ips_
settings ManagementSimple Gateway Ips Settings Args - Gateway IPS settings.ips_settings blocks are documented below.
- ips_
update_ strpolicy - Specifies whether the IPS will be downloaded from the Management or directly to the Gateway.
- ipv4_
address str - IPv4 address.
- ipv6_
address str - IPv6 address.
- logs_
settings ManagementSimple Gateway Logs Settings Args - Logs settings that apply to Quantum Security Gateways that run Gaia OS.logs_settings blocks are documented below.
- management_
simple_ strgateway_ id - name str
- Object name.
- nat_
hide_ boolinternal_ interfaces - Hide internal networks behind the Gateway's external IP.
- nat_
settings ManagementSimple Gateway Nat Settings Args - NAT settings.nat_settings blocks are documented below.
- one_
time_ strpassword - N/A
- os_
name str - Gateway platform operating system.
- platform_
portal_ Managementsettings Simple Gateway Platform Portal Settings Args - Platform portal settings.platform_portal_settings blocks are documented below.
- proxy_
settings ManagementSimple Gateway Proxy Settings Args - Proxy Server for Gateway.proxy_settings blocks are documented below.
- qos bool
- QoS.
- save_
logs_ boollocally - Save logs locally on the gateway.
- send_
alerts_ Sequence[str]to_ servers - Server(s) to send alerts to.send_alerts_to_server blocks are documented below.
- send_
logs_ Sequence[str]to_ backup_ servers - Backup server(s) to send logs to.send_logs_to_backup_server blocks are documented below.
- send_
logs_ Sequence[str]to_ servers - Server(s) to send logs to.send_logs_to_server blocks are documented below.
- sic_
name str - Secure Internal Communication name.
- sic_
state str - Secure Internal Communication state.
- Sequence[str]
- Collection of tag identifiers.tags blocks are documented below.
- threat_
emulation bool - Threat Emulation blade enabled.
- threat_
extraction bool - Threat Extraction blade enabled.
- url_
filtering bool - URL Filtering blade enabled.
- usercheck_
portal_ Managementsettings Simple Gateway Usercheck Portal Settings Args - UserCheck portal settings.usercheck_portal_settings blocks are documented below.
- version str
- Gateway platform version.
- vpn bool
- VPN blade enabled.
- vpn_
settings ManagementSimple Gateway Vpn Settings Args - Gateway VPN settings.vpn_settings blocks are documented below.
- zero_
phishing bool - Zero Phishing blade enabled.
- zero_
phishing_ strfqdn - Zero Phishing gateway FQDN.
- advanced
Settings Property Map - N/Aadvanced_settings blocks are documented below.
- anti
Bot Boolean - Anti-Bot blade enabled.
- anti
Virus Boolean - Anti-Virus blade enabled.
- application
Control Boolean - Application Control blade enabled.
- application
Control Property MapAnd Url Filtering Settings - Gateway Application Control and URL filtering settings.application_control_and_url_filtering_settings blocks are documented below.
- color String
- Color of the object. Should be one of existing colors.
- comments String
- Comments string.
- content
Awareness Boolean - Content Awareness blade enabled.
- dynamic
Ip Boolean - Dynamic IP address.
- enable
Https BooleanInspection - Enable HTTPS Inspection after defining an outbound inspection certificate. To define the outbound certificate use outbound inspection certificate API.
- fetch
Policies List<String> - Security management server(s) to fetch the policy from.fetch_policy blocks are documented below.
- firewall Boolean
- Firewall blade enabled.
- firewall
Settings Property Map - N/Afirewall_settings blocks are documented below.
- hardware String
- Gateway platform hardware type.
- hit
Count Boolean - Hit count tracks the number of connections each rule matches.
- https
Inspection Property Map - HTTPS inspection.https_inspection blocks are documented below.
- icap
Server Boolean - ICAP Server enabled.
- identity
Awareness Boolean - Identity awareness blade enabled.
- identity
Awareness Property MapSettings - Gateway Identity Awareness settings.identity_awareness_settings blocks are documented below.
- ignore
Warnings Boolean - Apply changes ignoring warnings.
- interfaces List<Property Map>
- Network interfaces.interfaces blocks are documented below.
- ips Boolean
- Intrusion Prevention System blade enabled.
- ips
Settings Property Map - Gateway IPS settings.ips_settings blocks are documented below.
- ips
Update StringPolicy - Specifies whether the IPS will be downloaded from the Management or directly to the Gateway.
- ipv4Address String
- IPv4 address.
- ipv6Address String
- IPv6 address.
- logs
Settings Property Map - Logs settings that apply to Quantum Security Gateways that run Gaia OS.logs_settings blocks are documented below.
- management
Simple StringGateway Id - name String
- Object name.
- nat
Hide BooleanInternal Interfaces - Hide internal networks behind the Gateway's external IP.
- nat
Settings Property Map - NAT settings.nat_settings blocks are documented below.
- one
Time StringPassword - N/A
- os
Name String - Gateway platform operating system.
- platform
Portal Property MapSettings - Platform portal settings.platform_portal_settings blocks are documented below.
- proxy
Settings Property Map - Proxy Server for Gateway.proxy_settings blocks are documented below.
- qos Boolean
- QoS.
- save
Logs BooleanLocally - Save logs locally on the gateway.
- send
Alerts List<String>To Servers - Server(s) to send alerts to.send_alerts_to_server blocks are documented below.
- send
Logs List<String>To Backup Servers - Backup server(s) to send logs to.send_logs_to_backup_server blocks are documented below.
- send
Logs List<String>To Servers - Server(s) to send logs to.send_logs_to_server blocks are documented below.
- sic
Name String - Secure Internal Communication name.
- sic
State String - Secure Internal Communication state.
- List<String>
- Collection of tag identifiers.tags blocks are documented below.
- threat
Emulation Boolean - Threat Emulation blade enabled.
- threat
Extraction Boolean - Threat Extraction blade enabled.
- url
Filtering Boolean - URL Filtering blade enabled.
- usercheck
Portal Property MapSettings - UserCheck portal settings.usercheck_portal_settings blocks are documented below.
- version String
- Gateway platform version.
- vpn Boolean
- VPN blade enabled.
- vpn
Settings Property Map - Gateway VPN settings.vpn_settings blocks are documented below.
- zero
Phishing Boolean - Zero Phishing blade enabled.
- zero
Phishing StringFqdn - Zero Phishing gateway FQDN.
Supporting Types
ManagementSimpleGatewayAdvancedSettings, ManagementSimpleGatewayAdvancedSettingsArgs
- Connection
Persistence string - Handling established connections when installing a new policy.
- Sam
Management
Simple Gateway Advanced Settings Sam - SAM.sam blocks are documented below.
- Connection
Persistence string - Handling established connections when installing a new policy.
- Sam
Management
Simple Gateway Advanced Settings Sam - SAM.sam blocks are documented below.
- connection
Persistence String - Handling established connections when installing a new policy.
- sam
Management
Simple Gateway Advanced Settings Sam - SAM.sam blocks are documented below.
- connection
Persistence string - Handling established connections when installing a new policy.
- sam
Management
Simple Gateway Advanced Settings Sam - SAM.sam blocks are documented below.
- connection_
persistence str - Handling established connections when installing a new policy.
- sam
Management
Simple Gateway Advanced Settings Sam - SAM.sam blocks are documented below.
- connection
Persistence String - Handling established connections when installing a new policy.
- sam Property Map
- SAM.sam blocks are documented below.
ManagementSimpleGatewayAdvancedSettingsSam, ManagementSimpleGatewayAdvancedSettingsSamArgs
- Forward
To boolOther Sam Servers - Forward SAM clients' requests to other SAM servers.
- Purge
Sam ManagementFile Simple Gateway Advanced Settings Sam Purge Sam File - Purge SAM File.purge_sam_file blocks are documented below.
- Use
Early ManagementVersions Simple Gateway Advanced Settings Sam Use Early Versions - Use early versions compatibility mode.use_early_versions blocks are documented below.
- Forward
To boolOther Sam Servers - Forward SAM clients' requests to other SAM servers.
- Purge
Sam ManagementFile Simple Gateway Advanced Settings Sam Purge Sam File - Purge SAM File.purge_sam_file blocks are documented below.
- Use
Early ManagementVersions Simple Gateway Advanced Settings Sam Use Early Versions - Use early versions compatibility mode.use_early_versions blocks are documented below.
- forward
To BooleanOther Sam Servers - Forward SAM clients' requests to other SAM servers.
- purge
Sam ManagementFile Simple Gateway Advanced Settings Sam Purge Sam File - Purge SAM File.purge_sam_file blocks are documented below.
- use
Early ManagementVersions Simple Gateway Advanced Settings Sam Use Early Versions - Use early versions compatibility mode.use_early_versions blocks are documented below.
- forward
To booleanOther Sam Servers - Forward SAM clients' requests to other SAM servers.
- purge
Sam ManagementFile Simple Gateway Advanced Settings Sam Purge Sam File - Purge SAM File.purge_sam_file blocks are documented below.
- use
Early ManagementVersions Simple Gateway Advanced Settings Sam Use Early Versions - Use early versions compatibility mode.use_early_versions blocks are documented below.
- forward_
to_ boolother_ sam_ servers - Forward SAM clients' requests to other SAM servers.
- purge_
sam_ Managementfile Simple Gateway Advanced Settings Sam Purge Sam File - Purge SAM File.purge_sam_file blocks are documented below.
- use_
early_ Managementversions Simple Gateway Advanced Settings Sam Use Early Versions - Use early versions compatibility mode.use_early_versions blocks are documented below.
- forward
To BooleanOther Sam Servers - Forward SAM clients' requests to other SAM servers.
- purge
Sam Property MapFile - Purge SAM File.purge_sam_file blocks are documented below.
- use
Early Property MapVersions - Use early versions compatibility mode.use_early_versions blocks are documented below.
ManagementSimpleGatewayAdvancedSettingsSamPurgeSamFile, ManagementSimpleGatewayAdvancedSettingsSamPurgeSamFileArgs
- Enabled bool
- Purge SAM File.
- Purge
When doubleSize Reaches To - Purge SAM File When it Reaches to.
- Enabled bool
- Purge SAM File.
- Purge
When float64Size Reaches To - Purge SAM File When it Reaches to.
- enabled Boolean
- Purge SAM File.
- purge
When DoubleSize Reaches To - Purge SAM File When it Reaches to.
- enabled boolean
- Purge SAM File.
- purge
When numberSize Reaches To - Purge SAM File When it Reaches to.
- enabled bool
- Purge SAM File.
- purge_
when_ floatsize_ reaches_ to - Purge SAM File When it Reaches to.
- enabled Boolean
- Purge SAM File.
- purge
When NumberSize Reaches To - Purge SAM File When it Reaches to.
ManagementSimpleGatewayAdvancedSettingsSamUseEarlyVersions, ManagementSimpleGatewayAdvancedSettingsSamUseEarlyVersionsArgs
- Compatibility
Mode string - Early versions compatibility mode.
- Enabled bool
- Use early versions compatibility mode.
- Compatibility
Mode string - Early versions compatibility mode.
- Enabled bool
- Use early versions compatibility mode.
- compatibility
Mode String - Early versions compatibility mode.
- enabled Boolean
- Use early versions compatibility mode.
- compatibility
Mode string - Early versions compatibility mode.
- enabled boolean
- Use early versions compatibility mode.
- compatibility_
mode str - Early versions compatibility mode.
- enabled bool
- Use early versions compatibility mode.
- compatibility
Mode String - Early versions compatibility mode.
- enabled Boolean
- Use early versions compatibility mode.
ManagementSimpleGatewayApplicationControlAndUrlFilteringSettings, ManagementSimpleGatewayApplicationControlAndUrlFilteringSettingsArgs
- Global
Settings stringMode - Whether to override global settings or not.
- Override
Global ManagementSettings Simple Gateway Application Control And Url Filtering Settings Override Global Settings - override global settings object.override_global_settings blocks are documented below.
- Global
Settings stringMode - Whether to override global settings or not.
- Override
Global ManagementSettings Simple Gateway Application Control And Url Filtering Settings Override Global Settings - override global settings object.override_global_settings blocks are documented below.
- global
Settings StringMode - Whether to override global settings or not.
- override
Global ManagementSettings Simple Gateway Application Control And Url Filtering Settings Override Global Settings - override global settings object.override_global_settings blocks are documented below.
- global
Settings stringMode - Whether to override global settings or not.
- override
Global ManagementSettings Simple Gateway Application Control And Url Filtering Settings Override Global Settings - override global settings object.override_global_settings blocks are documented below.
- global_
settings_ strmode - Whether to override global settings or not.
- override_
global_ Managementsettings Simple Gateway Application Control And Url Filtering Settings Override Global Settings - override global settings object.override_global_settings blocks are documented below.
- global
Settings StringMode - Whether to override global settings or not.
- override
Global Property MapSettings - override global settings object.override_global_settings blocks are documented below.
ManagementSimpleGatewayApplicationControlAndUrlFilteringSettingsOverrideGlobalSettings, ManagementSimpleGatewayApplicationControlAndUrlFilteringSettingsOverrideGlobalSettingsArgs
- Fail
Mode string - Fail mode - allow or block all requests.
- Website
Categorization ManagementSimple Gateway Application Control And Url Filtering Settings Override Global Settings Website Categorization - Website categorization object.website_categorization blocks are documented below.
- Fail
Mode string - Fail mode - allow or block all requests.
- Website
Categorization ManagementSimple Gateway Application Control And Url Filtering Settings Override Global Settings Website Categorization - Website categorization object.website_categorization blocks are documented below.
- fail
Mode String - Fail mode - allow or block all requests.
- website
Categorization ManagementSimple Gateway Application Control And Url Filtering Settings Override Global Settings Website Categorization - Website categorization object.website_categorization blocks are documented below.
- fail
Mode string - Fail mode - allow or block all requests.
- website
Categorization ManagementSimple Gateway Application Control And Url Filtering Settings Override Global Settings Website Categorization - Website categorization object.website_categorization blocks are documented below.
- fail_
mode str - Fail mode - allow or block all requests.
- website_
categorization ManagementSimple Gateway Application Control And Url Filtering Settings Override Global Settings Website Categorization - Website categorization object.website_categorization blocks are documented below.
- fail
Mode String - Fail mode - allow or block all requests.
- website
Categorization Property Map - Website categorization object.website_categorization blocks are documented below.
ManagementSimpleGatewayApplicationControlAndUrlFilteringSettingsOverrideGlobalSettingsWebsiteCategorization, ManagementSimpleGatewayApplicationControlAndUrlFilteringSettingsOverrideGlobalSettingsWebsiteCategorizationArgs
- Custom
Mode ManagementSimple Gateway Application Control And Url Filtering Settings Override Global Settings Website Categorization Custom Mode - Custom mode object.custom_mode blocks are documented below.
- Mode string
- Website categorization mode.
- Custom
Mode ManagementSimple Gateway Application Control And Url Filtering Settings Override Global Settings Website Categorization Custom Mode - Custom mode object.custom_mode blocks are documented below.
- Mode string
- Website categorization mode.
- custom
Mode ManagementSimple Gateway Application Control And Url Filtering Settings Override Global Settings Website Categorization Custom Mode - Custom mode object.custom_mode blocks are documented below.
- mode String
- Website categorization mode.
- custom
Mode ManagementSimple Gateway Application Control And Url Filtering Settings Override Global Settings Website Categorization Custom Mode - Custom mode object.custom_mode blocks are documented below.
- mode string
- Website categorization mode.
- custom_
mode ManagementSimple Gateway Application Control And Url Filtering Settings Override Global Settings Website Categorization Custom Mode - Custom mode object.custom_mode blocks are documented below.
- mode str
- Website categorization mode.
- custom
Mode Property Map - Custom mode object.custom_mode blocks are documented below.
- mode String
- Website categorization mode.
ManagementSimpleGatewayApplicationControlAndUrlFilteringSettingsOverrideGlobalSettingsWebsiteCategorizationCustomMode, ManagementSimpleGatewayApplicationControlAndUrlFilteringSettingsOverrideGlobalSettingsWebsiteCategorizationCustomModeArgs
- string
- Social networking widgets mode.
- Url
Filtering string - URL filtering mode.
- string
- Social networking widgets mode.
- Url
Filtering string - URL filtering mode.
- String
- Social networking widgets mode.
- url
Filtering String - URL filtering mode.
- string
- Social networking widgets mode.
- url
Filtering string - URL filtering mode.
- str
- Social networking widgets mode.
- url_
filtering str - URL filtering mode.
- String
- Social networking widgets mode.
- url
Filtering String - URL filtering mode.
ManagementSimpleGatewayFirewallSettings, ManagementSimpleGatewayFirewallSettingsArgs
- Auto
Calculate boolConnections Hash Table Size And Memory Pool - N/A
- Auto
Maximum boolLimit For Concurrent Connections - N/A
- Connections
Hash doubleSize - N/A
- Maximum
Limit doubleFor Concurrent Connections - N/A
- Maximum
Memory doublePool Size - N/A
- Memory
Pool doubleSize - N/A
- Auto
Calculate boolConnections Hash Table Size And Memory Pool - N/A
- Auto
Maximum boolLimit For Concurrent Connections - N/A
- Connections
Hash float64Size - N/A
- Maximum
Limit float64For Concurrent Connections - N/A
- Maximum
Memory float64Pool Size - N/A
- Memory
Pool float64Size - N/A
- auto
Calculate BooleanConnections Hash Table Size And Memory Pool - N/A
- auto
Maximum BooleanLimit For Concurrent Connections - N/A
- connections
Hash DoubleSize - N/A
- maximum
Limit DoubleFor Concurrent Connections - N/A
- maximum
Memory DoublePool Size - N/A
- memory
Pool DoubleSize - N/A
- auto
Calculate booleanConnections Hash Table Size And Memory Pool - N/A
- auto
Maximum booleanLimit For Concurrent Connections - N/A
- connections
Hash numberSize - N/A
- maximum
Limit numberFor Concurrent Connections - N/A
- maximum
Memory numberPool Size - N/A
- memory
Pool numberSize - N/A
- auto_
calculate_ boolconnections_ hash_ table_ size_ and_ memory_ pool - N/A
- auto_
maximum_ boollimit_ for_ concurrent_ connections - N/A
- connections_
hash_ floatsize - N/A
- maximum_
limit_ floatfor_ concurrent_ connections - N/A
- maximum_
memory_ floatpool_ size - N/A
- memory_
pool_ floatsize - N/A
- auto
Calculate BooleanConnections Hash Table Size And Memory Pool - N/A
- auto
Maximum BooleanLimit For Concurrent Connections - N/A
- connections
Hash NumberSize - N/A
- maximum
Limit NumberFor Concurrent Connections - N/A
- maximum
Memory NumberPool Size - N/A
- memory
Pool NumberSize - N/A
ManagementSimpleGatewayHttpsInspection, ManagementSimpleGatewayHttpsInspectionArgs
- Bypass
On ManagementFailure Simple Gateway Https Inspection Bypass On Failure - Set to be true in order to bypass all requests (Fail-open) in case of internal system error.bypass_on_failure blocks are documented below.
- Deny
Expired ManagementServer Cert Simple Gateway Https Inspection Deny Expired Server Cert - Set to be true in order to drop traffic from servers with expired server certificate.deny_expired_server_cert blocks are documented below.
- Deny
Revoked ManagementServer Cert Simple Gateway Https Inspection Deny Revoked Server Cert - Set to be true in order to drop traffic from servers with revoked server certificate (validate CRL).deny_revoked_server_cert blocks are documented below.
- Deny
Untrusted ManagementServer Cert Simple Gateway Https Inspection Deny Untrusted Server Cert - Set to be true in order to drop traffic from servers with untrusted server certificate.deny_untrusted_server_cert blocks are documented below.
- Site
Categorization ManagementAllow Mode Simple Gateway Https Inspection Site Categorization Allow Mode - Set to 'background' in order to allowed requests until categorization is complete.site_categorization_allow_mode blocks are documented below.
- Bypass
On ManagementFailure Simple Gateway Https Inspection Bypass On Failure - Set to be true in order to bypass all requests (Fail-open) in case of internal system error.bypass_on_failure blocks are documented below.
- Deny
Expired ManagementServer Cert Simple Gateway Https Inspection Deny Expired Server Cert - Set to be true in order to drop traffic from servers with expired server certificate.deny_expired_server_cert blocks are documented below.
- Deny
Revoked ManagementServer Cert Simple Gateway Https Inspection Deny Revoked Server Cert - Set to be true in order to drop traffic from servers with revoked server certificate (validate CRL).deny_revoked_server_cert blocks are documented below.
- Deny
Untrusted ManagementServer Cert Simple Gateway Https Inspection Deny Untrusted Server Cert - Set to be true in order to drop traffic from servers with untrusted server certificate.deny_untrusted_server_cert blocks are documented below.
- Site
Categorization ManagementAllow Mode Simple Gateway Https Inspection Site Categorization Allow Mode - Set to 'background' in order to allowed requests until categorization is complete.site_categorization_allow_mode blocks are documented below.
- bypass
On ManagementFailure Simple Gateway Https Inspection Bypass On Failure - Set to be true in order to bypass all requests (Fail-open) in case of internal system error.bypass_on_failure blocks are documented below.
- deny
Expired ManagementServer Cert Simple Gateway Https Inspection Deny Expired Server Cert - Set to be true in order to drop traffic from servers with expired server certificate.deny_expired_server_cert blocks are documented below.
- deny
Revoked ManagementServer Cert Simple Gateway Https Inspection Deny Revoked Server Cert - Set to be true in order to drop traffic from servers with revoked server certificate (validate CRL).deny_revoked_server_cert blocks are documented below.
- deny
Untrusted ManagementServer Cert Simple Gateway Https Inspection Deny Untrusted Server Cert - Set to be true in order to drop traffic from servers with untrusted server certificate.deny_untrusted_server_cert blocks are documented below.
- site
Categorization ManagementAllow Mode Simple Gateway Https Inspection Site Categorization Allow Mode - Set to 'background' in order to allowed requests until categorization is complete.site_categorization_allow_mode blocks are documented below.
- bypass
On ManagementFailure Simple Gateway Https Inspection Bypass On Failure - Set to be true in order to bypass all requests (Fail-open) in case of internal system error.bypass_on_failure blocks are documented below.
- deny
Expired ManagementServer Cert Simple Gateway Https Inspection Deny Expired Server Cert - Set to be true in order to drop traffic from servers with expired server certificate.deny_expired_server_cert blocks are documented below.
- deny
Revoked ManagementServer Cert Simple Gateway Https Inspection Deny Revoked Server Cert - Set to be true in order to drop traffic from servers with revoked server certificate (validate CRL).deny_revoked_server_cert blocks are documented below.
- deny
Untrusted ManagementServer Cert Simple Gateway Https Inspection Deny Untrusted Server Cert - Set to be true in order to drop traffic from servers with untrusted server certificate.deny_untrusted_server_cert blocks are documented below.
- site
Categorization ManagementAllow Mode Simple Gateway Https Inspection Site Categorization Allow Mode - Set to 'background' in order to allowed requests until categorization is complete.site_categorization_allow_mode blocks are documented below.
- bypass_
on_ Managementfailure Simple Gateway Https Inspection Bypass On Failure - Set to be true in order to bypass all requests (Fail-open) in case of internal system error.bypass_on_failure blocks are documented below.
- deny_
expired_ Managementserver_ cert Simple Gateway Https Inspection Deny Expired Server Cert - Set to be true in order to drop traffic from servers with expired server certificate.deny_expired_server_cert blocks are documented below.
- deny_
revoked_ Managementserver_ cert Simple Gateway Https Inspection Deny Revoked Server Cert - Set to be true in order to drop traffic from servers with revoked server certificate (validate CRL).deny_revoked_server_cert blocks are documented below.
- deny_
untrusted_ Managementserver_ cert Simple Gateway Https Inspection Deny Untrusted Server Cert - Set to be true in order to drop traffic from servers with untrusted server certificate.deny_untrusted_server_cert blocks are documented below.
- site_
categorization_ Managementallow_ mode Simple Gateway Https Inspection Site Categorization Allow Mode - Set to 'background' in order to allowed requests until categorization is complete.site_categorization_allow_mode blocks are documented below.
- bypass
On Property MapFailure - Set to be true in order to bypass all requests (Fail-open) in case of internal system error.bypass_on_failure blocks are documented below.
- deny
Expired Property MapServer Cert - Set to be true in order to drop traffic from servers with expired server certificate.deny_expired_server_cert blocks are documented below.
- deny
Revoked Property MapServer Cert - Set to be true in order to drop traffic from servers with revoked server certificate (validate CRL).deny_revoked_server_cert blocks are documented below.
- deny
Untrusted Property MapServer Cert - Set to be true in order to drop traffic from servers with untrusted server certificate.deny_untrusted_server_cert blocks are documented below.
- site
Categorization Property MapAllow Mode - Set to 'background' in order to allowed requests until categorization is complete.site_categorization_allow_mode blocks are documented below.
ManagementSimpleGatewayHttpsInspectionBypassOnFailure, ManagementSimpleGatewayHttpsInspectionBypassOnFailureArgs
- Override
Profile bool - Override profile of global configuration.
- Value bool
- Override value.Required only for 'override-profile' is True.
- Override
Profile bool - Override profile of global configuration.
- Value bool
- Override value.Required only for 'override-profile' is True.
- override
Profile Boolean - Override profile of global configuration.
- value Boolean
- Override value.Required only for 'override-profile' is True.
- override
Profile boolean - Override profile of global configuration.
- value boolean
- Override value.Required only for 'override-profile' is True.
- override_
profile bool - Override profile of global configuration.
- value bool
- Override value.Required only for 'override-profile' is True.
- override
Profile Boolean - Override profile of global configuration.
- value Boolean
- Override value.Required only for 'override-profile' is True.
ManagementSimpleGatewayHttpsInspectionDenyExpiredServerCert, ManagementSimpleGatewayHttpsInspectionDenyExpiredServerCertArgs
- Override
Profile bool - Override profile of global configuration.
- Value bool
- Override value.Required only for 'override-profile' is True.
- Override
Profile bool - Override profile of global configuration.
- Value bool
- Override value.Required only for 'override-profile' is True.
- override
Profile Boolean - Override profile of global configuration.
- value Boolean
- Override value.Required only for 'override-profile' is True.
- override
Profile boolean - Override profile of global configuration.
- value boolean
- Override value.Required only for 'override-profile' is True.
- override_
profile bool - Override profile of global configuration.
- value bool
- Override value.Required only for 'override-profile' is True.
- override
Profile Boolean - Override profile of global configuration.
- value Boolean
- Override value.Required only for 'override-profile' is True.
ManagementSimpleGatewayHttpsInspectionDenyRevokedServerCert, ManagementSimpleGatewayHttpsInspectionDenyRevokedServerCertArgs
- Override
Profile bool - Override profile of global configuration.
- Value bool
- Override value.Required only for 'override-profile' is True.
- Override
Profile bool - Override profile of global configuration.
- Value bool
- Override value.Required only for 'override-profile' is True.
- override
Profile Boolean - Override profile of global configuration.
- value Boolean
- Override value.Required only for 'override-profile' is True.
- override
Profile boolean - Override profile of global configuration.
- value boolean
- Override value.Required only for 'override-profile' is True.
- override_
profile bool - Override profile of global configuration.
- value bool
- Override value.Required only for 'override-profile' is True.
- override
Profile Boolean - Override profile of global configuration.
- value Boolean
- Override value.Required only for 'override-profile' is True.
ManagementSimpleGatewayHttpsInspectionDenyUntrustedServerCert, ManagementSimpleGatewayHttpsInspectionDenyUntrustedServerCertArgs
- Override
Profile bool - Override profile of global configuration.
- Value bool
- Override value.Required only for 'override-profile' is True.
- Override
Profile bool - Override profile of global configuration.
- Value bool
- Override value.Required only for 'override-profile' is True.
- override
Profile Boolean - Override profile of global configuration.
- value Boolean
- Override value.Required only for 'override-profile' is True.
- override
Profile boolean - Override profile of global configuration.
- value boolean
- Override value.Required only for 'override-profile' is True.
- override_
profile bool - Override profile of global configuration.
- value bool
- Override value.Required only for 'override-profile' is True.
- override
Profile Boolean - Override profile of global configuration.
- value Boolean
- Override value.Required only for 'override-profile' is True.
ManagementSimpleGatewayHttpsInspectionSiteCategorizationAllowMode, ManagementSimpleGatewayHttpsInspectionSiteCategorizationAllowModeArgs
- Override
Profile bool - Override profile of global configuration.
- Value string
- Override value.Required only for 'override-profile' is True.
- Override
Profile bool - Override profile of global configuration.
- Value string
- Override value.Required only for 'override-profile' is True.
- override
Profile Boolean - Override profile of global configuration.
- value String
- Override value.Required only for 'override-profile' is True.
- override
Profile boolean - Override profile of global configuration.
- value string
- Override value.Required only for 'override-profile' is True.
- override_
profile bool - Override profile of global configuration.
- value str
- Override value.Required only for 'override-profile' is True.
- override
Profile Boolean - Override profile of global configuration.
- value String
- Override value.Required only for 'override-profile' is True.
ManagementSimpleGatewayIdentityAwarenessSettings, ManagementSimpleGatewayIdentityAwarenessSettingsArgs
- Browser
Based boolAuthentication - Enable Browser Based Authentication source.
- Browser
Based ManagementAuthentication Settings Simple Gateway Identity Awareness Settings Browser Based Authentication Settings - Browser Based Authentication settings.browser_based_authentication_settings blocks are documented below.
- Identity
Agent bool - Enable Identity Agent source.
- Identity
Agent ManagementSettings Simple Gateway Identity Awareness Settings Identity Agent Settings - Identity Agent settings.identity_agent_settings blocks are documented below.
- Identity
Collector bool - Enable Identity Collector source.
- Identity
Collector ManagementSettings Simple Gateway Identity Awareness Settings Identity Collector Settings - Identity Collector settings.identity_collector_settings blocks are documented below.
- Identity
Sharing ManagementSettings Simple Gateway Identity Awareness Settings Identity Sharing Settings - Identity sharing settings.identity_sharing_settings blocks are documented below.
- Proxy
Settings ManagementSimple Gateway Identity Awareness Settings Proxy Settings - Identity-Awareness Proxy settings.proxy_settings blocks are documented below.
- Remote
Access bool - Enable Remote Access Identity source.
- Browser
Based boolAuthentication - Enable Browser Based Authentication source.
- Browser
Based ManagementAuthentication Settings Simple Gateway Identity Awareness Settings Browser Based Authentication Settings - Browser Based Authentication settings.browser_based_authentication_settings blocks are documented below.
- Identity
Agent bool - Enable Identity Agent source.
- Identity
Agent ManagementSettings Simple Gateway Identity Awareness Settings Identity Agent Settings - Identity Agent settings.identity_agent_settings blocks are documented below.
- Identity
Collector bool - Enable Identity Collector source.
- Identity
Collector ManagementSettings Simple Gateway Identity Awareness Settings Identity Collector Settings - Identity Collector settings.identity_collector_settings blocks are documented below.
- Identity
Sharing ManagementSettings Simple Gateway Identity Awareness Settings Identity Sharing Settings - Identity sharing settings.identity_sharing_settings blocks are documented below.
- Proxy
Settings ManagementSimple Gateway Identity Awareness Settings Proxy Settings - Identity-Awareness Proxy settings.proxy_settings blocks are documented below.
- Remote
Access bool - Enable Remote Access Identity source.
- browser
Based BooleanAuthentication - Enable Browser Based Authentication source.
- browser
Based ManagementAuthentication Settings Simple Gateway Identity Awareness Settings Browser Based Authentication Settings - Browser Based Authentication settings.browser_based_authentication_settings blocks are documented below.
- identity
Agent Boolean - Enable Identity Agent source.
- identity
Agent ManagementSettings Simple Gateway Identity Awareness Settings Identity Agent Settings - Identity Agent settings.identity_agent_settings blocks are documented below.
- identity
Collector Boolean - Enable Identity Collector source.
- identity
Collector ManagementSettings Simple Gateway Identity Awareness Settings Identity Collector Settings - Identity Collector settings.identity_collector_settings blocks are documented below.
- identity
Sharing ManagementSettings Simple Gateway Identity Awareness Settings Identity Sharing Settings - Identity sharing settings.identity_sharing_settings blocks are documented below.
- proxy
Settings ManagementSimple Gateway Identity Awareness Settings Proxy Settings - Identity-Awareness Proxy settings.proxy_settings blocks are documented below.
- remote
Access Boolean - Enable Remote Access Identity source.
- browser
Based booleanAuthentication - Enable Browser Based Authentication source.
- browser
Based ManagementAuthentication Settings Simple Gateway Identity Awareness Settings Browser Based Authentication Settings - Browser Based Authentication settings.browser_based_authentication_settings blocks are documented below.
- identity
Agent boolean - Enable Identity Agent source.
- identity
Agent ManagementSettings Simple Gateway Identity Awareness Settings Identity Agent Settings - Identity Agent settings.identity_agent_settings blocks are documented below.
- identity
Collector boolean - Enable Identity Collector source.
- identity
Collector ManagementSettings Simple Gateway Identity Awareness Settings Identity Collector Settings - Identity Collector settings.identity_collector_settings blocks are documented below.
- identity
Sharing ManagementSettings Simple Gateway Identity Awareness Settings Identity Sharing Settings - Identity sharing settings.identity_sharing_settings blocks are documented below.
- proxy
Settings ManagementSimple Gateway Identity Awareness Settings Proxy Settings - Identity-Awareness Proxy settings.proxy_settings blocks are documented below.
- remote
Access boolean - Enable Remote Access Identity source.
- browser_
based_ boolauthentication - Enable Browser Based Authentication source.
- browser_
based_ Managementauthentication_ settings Simple Gateway Identity Awareness Settings Browser Based Authentication Settings - Browser Based Authentication settings.browser_based_authentication_settings blocks are documented below.
- identity_
agent bool - Enable Identity Agent source.
- identity_
agent_ Managementsettings Simple Gateway Identity Awareness Settings Identity Agent Settings - Identity Agent settings.identity_agent_settings blocks are documented below.
- identity_
collector bool - Enable Identity Collector source.
- identity_
collector_ Managementsettings Simple Gateway Identity Awareness Settings Identity Collector Settings - Identity Collector settings.identity_collector_settings blocks are documented below.
- identity_
sharing_ Managementsettings Simple Gateway Identity Awareness Settings Identity Sharing Settings - Identity sharing settings.identity_sharing_settings blocks are documented below.
- proxy_
settings ManagementSimple Gateway Identity Awareness Settings Proxy Settings - Identity-Awareness Proxy settings.proxy_settings blocks are documented below.
- remote_
access bool - Enable Remote Access Identity source.
- browser
Based BooleanAuthentication - Enable Browser Based Authentication source.
- browser
Based Property MapAuthentication Settings - Browser Based Authentication settings.browser_based_authentication_settings blocks are documented below.
- identity
Agent Boolean - Enable Identity Agent source.
- identity
Agent Property MapSettings - Identity Agent settings.identity_agent_settings blocks are documented below.
- identity
Collector Boolean - Enable Identity Collector source.
- identity
Collector Property MapSettings - Identity Collector settings.identity_collector_settings blocks are documented below.
- identity
Sharing Property MapSettings - Identity sharing settings.identity_sharing_settings blocks are documented below.
- proxy
Settings Property Map - Identity-Awareness Proxy settings.proxy_settings blocks are documented below.
- remote
Access Boolean - Enable Remote Access Identity source.
ManagementSimpleGatewayIdentityAwarenessSettingsBrowserBasedAuthenticationSettings, ManagementSimpleGatewayIdentityAwarenessSettingsBrowserBasedAuthenticationSettingsArgs
- Authentication
Settings ManagementSimple Gateway Identity Awareness Settings Browser Based Authentication Settings Authentication Settings - Authentication Settings for Browser Based Authentication.authentication_settings blocks are documented below.
- Browser
Based ManagementAuthentication Portal Settings Simple Gateway Identity Awareness Settings Browser Based Authentication Settings Browser Based Authentication Portal Settings - Browser Based Authentication portal settings.browser_based_authentication_portal_settings blocks are documented below.
- Authentication
Settings ManagementSimple Gateway Identity Awareness Settings Browser Based Authentication Settings Authentication Settings - Authentication Settings for Browser Based Authentication.authentication_settings blocks are documented below.
- Browser
Based ManagementAuthentication Portal Settings Simple Gateway Identity Awareness Settings Browser Based Authentication Settings Browser Based Authentication Portal Settings - Browser Based Authentication portal settings.browser_based_authentication_portal_settings blocks are documented below.
- authentication
Settings ManagementSimple Gateway Identity Awareness Settings Browser Based Authentication Settings Authentication Settings - Authentication Settings for Browser Based Authentication.authentication_settings blocks are documented below.
- browser
Based ManagementAuthentication Portal Settings Simple Gateway Identity Awareness Settings Browser Based Authentication Settings Browser Based Authentication Portal Settings - Browser Based Authentication portal settings.browser_based_authentication_portal_settings blocks are documented below.
- authentication
Settings ManagementSimple Gateway Identity Awareness Settings Browser Based Authentication Settings Authentication Settings - Authentication Settings for Browser Based Authentication.authentication_settings blocks are documented below.
- browser
Based ManagementAuthentication Portal Settings Simple Gateway Identity Awareness Settings Browser Based Authentication Settings Browser Based Authentication Portal Settings - Browser Based Authentication portal settings.browser_based_authentication_portal_settings blocks are documented below.
- authentication_
settings ManagementSimple Gateway Identity Awareness Settings Browser Based Authentication Settings Authentication Settings - Authentication Settings for Browser Based Authentication.authentication_settings blocks are documented below.
- browser_
based_ Managementauthentication_ portal_ settings Simple Gateway Identity Awareness Settings Browser Based Authentication Settings Browser Based Authentication Portal Settings - Browser Based Authentication portal settings.browser_based_authentication_portal_settings blocks are documented below.
- authentication
Settings Property Map - Authentication Settings for Browser Based Authentication.authentication_settings blocks are documented below.
- browser
Based Property MapAuthentication Portal Settings - Browser Based Authentication portal settings.browser_based_authentication_portal_settings blocks are documented below.
ManagementSimpleGatewayIdentityAwarenessSettingsBrowserBasedAuthenticationSettingsAuthenticationSettings, ManagementSimpleGatewayIdentityAwarenessSettingsBrowserBasedAuthenticationSettingsAuthenticationSettingsArgs
- Authentication
Method string - Authentication method.
- Identity
Providers List<string> - Identity provider object identified by the name or UID. Must be set when "authentication-method" was selected to be "identity provider".identity_provider blocks are documented below.
- Radius string
- Radius server object identified by the name or UID. Must be set when "authentication-method" was selected to be "radius".
- Users
Directories ManagementSimple Gateway Identity Awareness Settings Browser Based Authentication Settings Authentication Settings Users Directories - Users directories.users_directories blocks are documented below.
- Authentication
Method string - Authentication method.
- Identity
Providers []string - Identity provider object identified by the name or UID. Must be set when "authentication-method" was selected to be "identity provider".identity_provider blocks are documented below.
- Radius string
- Radius server object identified by the name or UID. Must be set when "authentication-method" was selected to be "radius".
- Users
Directories ManagementSimple Gateway Identity Awareness Settings Browser Based Authentication Settings Authentication Settings Users Directories - Users directories.users_directories blocks are documented below.
- authentication
Method String - Authentication method.
- identity
Providers List<String> - Identity provider object identified by the name or UID. Must be set when "authentication-method" was selected to be "identity provider".identity_provider blocks are documented below.
- radius String
- Radius server object identified by the name or UID. Must be set when "authentication-method" was selected to be "radius".
- users
Directories ManagementSimple Gateway Identity Awareness Settings Browser Based Authentication Settings Authentication Settings Users Directories - Users directories.users_directories blocks are documented below.
- authentication
Method string - Authentication method.
- identity
Providers string[] - Identity provider object identified by the name or UID. Must be set when "authentication-method" was selected to be "identity provider".identity_provider blocks are documented below.
- radius string
- Radius server object identified by the name or UID. Must be set when "authentication-method" was selected to be "radius".
- users
Directories ManagementSimple Gateway Identity Awareness Settings Browser Based Authentication Settings Authentication Settings Users Directories - Users directories.users_directories blocks are documented below.
- authentication_
method str - Authentication method.
- identity_
providers Sequence[str] - Identity provider object identified by the name or UID. Must be set when "authentication-method" was selected to be "identity provider".identity_provider blocks are documented below.
- radius str
- Radius server object identified by the name or UID. Must be set when "authentication-method" was selected to be "radius".
- users_
directories ManagementSimple Gateway Identity Awareness Settings Browser Based Authentication Settings Authentication Settings Users Directories - Users directories.users_directories blocks are documented below.
- authentication
Method String - Authentication method.
- identity
Providers List<String> - Identity provider object identified by the name or UID. Must be set when "authentication-method" was selected to be "identity provider".identity_provider blocks are documented below.
- radius String
- Radius server object identified by the name or UID. Must be set when "authentication-method" was selected to be "radius".
- users
Directories Property Map - Users directories.users_directories blocks are documented below.
ManagementSimpleGatewayIdentityAwarenessSettingsBrowserBasedAuthenticationSettingsAuthenticationSettingsUsersDirectories, ManagementSimpleGatewayIdentityAwarenessSettingsBrowserBasedAuthenticationSettingsAuthenticationSettingsUsersDirectoriesArgs
- External
User boolProfile - External user profile.
- Internal
Users bool - Internal users.
- Specifics List<string>
- LDAP AU objects identified by the name or UID. Must be set when "users-from-external-directories" was selected to be "specific".specific blocks are documented below.
- Users
From stringExternal Directories - Users from external directories.
- External
User boolProfile - External user profile.
- Internal
Users bool - Internal users.
- Specifics []string
- LDAP AU objects identified by the name or UID. Must be set when "users-from-external-directories" was selected to be "specific".specific blocks are documented below.
- Users
From stringExternal Directories - Users from external directories.
- external
User BooleanProfile - External user profile.
- internal
Users Boolean - Internal users.
- specifics List<String>
- LDAP AU objects identified by the name or UID. Must be set when "users-from-external-directories" was selected to be "specific".specific blocks are documented below.
- users
From StringExternal Directories - Users from external directories.
- external
User booleanProfile - External user profile.
- internal
Users boolean - Internal users.
- specifics string[]
- LDAP AU objects identified by the name or UID. Must be set when "users-from-external-directories" was selected to be "specific".specific blocks are documented below.
- users
From stringExternal Directories - Users from external directories.
- external_
user_ boolprofile - External user profile.
- internal_
users bool - Internal users.
- specifics Sequence[str]
- LDAP AU objects identified by the name or UID. Must be set when "users-from-external-directories" was selected to be "specific".specific blocks are documented below.
- users_
from_ strexternal_ directories - Users from external directories.
- external
User BooleanProfile - External user profile.
- internal
Users Boolean - Internal users.
- specifics List<String>
- LDAP AU objects identified by the name or UID. Must be set when "users-from-external-directories" was selected to be "specific".specific blocks are documented below.
- users
From StringExternal Directories - Users from external directories.
ManagementSimpleGatewayIdentityAwarenessSettingsBrowserBasedAuthenticationSettingsBrowserBasedAuthenticationPortalSettings, ManagementSimpleGatewayIdentityAwarenessSettingsBrowserBasedAuthenticationSettingsBrowserBasedAuthenticationPortalSettingsArgs
- Accessibility
Management
Simple Gateway Identity Awareness Settings Browser Based Authentication Settings Browser Based Authentication Portal Settings Accessibility - Configuration of the portal access settings.accessibility blocks are documented below.
- Certificate
Settings ManagementSimple Gateway Identity Awareness Settings Browser Based Authentication Settings Browser Based Authentication Portal Settings Certificate Settings - Configuration of the portal certificate settings.certificate_settings blocks are documented below.
- Portal
Web ManagementSettings Simple Gateway Identity Awareness Settings Browser Based Authentication Settings Browser Based Authentication Portal Settings Portal Web Settings - Configuration of the portal web settings.portal_web_settings blocks are documented below.
- Accessibility
Management
Simple Gateway Identity Awareness Settings Browser Based Authentication Settings Browser Based Authentication Portal Settings Accessibility - Configuration of the portal access settings.accessibility blocks are documented below.
- Certificate
Settings ManagementSimple Gateway Identity Awareness Settings Browser Based Authentication Settings Browser Based Authentication Portal Settings Certificate Settings - Configuration of the portal certificate settings.certificate_settings blocks are documented below.
- Portal
Web ManagementSettings Simple Gateway Identity Awareness Settings Browser Based Authentication Settings Browser Based Authentication Portal Settings Portal Web Settings - Configuration of the portal web settings.portal_web_settings blocks are documented below.
- accessibility
Management
Simple Gateway Identity Awareness Settings Browser Based Authentication Settings Browser Based Authentication Portal Settings Accessibility - Configuration of the portal access settings.accessibility blocks are documented below.
- certificate
Settings ManagementSimple Gateway Identity Awareness Settings Browser Based Authentication Settings Browser Based Authentication Portal Settings Certificate Settings - Configuration of the portal certificate settings.certificate_settings blocks are documented below.
- portal
Web ManagementSettings Simple Gateway Identity Awareness Settings Browser Based Authentication Settings Browser Based Authentication Portal Settings Portal Web Settings - Configuration of the portal web settings.portal_web_settings blocks are documented below.
- accessibility
Management
Simple Gateway Identity Awareness Settings Browser Based Authentication Settings Browser Based Authentication Portal Settings Accessibility - Configuration of the portal access settings.accessibility blocks are documented below.
- certificate
Settings ManagementSimple Gateway Identity Awareness Settings Browser Based Authentication Settings Browser Based Authentication Portal Settings Certificate Settings - Configuration of the portal certificate settings.certificate_settings blocks are documented below.
- portal
Web ManagementSettings Simple Gateway Identity Awareness Settings Browser Based Authentication Settings Browser Based Authentication Portal Settings Portal Web Settings - Configuration of the portal web settings.portal_web_settings blocks are documented below.
- accessibility
Management
Simple Gateway Identity Awareness Settings Browser Based Authentication Settings Browser Based Authentication Portal Settings Accessibility - Configuration of the portal access settings.accessibility blocks are documented below.
- certificate_
settings ManagementSimple Gateway Identity Awareness Settings Browser Based Authentication Settings Browser Based Authentication Portal Settings Certificate Settings - Configuration of the portal certificate settings.certificate_settings blocks are documented below.
- portal_
web_ Managementsettings Simple Gateway Identity Awareness Settings Browser Based Authentication Settings Browser Based Authentication Portal Settings Portal Web Settings - Configuration of the portal web settings.portal_web_settings blocks are documented below.
- accessibility Property Map
- Configuration of the portal access settings.accessibility blocks are documented below.
- certificate
Settings Property Map - Configuration of the portal certificate settings.certificate_settings blocks are documented below.
- portal
Web Property MapSettings - Configuration of the portal web settings.portal_web_settings blocks are documented below.
ManagementSimpleGatewayIdentityAwarenessSettingsBrowserBasedAuthenticationSettingsBrowserBasedAuthenticationPortalSettingsAccessibility, ManagementSimpleGatewayIdentityAwarenessSettingsBrowserBasedAuthenticationSettingsBrowserBasedAuthenticationPortalSettingsAccessibilityArgs
- Allow
Access stringFrom - Allowed access to the web portal (based on interfaces, or security policy).
- Internal
Access ManagementSettings Simple Gateway Identity Awareness Settings Browser Based Authentication Settings Browser Based Authentication Portal Settings Accessibility Internal Access Settings - Configuration of the additional portal access settings for internal interfaces only.internal_access_settings blocks are documented below.
- Allow
Access stringFrom - Allowed access to the web portal (based on interfaces, or security policy).
- Internal
Access ManagementSettings Simple Gateway Identity Awareness Settings Browser Based Authentication Settings Browser Based Authentication Portal Settings Accessibility Internal Access Settings - Configuration of the additional portal access settings for internal interfaces only.internal_access_settings blocks are documented below.
- allow
Access StringFrom - Allowed access to the web portal (based on interfaces, or security policy).
- internal
Access ManagementSettings Simple Gateway Identity Awareness Settings Browser Based Authentication Settings Browser Based Authentication Portal Settings Accessibility Internal Access Settings - Configuration of the additional portal access settings for internal interfaces only.internal_access_settings blocks are documented below.
- allow
Access stringFrom - Allowed access to the web portal (based on interfaces, or security policy).
- internal
Access ManagementSettings Simple Gateway Identity Awareness Settings Browser Based Authentication Settings Browser Based Authentication Portal Settings Accessibility Internal Access Settings - Configuration of the additional portal access settings for internal interfaces only.internal_access_settings blocks are documented below.
- allow_
access_ strfrom - Allowed access to the web portal (based on interfaces, or security policy).
- internal_
access_ Managementsettings Simple Gateway Identity Awareness Settings Browser Based Authentication Settings Browser Based Authentication Portal Settings Accessibility Internal Access Settings - Configuration of the additional portal access settings for internal interfaces only.internal_access_settings blocks are documented below.
- allow
Access StringFrom - Allowed access to the web portal (based on interfaces, or security policy).
- internal
Access Property MapSettings - Configuration of the additional portal access settings for internal interfaces only.internal_access_settings blocks are documented below.
ManagementSimpleGatewayIdentityAwarenessSettingsBrowserBasedAuthenticationSettingsBrowserBasedAuthenticationPortalSettingsAccessibilityInternalAccessSettings, ManagementSimpleGatewayIdentityAwarenessSettingsBrowserBasedAuthenticationSettingsBrowserBasedAuthenticationPortalSettingsAccessibilityInternalAccessSettingsArgs
- Dmz bool
- Controls portal access settings for internal interfaces, whose topology is set to 'DMZ'.
- Undefined bool
- Controls portal access settings for internal interfaces, whose topology is set to 'Undefined'.
- Vpn bool
- Controls portal access settings for interfaces that are part of a VPN Encryption Domain.
- Dmz bool
- Controls portal access settings for internal interfaces, whose topology is set to 'DMZ'.
- Undefined bool
- Controls portal access settings for internal interfaces, whose topology is set to 'Undefined'.
- Vpn bool
- Controls portal access settings for interfaces that are part of a VPN Encryption Domain.
- dmz Boolean
- Controls portal access settings for internal interfaces, whose topology is set to 'DMZ'.
- undefined Boolean
- Controls portal access settings for internal interfaces, whose topology is set to 'Undefined'.
- vpn Boolean
- Controls portal access settings for interfaces that are part of a VPN Encryption Domain.
- dmz boolean
- Controls portal access settings for internal interfaces, whose topology is set to 'DMZ'.
- undefined boolean
- Controls portal access settings for internal interfaces, whose topology is set to 'Undefined'.
- vpn boolean
- Controls portal access settings for interfaces that are part of a VPN Encryption Domain.
- dmz bool
- Controls portal access settings for internal interfaces, whose topology is set to 'DMZ'.
- undefined bool
- Controls portal access settings for internal interfaces, whose topology is set to 'Undefined'.
- vpn bool
- Controls portal access settings for interfaces that are part of a VPN Encryption Domain.
- dmz Boolean
- Controls portal access settings for internal interfaces, whose topology is set to 'DMZ'.
- undefined Boolean
- Controls portal access settings for internal interfaces, whose topology is set to 'Undefined'.
- vpn Boolean
- Controls portal access settings for interfaces that are part of a VPN Encryption Domain.
ManagementSimpleGatewayIdentityAwarenessSettingsBrowserBasedAuthenticationSettingsBrowserBasedAuthenticationPortalSettingsCertificateSettings, ManagementSimpleGatewayIdentityAwarenessSettingsBrowserBasedAuthenticationSettingsBrowserBasedAuthenticationPortalSettingsCertificateSettingsArgs
- Base64Certificate string
- The certificate file encoded in Base64 with padding. This file must be in the *.p12 format.
- Base64Password string
- Password (encoded in Base64 with padding) for the certificate file.
- Base64Certificate string
- The certificate file encoded in Base64 with padding. This file must be in the *.p12 format.
- Base64Password string
- Password (encoded in Base64 with padding) for the certificate file.
- base64Certificate String
- The certificate file encoded in Base64 with padding. This file must be in the *.p12 format.
- base64Password String
- Password (encoded in Base64 with padding) for the certificate file.
- base64Certificate string
- The certificate file encoded in Base64 with padding. This file must be in the *.p12 format.
- base64Password string
- Password (encoded in Base64 with padding) for the certificate file.
- base64_
certificate str - The certificate file encoded in Base64 with padding. This file must be in the *.p12 format.
- base64_
password str - Password (encoded in Base64 with padding) for the certificate file.
- base64Certificate String
- The certificate file encoded in Base64 with padding. This file must be in the *.p12 format.
- base64Password String
- Password (encoded in Base64 with padding) for the certificate file.
ManagementSimpleGatewayIdentityAwarenessSettingsBrowserBasedAuthenticationSettingsBrowserBasedAuthenticationPortalSettingsPortalWebSettings, ManagementSimpleGatewayIdentityAwarenessSettingsBrowserBasedAuthenticationSettingsBrowserBasedAuthenticationPortalSettingsPortalWebSettingsArgs
ManagementSimpleGatewayIdentityAwarenessSettingsIdentityAgentSettings, ManagementSimpleGatewayIdentityAwarenessSettingsIdentityAgentSettingsArgs
- Agents
Interval doubleKeepalive - Agents send keepalive period (minutes).
- Authentication
Settings ManagementSimple Gateway Identity Awareness Settings Identity Agent Settings Authentication Settings - Authentication Settings for Identity Agent.authentication_settings blocks are documented below.
- Identity
Agent ManagementPortal Settings Simple Gateway Identity Awareness Settings Identity Agent Settings Identity Agent Portal Settings - Identity Agent accessibility settings.identity_agent_portal_settings blocks are documented below.
- User
Reauthenticate doubleInterval - Agent reauthenticate time interval (minutes).
- Agents
Interval float64Keepalive - Agents send keepalive period (minutes).
- Authentication
Settings ManagementSimple Gateway Identity Awareness Settings Identity Agent Settings Authentication Settings - Authentication Settings for Identity Agent.authentication_settings blocks are documented below.
- Identity
Agent ManagementPortal Settings Simple Gateway Identity Awareness Settings Identity Agent Settings Identity Agent Portal Settings - Identity Agent accessibility settings.identity_agent_portal_settings blocks are documented below.
- User
Reauthenticate float64Interval - Agent reauthenticate time interval (minutes).
- agents
Interval DoubleKeepalive - Agents send keepalive period (minutes).
- authentication
Settings ManagementSimple Gateway Identity Awareness Settings Identity Agent Settings Authentication Settings - Authentication Settings for Identity Agent.authentication_settings blocks are documented below.
- identity
Agent ManagementPortal Settings Simple Gateway Identity Awareness Settings Identity Agent Settings Identity Agent Portal Settings - Identity Agent accessibility settings.identity_agent_portal_settings blocks are documented below.
- user
Reauthenticate DoubleInterval - Agent reauthenticate time interval (minutes).
- agents
Interval numberKeepalive - Agents send keepalive period (minutes).
- authentication
Settings ManagementSimple Gateway Identity Awareness Settings Identity Agent Settings Authentication Settings - Authentication Settings for Identity Agent.authentication_settings blocks are documented below.
- identity
Agent ManagementPortal Settings Simple Gateway Identity Awareness Settings Identity Agent Settings Identity Agent Portal Settings - Identity Agent accessibility settings.identity_agent_portal_settings blocks are documented below.
- user
Reauthenticate numberInterval - Agent reauthenticate time interval (minutes).
- agents_
interval_ floatkeepalive - Agents send keepalive period (minutes).
- authentication_
settings ManagementSimple Gateway Identity Awareness Settings Identity Agent Settings Authentication Settings - Authentication Settings for Identity Agent.authentication_settings blocks are documented below.
- identity_
agent_ Managementportal_ settings Simple Gateway Identity Awareness Settings Identity Agent Settings Identity Agent Portal Settings - Identity Agent accessibility settings.identity_agent_portal_settings blocks are documented below.
- user_
reauthenticate_ floatinterval - Agent reauthenticate time interval (minutes).
- agents
Interval NumberKeepalive - Agents send keepalive period (minutes).
- authentication
Settings Property Map - Authentication Settings for Identity Agent.authentication_settings blocks are documented below.
- identity
Agent Property MapPortal Settings - Identity Agent accessibility settings.identity_agent_portal_settings blocks are documented below.
- user
Reauthenticate NumberInterval - Agent reauthenticate time interval (minutes).
ManagementSimpleGatewayIdentityAwarenessSettingsIdentityAgentSettingsAuthenticationSettings, ManagementSimpleGatewayIdentityAwarenessSettingsIdentityAgentSettingsAuthenticationSettingsArgs
- Authentication
Method string - Authentication method.
- Radius string
- Radius server object identified by the name or UID. Must be set when "authentication-method" was selected to be "radius".
- Users
Directories ManagementSimple Gateway Identity Awareness Settings Identity Agent Settings Authentication Settings Users Directories - Users directories.users_directories blocks are documented below.
- Authentication
Method string - Authentication method.
- Radius string
- Radius server object identified by the name or UID. Must be set when "authentication-method" was selected to be "radius".
- Users
Directories ManagementSimple Gateway Identity Awareness Settings Identity Agent Settings Authentication Settings Users Directories - Users directories.users_directories blocks are documented below.
- authentication
Method String - Authentication method.
- radius String
- Radius server object identified by the name or UID. Must be set when "authentication-method" was selected to be "radius".
- users
Directories ManagementSimple Gateway Identity Awareness Settings Identity Agent Settings Authentication Settings Users Directories - Users directories.users_directories blocks are documented below.
- authentication
Method string - Authentication method.
- radius string
- Radius server object identified by the name or UID. Must be set when "authentication-method" was selected to be "radius".
- users
Directories ManagementSimple Gateway Identity Awareness Settings Identity Agent Settings Authentication Settings Users Directories - Users directories.users_directories blocks are documented below.
- authentication_
method str - Authentication method.
- radius str
- Radius server object identified by the name or UID. Must be set when "authentication-method" was selected to be "radius".
- users_
directories ManagementSimple Gateway Identity Awareness Settings Identity Agent Settings Authentication Settings Users Directories - Users directories.users_directories blocks are documented below.
- authentication
Method String - Authentication method.
- radius String
- Radius server object identified by the name or UID. Must be set when "authentication-method" was selected to be "radius".
- users
Directories Property Map - Users directories.users_directories blocks are documented below.
ManagementSimpleGatewayIdentityAwarenessSettingsIdentityAgentSettingsAuthenticationSettingsUsersDirectories, ManagementSimpleGatewayIdentityAwarenessSettingsIdentityAgentSettingsAuthenticationSettingsUsersDirectoriesArgs
- External
User boolProfile - External user profile.
- Internal
Users bool - Internal users.
- Specifics List<string>
- LDAP AU objects identified by the name or UID. Must be set when "users-from-external-directories" was selected to be "specific".specific blocks are documented below.
- Users
From stringExternal Directories - Users from external directories.
- External
User boolProfile - External user profile.
- Internal
Users bool - Internal users.
- Specifics []string
- LDAP AU objects identified by the name or UID. Must be set when "users-from-external-directories" was selected to be "specific".specific blocks are documented below.
- Users
From stringExternal Directories - Users from external directories.
- external
User BooleanProfile - External user profile.
- internal
Users Boolean - Internal users.
- specifics List<String>
- LDAP AU objects identified by the name or UID. Must be set when "users-from-external-directories" was selected to be "specific".specific blocks are documented below.
- users
From StringExternal Directories - Users from external directories.
- external
User booleanProfile - External user profile.
- internal
Users boolean - Internal users.
- specifics string[]
- LDAP AU objects identified by the name or UID. Must be set when "users-from-external-directories" was selected to be "specific".specific blocks are documented below.
- users
From stringExternal Directories - Users from external directories.
- external_
user_ boolprofile - External user profile.
- internal_
users bool - Internal users.
- specifics Sequence[str]
- LDAP AU objects identified by the name or UID. Must be set when "users-from-external-directories" was selected to be "specific".specific blocks are documented below.
- users_
from_ strexternal_ directories - Users from external directories.
- external
User BooleanProfile - External user profile.
- internal
Users Boolean - Internal users.
- specifics List<String>
- LDAP AU objects identified by the name or UID. Must be set when "users-from-external-directories" was selected to be "specific".specific blocks are documented below.
- users
From StringExternal Directories - Users from external directories.
ManagementSimpleGatewayIdentityAwarenessSettingsIdentityAgentSettingsIdentityAgentPortalSettings, ManagementSimpleGatewayIdentityAwarenessSettingsIdentityAgentSettingsIdentityAgentPortalSettingsArgs
- Accessibility
Management
Simple Gateway Identity Awareness Settings Identity Agent Settings Identity Agent Portal Settings Accessibility - Configuration of the portal access settings.accessibility blocks are documented below.
- Accessibility
Management
Simple Gateway Identity Awareness Settings Identity Agent Settings Identity Agent Portal Settings Accessibility - Configuration of the portal access settings.accessibility blocks are documented below.
- accessibility
Management
Simple Gateway Identity Awareness Settings Identity Agent Settings Identity Agent Portal Settings Accessibility - Configuration of the portal access settings.accessibility blocks are documented below.
- accessibility
Management
Simple Gateway Identity Awareness Settings Identity Agent Settings Identity Agent Portal Settings Accessibility - Configuration of the portal access settings.accessibility blocks are documented below.
- accessibility
Management
Simple Gateway Identity Awareness Settings Identity Agent Settings Identity Agent Portal Settings Accessibility - Configuration of the portal access settings.accessibility blocks are documented below.
- accessibility Property Map
- Configuration of the portal access settings.accessibility blocks are documented below.
ManagementSimpleGatewayIdentityAwarenessSettingsIdentityAgentSettingsIdentityAgentPortalSettingsAccessibility, ManagementSimpleGatewayIdentityAwarenessSettingsIdentityAgentSettingsIdentityAgentPortalSettingsAccessibilityArgs
- Allow
Access stringFrom - Allowed access to the web portal (based on interfaces, or security policy).
- Internal
Access ManagementSettings Simple Gateway Identity Awareness Settings Identity Agent Settings Identity Agent Portal Settings Accessibility Internal Access Settings - Configuration of the additional portal access settings for internal interfaces only.internal_access_settings blocks are documented below.
- Allow
Access stringFrom - Allowed access to the web portal (based on interfaces, or security policy).
- Internal
Access ManagementSettings Simple Gateway Identity Awareness Settings Identity Agent Settings Identity Agent Portal Settings Accessibility Internal Access Settings - Configuration of the additional portal access settings for internal interfaces only.internal_access_settings blocks are documented below.
- allow
Access StringFrom - Allowed access to the web portal (based on interfaces, or security policy).
- internal
Access ManagementSettings Simple Gateway Identity Awareness Settings Identity Agent Settings Identity Agent Portal Settings Accessibility Internal Access Settings - Configuration of the additional portal access settings for internal interfaces only.internal_access_settings blocks are documented below.
- allow
Access stringFrom - Allowed access to the web portal (based on interfaces, or security policy).
- internal
Access ManagementSettings Simple Gateway Identity Awareness Settings Identity Agent Settings Identity Agent Portal Settings Accessibility Internal Access Settings - Configuration of the additional portal access settings for internal interfaces only.internal_access_settings blocks are documented below.
- allow_
access_ strfrom - Allowed access to the web portal (based on interfaces, or security policy).
- internal_
access_ Managementsettings Simple Gateway Identity Awareness Settings Identity Agent Settings Identity Agent Portal Settings Accessibility Internal Access Settings - Configuration of the additional portal access settings for internal interfaces only.internal_access_settings blocks are documented below.
- allow
Access StringFrom - Allowed access to the web portal (based on interfaces, or security policy).
- internal
Access Property MapSettings - Configuration of the additional portal access settings for internal interfaces only.internal_access_settings blocks are documented below.
ManagementSimpleGatewayIdentityAwarenessSettingsIdentityAgentSettingsIdentityAgentPortalSettingsAccessibilityInternalAccessSettings, ManagementSimpleGatewayIdentityAwarenessSettingsIdentityAgentSettingsIdentityAgentPortalSettingsAccessibilityInternalAccessSettingsArgs
- Dmz bool
- Controls portal access settings for internal interfaces, whose topology is set to 'DMZ'.
- Undefined bool
- Controls portal access settings for internal interfaces, whose topology is set to 'Undefined'.
- Vpn bool
- Controls portal access settings for interfaces that are part of a VPN Encryption Domain.
- Dmz bool
- Controls portal access settings for internal interfaces, whose topology is set to 'DMZ'.
- Undefined bool
- Controls portal access settings for internal interfaces, whose topology is set to 'Undefined'.
- Vpn bool
- Controls portal access settings for interfaces that are part of a VPN Encryption Domain.
- dmz Boolean
- Controls portal access settings for internal interfaces, whose topology is set to 'DMZ'.
- undefined Boolean
- Controls portal access settings for internal interfaces, whose topology is set to 'Undefined'.
- vpn Boolean
- Controls portal access settings for interfaces that are part of a VPN Encryption Domain.
- dmz boolean
- Controls portal access settings for internal interfaces, whose topology is set to 'DMZ'.
- undefined boolean
- Controls portal access settings for internal interfaces, whose topology is set to 'Undefined'.
- vpn boolean
- Controls portal access settings for interfaces that are part of a VPN Encryption Domain.
- dmz bool
- Controls portal access settings for internal interfaces, whose topology is set to 'DMZ'.
- undefined bool
- Controls portal access settings for internal interfaces, whose topology is set to 'Undefined'.
- vpn bool
- Controls portal access settings for interfaces that are part of a VPN Encryption Domain.
- dmz Boolean
- Controls portal access settings for internal interfaces, whose topology is set to 'DMZ'.
- undefined Boolean
- Controls portal access settings for internal interfaces, whose topology is set to 'Undefined'.
- vpn Boolean
- Controls portal access settings for interfaces that are part of a VPN Encryption Domain.
ManagementSimpleGatewayIdentityAwarenessSettingsIdentityCollectorSettings, ManagementSimpleGatewayIdentityAwarenessSettingsIdentityCollectorSettingsArgs
-
List<Management
Simple Gateway Identity Awareness Settings Identity Collector Settings Authorized Client> - Authorized Clients.authorized_clients blocks are documented below.
- Authentication
Settings ManagementSimple Gateway Identity Awareness Settings Identity Collector Settings Authentication Settings - Authentication Settings for Identity Collector.authentication_settings blocks are documented below.
- Client
Access ManagementPermissions Simple Gateway Identity Awareness Settings Identity Collector Settings Client Access Permissions - Identity Collector accessibility settings.client_access_permissions blocks are documented below.
-
[]Management
Simple Gateway Identity Awareness Settings Identity Collector Settings Authorized Client - Authorized Clients.authorized_clients blocks are documented below.
- Authentication
Settings ManagementSimple Gateway Identity Awareness Settings Identity Collector Settings Authentication Settings - Authentication Settings for Identity Collector.authentication_settings blocks are documented below.
- Client
Access ManagementPermissions Simple Gateway Identity Awareness Settings Identity Collector Settings Client Access Permissions - Identity Collector accessibility settings.client_access_permissions blocks are documented below.
-
List<Management
Simple Gateway Identity Awareness Settings Identity Collector Settings Authorized Client> - Authorized Clients.authorized_clients blocks are documented below.
- authentication
Settings ManagementSimple Gateway Identity Awareness Settings Identity Collector Settings Authentication Settings - Authentication Settings for Identity Collector.authentication_settings blocks are documented below.
- client
Access ManagementPermissions Simple Gateway Identity Awareness Settings Identity Collector Settings Client Access Permissions - Identity Collector accessibility settings.client_access_permissions blocks are documented below.
-
Management
Simple Gateway Identity Awareness Settings Identity Collector Settings Authorized Client[] - Authorized Clients.authorized_clients blocks are documented below.
- authentication
Settings ManagementSimple Gateway Identity Awareness Settings Identity Collector Settings Authentication Settings - Authentication Settings for Identity Collector.authentication_settings blocks are documented below.
- client
Access ManagementPermissions Simple Gateway Identity Awareness Settings Identity Collector Settings Client Access Permissions - Identity Collector accessibility settings.client_access_permissions blocks are documented below.
-
Sequence[Management
Simple Gateway Identity Awareness Settings Identity Collector Settings Authorized Client] - Authorized Clients.authorized_clients blocks are documented below.
- authentication_
settings ManagementSimple Gateway Identity Awareness Settings Identity Collector Settings Authentication Settings - Authentication Settings for Identity Collector.authentication_settings blocks are documented below.
- client_
access_ Managementpermissions Simple Gateway Identity Awareness Settings Identity Collector Settings Client Access Permissions - Identity Collector accessibility settings.client_access_permissions blocks are documented below.
- List<Property Map>
- Authorized Clients.authorized_clients blocks are documented below.
- authentication
Settings Property Map - Authentication Settings for Identity Collector.authentication_settings blocks are documented below.
- client
Access Property MapPermissions - Identity Collector accessibility settings.client_access_permissions blocks are documented below.
ManagementSimpleGatewayIdentityAwarenessSettingsIdentityCollectorSettingsAuthenticationSettings, ManagementSimpleGatewayIdentityAwarenessSettingsIdentityCollectorSettingsAuthenticationSettingsArgs
- Users
Directories ManagementSimple Gateway Identity Awareness Settings Identity Collector Settings Authentication Settings Users Directories - Users directories.users_directories blocks are documented below.
- Users
Directories ManagementSimple Gateway Identity Awareness Settings Identity Collector Settings Authentication Settings Users Directories - Users directories.users_directories blocks are documented below.
- users
Directories ManagementSimple Gateway Identity Awareness Settings Identity Collector Settings Authentication Settings Users Directories - Users directories.users_directories blocks are documented below.
- users
Directories ManagementSimple Gateway Identity Awareness Settings Identity Collector Settings Authentication Settings Users Directories - Users directories.users_directories blocks are documented below.
- users_
directories ManagementSimple Gateway Identity Awareness Settings Identity Collector Settings Authentication Settings Users Directories - Users directories.users_directories blocks are documented below.
- users
Directories Property Map - Users directories.users_directories blocks are documented below.
ManagementSimpleGatewayIdentityAwarenessSettingsIdentityCollectorSettingsAuthenticationSettingsUsersDirectories, ManagementSimpleGatewayIdentityAwarenessSettingsIdentityCollectorSettingsAuthenticationSettingsUsersDirectoriesArgs
- External
User boolProfile - External user profile.
- Internal
Users bool - Internal users.
- Specifics List<string>
- LDAP AU objects identified by the name or UID. Must be set when "users-from-external-directories" was selected to be "specific".specific blocks are documented below.
- Users
From stringExternal Directories - Users from external directories.
- External
User boolProfile - External user profile.
- Internal
Users bool - Internal users.
- Specifics []string
- LDAP AU objects identified by the name or UID. Must be set when "users-from-external-directories" was selected to be "specific".specific blocks are documented below.
- Users
From stringExternal Directories - Users from external directories.
- external
User BooleanProfile - External user profile.
- internal
Users Boolean - Internal users.
- specifics List<String>
- LDAP AU objects identified by the name or UID. Must be set when "users-from-external-directories" was selected to be "specific".specific blocks are documented below.
- users
From StringExternal Directories - Users from external directories.
- external
User booleanProfile - External user profile.
- internal
Users boolean - Internal users.
- specifics string[]
- LDAP AU objects identified by the name or UID. Must be set when "users-from-external-directories" was selected to be "specific".specific blocks are documented below.
- users
From stringExternal Directories - Users from external directories.
- external_
user_ boolprofile - External user profile.
- internal_
users bool - Internal users.
- specifics Sequence[str]
- LDAP AU objects identified by the name or UID. Must be set when "users-from-external-directories" was selected to be "specific".specific blocks are documented below.
- users_
from_ strexternal_ directories - Users from external directories.
- external
User BooleanProfile - External user profile.
- internal
Users Boolean - Internal users.
- specifics List<String>
- LDAP AU objects identified by the name or UID. Must be set when "users-from-external-directories" was selected to be "specific".specific blocks are documented below.
- users
From StringExternal Directories - Users from external directories.
ManagementSimpleGatewayIdentityAwarenessSettingsIdentityCollectorSettingsAuthorizedClient, ManagementSimpleGatewayIdentityAwarenessSettingsIdentityCollectorSettingsAuthorizedClientArgs
- Client string
- Host / Network Group Name or UID.
- Client
Secret string - Client Secret.
- Client string
- Host / Network Group Name or UID.
- Client
Secret string - Client Secret.
- client String
- Host / Network Group Name or UID.
- client
Secret String - Client Secret.
- client string
- Host / Network Group Name or UID.
- client
Secret string - Client Secret.
- client str
- Host / Network Group Name or UID.
- client_
secret str - Client Secret.
- client String
- Host / Network Group Name or UID.
- client
Secret String - Client Secret.
ManagementSimpleGatewayIdentityAwarenessSettingsIdentityCollectorSettingsClientAccessPermissions, ManagementSimpleGatewayIdentityAwarenessSettingsIdentityCollectorSettingsClientAccessPermissionsArgs
- Accessibility
Management
Simple Gateway Identity Awareness Settings Identity Collector Settings Client Access Permissions Accessibility - Configuration of the portal access settings.accessibility blocks are documented below.
- Accessibility
Management
Simple Gateway Identity Awareness Settings Identity Collector Settings Client Access Permissions Accessibility - Configuration of the portal access settings.accessibility blocks are documented below.
- accessibility
Management
Simple Gateway Identity Awareness Settings Identity Collector Settings Client Access Permissions Accessibility - Configuration of the portal access settings.accessibility blocks are documented below.
- accessibility
Management
Simple Gateway Identity Awareness Settings Identity Collector Settings Client Access Permissions Accessibility - Configuration of the portal access settings.accessibility blocks are documented below.
- accessibility
Management
Simple Gateway Identity Awareness Settings Identity Collector Settings Client Access Permissions Accessibility - Configuration of the portal access settings.accessibility blocks are documented below.
- accessibility Property Map
- Configuration of the portal access settings.accessibility blocks are documented below.
ManagementSimpleGatewayIdentityAwarenessSettingsIdentityCollectorSettingsClientAccessPermissionsAccessibility, ManagementSimpleGatewayIdentityAwarenessSettingsIdentityCollectorSettingsClientAccessPermissionsAccessibilityArgs
- Allow
Access stringFrom - Allowed access to the web portal (based on interfaces, or security policy).
- Internal
Access ManagementSettings Simple Gateway Identity Awareness Settings Identity Collector Settings Client Access Permissions Accessibility Internal Access Settings - Configuration of the additional portal access settings for internal interfaces only.internal_access_settings blocks are documented below.
- Allow
Access stringFrom - Allowed access to the web portal (based on interfaces, or security policy).
- Internal
Access ManagementSettings Simple Gateway Identity Awareness Settings Identity Collector Settings Client Access Permissions Accessibility Internal Access Settings - Configuration of the additional portal access settings for internal interfaces only.internal_access_settings blocks are documented below.
- allow
Access StringFrom - Allowed access to the web portal (based on interfaces, or security policy).
- internal
Access ManagementSettings Simple Gateway Identity Awareness Settings Identity Collector Settings Client Access Permissions Accessibility Internal Access Settings - Configuration of the additional portal access settings for internal interfaces only.internal_access_settings blocks are documented below.
- allow
Access stringFrom - Allowed access to the web portal (based on interfaces, or security policy).
- internal
Access ManagementSettings Simple Gateway Identity Awareness Settings Identity Collector Settings Client Access Permissions Accessibility Internal Access Settings - Configuration of the additional portal access settings for internal interfaces only.internal_access_settings blocks are documented below.
- allow_
access_ strfrom - Allowed access to the web portal (based on interfaces, or security policy).
- internal_
access_ Managementsettings Simple Gateway Identity Awareness Settings Identity Collector Settings Client Access Permissions Accessibility Internal Access Settings - Configuration of the additional portal access settings for internal interfaces only.internal_access_settings blocks are documented below.
- allow
Access StringFrom - Allowed access to the web portal (based on interfaces, or security policy).
- internal
Access Property MapSettings - Configuration of the additional portal access settings for internal interfaces only.internal_access_settings blocks are documented below.
ManagementSimpleGatewayIdentityAwarenessSettingsIdentityCollectorSettingsClientAccessPermissionsAccessibilityInternalAccessSettings, ManagementSimpleGatewayIdentityAwarenessSettingsIdentityCollectorSettingsClientAccessPermissionsAccessibilityInternalAccessSettingsArgs
- Dmz bool
- Controls portal access settings for internal interfaces, whose topology is set to 'DMZ'.
- Undefined bool
- Controls portal access settings for internal interfaces, whose topology is set to 'Undefined'.
- Vpn bool
- Controls portal access settings for interfaces that are part of a VPN Encryption Domain.
- Dmz bool
- Controls portal access settings for internal interfaces, whose topology is set to 'DMZ'.
- Undefined bool
- Controls portal access settings for internal interfaces, whose topology is set to 'Undefined'.
- Vpn bool
- Controls portal access settings for interfaces that are part of a VPN Encryption Domain.
- dmz Boolean
- Controls portal access settings for internal interfaces, whose topology is set to 'DMZ'.
- undefined Boolean
- Controls portal access settings for internal interfaces, whose topology is set to 'Undefined'.
- vpn Boolean
- Controls portal access settings for interfaces that are part of a VPN Encryption Domain.
- dmz boolean
- Controls portal access settings for internal interfaces, whose topology is set to 'DMZ'.
- undefined boolean
- Controls portal access settings for internal interfaces, whose topology is set to 'Undefined'.
- vpn boolean
- Controls portal access settings for interfaces that are part of a VPN Encryption Domain.
- dmz bool
- Controls portal access settings for internal interfaces, whose topology is set to 'DMZ'.
- undefined bool
- Controls portal access settings for internal interfaces, whose topology is set to 'Undefined'.
- vpn bool
- Controls portal access settings for interfaces that are part of a VPN Encryption Domain.
- dmz Boolean
- Controls portal access settings for internal interfaces, whose topology is set to 'DMZ'.
- undefined Boolean
- Controls portal access settings for internal interfaces, whose topology is set to 'Undefined'.
- vpn Boolean
- Controls portal access settings for interfaces that are part of a VPN Encryption Domain.
ManagementSimpleGatewayIdentityAwarenessSettingsIdentitySharingSettings, ManagementSimpleGatewayIdentityAwarenessSettingsIdentitySharingSettingsArgs
- Receive
From boolOther Gateways - Enable receiving identity from other gateways.
- Receive
Froms List<string> - Gateway(s) to receive identity from.receive_from blocks are documented below.
- bool
- Enable identity sharing with other gateways.
- Receive
From boolOther Gateways - Enable receiving identity from other gateways.
- Receive
Froms []string - Gateway(s) to receive identity from.receive_from blocks are documented below.
- bool
- Enable identity sharing with other gateways.
- receive
From BooleanOther Gateways - Enable receiving identity from other gateways.
- receive
Froms List<String> - Gateway(s) to receive identity from.receive_from blocks are documented below.
- Boolean
- Enable identity sharing with other gateways.
- receive
From booleanOther Gateways - Enable receiving identity from other gateways.
- receive
Froms string[] - Gateway(s) to receive identity from.receive_from blocks are documented below.
- boolean
- Enable identity sharing with other gateways.
- receive_
from_ boolother_ gateways - Enable receiving identity from other gateways.
- receive_
froms Sequence[str] - Gateway(s) to receive identity from.receive_from blocks are documented below.
- bool
- Enable identity sharing with other gateways.
- receive
From BooleanOther Gateways - Enable receiving identity from other gateways.
- receive
Froms List<String> - Gateway(s) to receive identity from.receive_from blocks are documented below.
- Boolean
- Enable identity sharing with other gateways.
ManagementSimpleGatewayIdentityAwarenessSettingsProxySettings, ManagementSimpleGatewayIdentityAwarenessSettingsProxySettingsArgs
- Detect
Using boolXForward For - Whether to use X-Forward-For HTTP header, which is added by the proxy server to keep track of the original source IP.
- Detect
Using boolXForward For - Whether to use X-Forward-For HTTP header, which is added by the proxy server to keep track of the original source IP.
- detect
Using BooleanXForward For - Whether to use X-Forward-For HTTP header, which is added by the proxy server to keep track of the original source IP.
- detect
Using booleanXForward For - Whether to use X-Forward-For HTTP header, which is added by the proxy server to keep track of the original source IP.
- detect_
using_ boolx_ forward_ for - Whether to use X-Forward-For HTTP header, which is added by the proxy server to keep track of the original source IP.
- detect
Using BooleanXForward For - Whether to use X-Forward-For HTTP header, which is added by the proxy server to keep track of the original source IP.
ManagementSimpleGatewayInterface, ManagementSimpleGatewayInterfaceArgs
- Name string
- Object name. Must be unique in the domain.
- Anti
Spoofing bool - N/A
- Anti
Spoofing ManagementSettings Simple Gateway Interface Anti Spoofing Settings - N/Aanti_spoofing_settings blocks are documented below.
- Color string
- Color of the object. Should be one of existing colors.
- Comments string
- Comments string.
- Ipv4Address string
- IPv4 address.
- Ipv4Mask
Length string - IPv4 network mask length.
- Ipv4Network
Mask string - IPv4 network address.
- Ipv6Address string
- IPv6 address.
- Ipv6Mask
Length string - IPv6 network mask length.
- Ipv6Network
Mask string - IPv6 network address.
- Security
Zone bool - N/A
- Security
Zone ManagementSettings Simple Gateway Interface Security Zone Settings - N/Asecurity_zone_settings blocks are documented below.
- Topology string
- N/A
- Topology
Automatic stringCalculation - Shows the automatic topology calculation.
- Topology
Settings ManagementSimple Gateway Interface Topology Settings - N/Atopology_settings blocks are documented below.
- Name string
- Object name. Must be unique in the domain.
- Anti
Spoofing bool - N/A
- Anti
Spoofing ManagementSettings Simple Gateway Interface Anti Spoofing Settings - N/Aanti_spoofing_settings blocks are documented below.
- Color string
- Color of the object. Should be one of existing colors.
- Comments string
- Comments string.
- Ipv4Address string
- IPv4 address.
- Ipv4Mask
Length string - IPv4 network mask length.
- Ipv4Network
Mask string - IPv4 network address.
- Ipv6Address string
- IPv6 address.
- Ipv6Mask
Length string - IPv6 network mask length.
- Ipv6Network
Mask string - IPv6 network address.
- Security
Zone bool - N/A
- Security
Zone ManagementSettings Simple Gateway Interface Security Zone Settings - N/Asecurity_zone_settings blocks are documented below.
- Topology string
- N/A
- Topology
Automatic stringCalculation - Shows the automatic topology calculation.
- Topology
Settings ManagementSimple Gateway Interface Topology Settings - N/Atopology_settings blocks are documented below.
- name String
- Object name. Must be unique in the domain.
- anti
Spoofing Boolean - N/A
- anti
Spoofing ManagementSettings Simple Gateway Interface Anti Spoofing Settings - N/Aanti_spoofing_settings blocks are documented below.
- color String
- Color of the object. Should be one of existing colors.
- comments String
- Comments string.
- ipv4Address String
- IPv4 address.
- ipv4Mask
Length String - IPv4 network mask length.
- ipv4Network
Mask String - IPv4 network address.
- ipv6Address String
- IPv6 address.
- ipv6Mask
Length String - IPv6 network mask length.
- ipv6Network
Mask String - IPv6 network address.
- security
Zone Boolean - N/A
- security
Zone ManagementSettings Simple Gateway Interface Security Zone Settings - N/Asecurity_zone_settings blocks are documented below.
- topology String
- N/A
- topology
Automatic StringCalculation - Shows the automatic topology calculation.
- topology
Settings ManagementSimple Gateway Interface Topology Settings - N/Atopology_settings blocks are documented below.
- name string
- Object name. Must be unique in the domain.
- anti
Spoofing boolean - N/A
- anti
Spoofing ManagementSettings Simple Gateway Interface Anti Spoofing Settings - N/Aanti_spoofing_settings blocks are documented below.
- color string
- Color of the object. Should be one of existing colors.
- comments string
- Comments string.
- ipv4Address string
- IPv4 address.
- ipv4Mask
Length string - IPv4 network mask length.
- ipv4Network
Mask string - IPv4 network address.
- ipv6Address string
- IPv6 address.
- ipv6Mask
Length string - IPv6 network mask length.
- ipv6Network
Mask string - IPv6 network address.
- security
Zone boolean - N/A
- security
Zone ManagementSettings Simple Gateway Interface Security Zone Settings - N/Asecurity_zone_settings blocks are documented below.
- topology string
- N/A
- topology
Automatic stringCalculation - Shows the automatic topology calculation.
- topology
Settings ManagementSimple Gateway Interface Topology Settings - N/Atopology_settings blocks are documented below.
- name str
- Object name. Must be unique in the domain.
- anti_
spoofing bool - N/A
- anti_
spoofing_ Managementsettings Simple Gateway Interface Anti Spoofing Settings - N/Aanti_spoofing_settings blocks are documented below.
- color str
- Color of the object. Should be one of existing colors.
- comments str
- Comments string.
- ipv4_
address str - IPv4 address.
- ipv4_
mask_ strlength - IPv4 network mask length.
- ipv4_
network_ strmask - IPv4 network address.
- ipv6_
address str - IPv6 address.
- ipv6_
mask_ strlength - IPv6 network mask length.
- ipv6_
network_ strmask - IPv6 network address.
- security_
zone bool - N/A
- security_
zone_ Managementsettings Simple Gateway Interface Security Zone Settings - N/Asecurity_zone_settings blocks are documented below.
- topology str
- N/A
- topology_
automatic_ strcalculation - Shows the automatic topology calculation.
- topology_
settings ManagementSimple Gateway Interface Topology Settings - N/Atopology_settings blocks are documented below.
- name String
- Object name. Must be unique in the domain.
- anti
Spoofing Boolean - N/A
- anti
Spoofing Property MapSettings - N/Aanti_spoofing_settings blocks are documented below.
- color String
- Color of the object. Should be one of existing colors.
- comments String
- Comments string.
- ipv4Address String
- IPv4 address.
- ipv4Mask
Length String - IPv4 network mask length.
- ipv4Network
Mask String - IPv4 network address.
- ipv6Address String
- IPv6 address.
- ipv6Mask
Length String - IPv6 network mask length.
- ipv6Network
Mask String - IPv6 network address.
- security
Zone Boolean - N/A
- security
Zone Property MapSettings - N/Asecurity_zone_settings blocks are documented below.
- topology String
- N/A
- topology
Automatic StringCalculation - Shows the automatic topology calculation.
- topology
Settings Property Map - N/Atopology_settings blocks are documented below.
ManagementSimpleGatewayInterfaceAntiSpoofingSettings, ManagementSimpleGatewayInterfaceAntiSpoofingSettingsArgs
- Action string
- If packets will be rejected (the Prevent option) or whether the packets will be monitored (the Detect option).
- Action string
- If packets will be rejected (the Prevent option) or whether the packets will be monitored (the Detect option).
- action String
- If packets will be rejected (the Prevent option) or whether the packets will be monitored (the Detect option).
- action string
- If packets will be rejected (the Prevent option) or whether the packets will be monitored (the Detect option).
- action str
- If packets will be rejected (the Prevent option) or whether the packets will be monitored (the Detect option).
- action String
- If packets will be rejected (the Prevent option) or whether the packets will be monitored (the Detect option).
ManagementSimpleGatewayInterfaceSecurityZoneSettings, ManagementSimpleGatewayInterfaceSecurityZoneSettingsArgs
- Auto
Calculated bool - Security Zone is calculated according to where the interface leads to.
- Specific
Zone string - Security Zone specified manually.
- Auto
Calculated bool - Security Zone is calculated according to where the interface leads to.
- Specific
Zone string - Security Zone specified manually.
- auto
Calculated Boolean - Security Zone is calculated according to where the interface leads to.
- specific
Zone String - Security Zone specified manually.
- auto
Calculated boolean - Security Zone is calculated according to where the interface leads to.
- specific
Zone string - Security Zone specified manually.
- auto_
calculated bool - Security Zone is calculated according to where the interface leads to.
- specific_
zone str - Security Zone specified manually.
- auto
Calculated Boolean - Security Zone is calculated according to where the interface leads to.
- specific
Zone String - Security Zone specified manually.
ManagementSimpleGatewayInterfaceTopologySettings, ManagementSimpleGatewayInterfaceTopologySettingsArgs
- Interface
Leads boolTo Dmz - Whether this interface leads to demilitarized zone (perimeter network).
- Ip
Address stringBehind This Interface - Ip address behind this interface.
- Specific
Network string - Network behind this interface.
- Interface
Leads boolTo Dmz - Whether this interface leads to demilitarized zone (perimeter network).
- Ip
Address stringBehind This Interface - Ip address behind this interface.
- Specific
Network string - Network behind this interface.
- interface
Leads BooleanTo Dmz - Whether this interface leads to demilitarized zone (perimeter network).
- ip
Address StringBehind This Interface - Ip address behind this interface.
- specific
Network String - Network behind this interface.
- interface
Leads booleanTo Dmz - Whether this interface leads to demilitarized zone (perimeter network).
- ip
Address stringBehind This Interface - Ip address behind this interface.
- specific
Network string - Network behind this interface.
- interface_
leads_ boolto_ dmz - Whether this interface leads to demilitarized zone (perimeter network).
- ip_
address_ strbehind_ this_ interface - Ip address behind this interface.
- specific_
network str - Network behind this interface.
- interface
Leads BooleanTo Dmz - Whether this interface leads to demilitarized zone (perimeter network).
- ip
Address StringBehind This Interface - Ip address behind this interface.
- specific
Network String - Network behind this interface.
ManagementSimpleGatewayIpsSettings, ManagementSimpleGatewayIpsSettingsArgs
- Activation
Mode string - Defines whether the IPS blade operates in Detect Only mode or enforces the configured IPS Policy.
- Bypass
All boolUnder Load - Disable/enable all IPS protections until CPU and memory levels are back to normal.
- Bypass
Track stringMethod - Track options when all IPS protections are disabled until CPU/memory levels are back to normal.
- Cpu
Usage doubleHigh Threshold - CPU usage high threshold percentage (1-99).
- Cpu
Usage doubleLow Threshold - CPU usage low threshold percentage (1-99).
- Memory
Usage doubleHigh Threshold - Memory usage high threshold percentage (1-99).
- Memory
Usage doubleLow Threshold - Memory usage low threshold percentage (1-99).
- Send
Threat boolCloud Info - Help improve Check Point Threat Prevention product by sending anonymous information.
- Top
Cpu ManagementConsuming Protections Simple Gateway Ips Settings Top Cpu Consuming Protections - Provides a way to reduce CPU levels on machines under load by disabling the top CPU consuming IPS protections.top_cpu_consuming_protections blocks are documented below.
- Activation
Mode string - Defines whether the IPS blade operates in Detect Only mode or enforces the configured IPS Policy.
- Bypass
All boolUnder Load - Disable/enable all IPS protections until CPU and memory levels are back to normal.
- Bypass
Track stringMethod - Track options when all IPS protections are disabled until CPU/memory levels are back to normal.
- Cpu
Usage float64High Threshold - CPU usage high threshold percentage (1-99).
- Cpu
Usage float64Low Threshold - CPU usage low threshold percentage (1-99).
- Memory
Usage float64High Threshold - Memory usage high threshold percentage (1-99).
- Memory
Usage float64Low Threshold - Memory usage low threshold percentage (1-99).
- Send
Threat boolCloud Info - Help improve Check Point Threat Prevention product by sending anonymous information.
- Top
Cpu ManagementConsuming Protections Simple Gateway Ips Settings Top Cpu Consuming Protections - Provides a way to reduce CPU levels on machines under load by disabling the top CPU consuming IPS protections.top_cpu_consuming_protections blocks are documented below.
- activation
Mode String - Defines whether the IPS blade operates in Detect Only mode or enforces the configured IPS Policy.
- bypass
All BooleanUnder Load - Disable/enable all IPS protections until CPU and memory levels are back to normal.
- bypass
Track StringMethod - Track options when all IPS protections are disabled until CPU/memory levels are back to normal.
- cpu
Usage DoubleHigh Threshold - CPU usage high threshold percentage (1-99).
- cpu
Usage DoubleLow Threshold - CPU usage low threshold percentage (1-99).
- memory
Usage DoubleHigh Threshold - Memory usage high threshold percentage (1-99).
- memory
Usage DoubleLow Threshold - Memory usage low threshold percentage (1-99).
- send
Threat BooleanCloud Info - Help improve Check Point Threat Prevention product by sending anonymous information.
- top
Cpu ManagementConsuming Protections Simple Gateway Ips Settings Top Cpu Consuming Protections - Provides a way to reduce CPU levels on machines under load by disabling the top CPU consuming IPS protections.top_cpu_consuming_protections blocks are documented below.
- activation
Mode string - Defines whether the IPS blade operates in Detect Only mode or enforces the configured IPS Policy.
- bypass
All booleanUnder Load - Disable/enable all IPS protections until CPU and memory levels are back to normal.
- bypass
Track stringMethod - Track options when all IPS protections are disabled until CPU/memory levels are back to normal.
- cpu
Usage numberHigh Threshold - CPU usage high threshold percentage (1-99).
- cpu
Usage numberLow Threshold - CPU usage low threshold percentage (1-99).
- memory
Usage numberHigh Threshold - Memory usage high threshold percentage (1-99).
- memory
Usage numberLow Threshold - Memory usage low threshold percentage (1-99).
- send
Threat booleanCloud Info - Help improve Check Point Threat Prevention product by sending anonymous information.
- top
Cpu ManagementConsuming Protections Simple Gateway Ips Settings Top Cpu Consuming Protections - Provides a way to reduce CPU levels on machines under load by disabling the top CPU consuming IPS protections.top_cpu_consuming_protections blocks are documented below.
- activation_
mode str - Defines whether the IPS blade operates in Detect Only mode or enforces the configured IPS Policy.
- bypass_
all_ boolunder_ load - Disable/enable all IPS protections until CPU and memory levels are back to normal.
- bypass_
track_ strmethod - Track options when all IPS protections are disabled until CPU/memory levels are back to normal.
- cpu_
usage_ floathigh_ threshold - CPU usage high threshold percentage (1-99).
- cpu_
usage_ floatlow_ threshold - CPU usage low threshold percentage (1-99).
- memory_
usage_ floathigh_ threshold - Memory usage high threshold percentage (1-99).
- memory_
usage_ floatlow_ threshold - Memory usage low threshold percentage (1-99).
- send_
threat_ boolcloud_ info - Help improve Check Point Threat Prevention product by sending anonymous information.
- top_
cpu_ Managementconsuming_ protections Simple Gateway Ips Settings Top Cpu Consuming Protections - Provides a way to reduce CPU levels on machines under load by disabling the top CPU consuming IPS protections.top_cpu_consuming_protections blocks are documented below.
- activation
Mode String - Defines whether the IPS blade operates in Detect Only mode or enforces the configured IPS Policy.
- bypass
All BooleanUnder Load - Disable/enable all IPS protections until CPU and memory levels are back to normal.
- bypass
Track StringMethod - Track options when all IPS protections are disabled until CPU/memory levels are back to normal.
- cpu
Usage NumberHigh Threshold - CPU usage high threshold percentage (1-99).
- cpu
Usage NumberLow Threshold - CPU usage low threshold percentage (1-99).
- memory
Usage NumberHigh Threshold - Memory usage high threshold percentage (1-99).
- memory
Usage NumberLow Threshold - Memory usage low threshold percentage (1-99).
- send
Threat BooleanCloud Info - Help improve Check Point Threat Prevention product by sending anonymous information.
- top
Cpu Property MapConsuming Protections - Provides a way to reduce CPU levels on machines under load by disabling the top CPU consuming IPS protections.top_cpu_consuming_protections blocks are documented below.
ManagementSimpleGatewayIpsSettingsTopCpuConsumingProtections, ManagementSimpleGatewayIpsSettingsTopCpuConsumingProtectionsArgs
- Disable
Period double - Duration (in hours) for disabling the protections.
- Disable
Under boolLoad - Temporarily disable/enable top CPU consuming IPS protections.
- Disable
Period float64 - Duration (in hours) for disabling the protections.
- Disable
Under boolLoad - Temporarily disable/enable top CPU consuming IPS protections.
- disable
Period Double - Duration (in hours) for disabling the protections.
- disable
Under BooleanLoad - Temporarily disable/enable top CPU consuming IPS protections.
- disable
Period number - Duration (in hours) for disabling the protections.
- disable
Under booleanLoad - Temporarily disable/enable top CPU consuming IPS protections.
- disable_
period float - Duration (in hours) for disabling the protections.
- disable_
under_ boolload - Temporarily disable/enable top CPU consuming IPS protections.
- disable
Period Number - Duration (in hours) for disabling the protections.
- disable
Under BooleanLoad - Temporarily disable/enable top CPU consuming IPS protections.
ManagementSimpleGatewayLogsSettings, ManagementSimpleGatewayLogsSettingsArgs
- Alert
When boolFree Disk Space Below - Enable alert when free disk space is below threshold.
- Alert
When stringFree Disk Space Below Metrics - Free disk space metrics.
- Alert
When doubleFree Disk Space Below Threshold - Alert when free disk space below threshold.
- Alert
When stringFree Disk Space Below Type - Alert when free disk space below type.
- Before
Delete boolKeep Logs From The Last Days - Enable before delete keep logs from the last days.
- Before
Delete doubleKeep Logs From The Last Days Threshold - Before delete keep logs from the last days threshold.
- Before
Delete boolRun Script - Enable Before delete run script.
- Before
Delete stringRun Script Command - Before delete run script command.
- Delete
Index boolFiles Older Than Days - Enable delete index files older than days.
- Delete
Index doubleFiles Older Than Days Threshold - Delete index files older than days threshold.
- Delete
Index boolFiles When Index Size Above - Enable delete index files when index size above.
- Delete
Index stringFiles When Index Size Above Metrics - Delete index files when index size above metrics
- Delete
Index doubleFiles When Index Size Above Threshold - Delete index files when index size above threshold.
- Delete
When boolFree Disk Space Below - Enable delete when free disk space below.
- Delete
When stringFree Disk Space Below Metrics - Delete when free disk space below metric.
- Delete
When doubleFree Disk Space Below Threshold - Delete when free disk space below threshold.
- Detect
New boolCitrix Ica Application Names - Enable detect new Citrix ICA application names.
- Forward
Logs boolTo Log Server - Enable forward logs to log server.
- Forward
Logs stringTo Log Server Name - Forward logs to log server name.
- Forward
Logs stringTo Log Server Schedule Name - Forward logs to log server schedule name.
- Perform
Log boolRotate Before Log Forwarding - Enable perform log rotate before log forwarding.
- Reject
Connections boolWhen Free Disk Space Below Threshold - Enable reject connections when free disk space below threshold.
- Reserve
For stringPacket Capture Metrics - Reserve for packet capture metrics.
- Reserve
For doublePacket Capture Threshold - Reserve for packet capture threshold.
- Rotate
Log boolBy File Size - Enable rotate log by file size.
- Rotate
Log doubleFile Size Threshold - Log file size threshold.
- Rotate
Log boolOn Schedule - Enable rotate log on schedule.
- Rotate
Log stringSchedule Name - Rotate log schedule name.
- Stop
Logging boolWhen Free Disk Space Below - Enable stop logging when free disk space below.
- Stop
Logging stringWhen Free Disk Space Below Metrics - Stop logging when free disk space below metrics
- Stop
Logging doubleWhen Free Disk Space Below Threshold - Stop logging when free disk space below threshold.
- Turn
On boolQos Logging - Enable turn on QoS Logging.
- Update
Account doubleLog Every - Update account log in every amount of seconds.
- Alert
When boolFree Disk Space Below - Enable alert when free disk space is below threshold.
- Alert
When stringFree Disk Space Below Metrics - Free disk space metrics.
- Alert
When float64Free Disk Space Below Threshold - Alert when free disk space below threshold.
- Alert
When stringFree Disk Space Below Type - Alert when free disk space below type.
- Before
Delete boolKeep Logs From The Last Days - Enable before delete keep logs from the last days.
- Before
Delete float64Keep Logs From The Last Days Threshold - Before delete keep logs from the last days threshold.
- Before
Delete boolRun Script - Enable Before delete run script.
- Before
Delete stringRun Script Command - Before delete run script command.
- Delete
Index boolFiles Older Than Days - Enable delete index files older than days.
- Delete
Index float64Files Older Than Days Threshold - Delete index files older than days threshold.
- Delete
Index boolFiles When Index Size Above - Enable delete index files when index size above.
- Delete
Index stringFiles When Index Size Above Metrics - Delete index files when index size above metrics
- Delete
Index float64Files When Index Size Above Threshold - Delete index files when index size above threshold.
- Delete
When boolFree Disk Space Below - Enable delete when free disk space below.
- Delete
When stringFree Disk Space Below Metrics - Delete when free disk space below metric.
- Delete
When float64Free Disk Space Below Threshold - Delete when free disk space below threshold.
- Detect
New boolCitrix Ica Application Names - Enable detect new Citrix ICA application names.
- Forward
Logs boolTo Log Server - Enable forward logs to log server.
- Forward
Logs stringTo Log Server Name - Forward logs to log server name.
- Forward
Logs stringTo Log Server Schedule Name - Forward logs to log server schedule name.
- Perform
Log boolRotate Before Log Forwarding - Enable perform log rotate before log forwarding.
- Reject
Connections boolWhen Free Disk Space Below Threshold - Enable reject connections when free disk space below threshold.
- Reserve
For stringPacket Capture Metrics - Reserve for packet capture metrics.
- Reserve
For float64Packet Capture Threshold - Reserve for packet capture threshold.
- Rotate
Log boolBy File Size - Enable rotate log by file size.
- Rotate
Log float64File Size Threshold - Log file size threshold.
- Rotate
Log boolOn Schedule - Enable rotate log on schedule.
- Rotate
Log stringSchedule Name - Rotate log schedule name.
- Stop
Logging boolWhen Free Disk Space Below - Enable stop logging when free disk space below.
- Stop
Logging stringWhen Free Disk Space Below Metrics - Stop logging when free disk space below metrics
- Stop
Logging float64When Free Disk Space Below Threshold - Stop logging when free disk space below threshold.
- Turn
On boolQos Logging - Enable turn on QoS Logging.
- Update
Account float64Log Every - Update account log in every amount of seconds.
- alert
When BooleanFree Disk Space Below - Enable alert when free disk space is below threshold.
- alert
When StringFree Disk Space Below Metrics - Free disk space metrics.
- alert
When DoubleFree Disk Space Below Threshold - Alert when free disk space below threshold.
- alert
When StringFree Disk Space Below Type - Alert when free disk space below type.
- before
Delete BooleanKeep Logs From The Last Days - Enable before delete keep logs from the last days.
- before
Delete DoubleKeep Logs From The Last Days Threshold - Before delete keep logs from the last days threshold.
- before
Delete BooleanRun Script - Enable Before delete run script.
- before
Delete StringRun Script Command - Before delete run script command.
- delete
Index BooleanFiles Older Than Days - Enable delete index files older than days.
- delete
Index DoubleFiles Older Than Days Threshold - Delete index files older than days threshold.
- delete
Index BooleanFiles When Index Size Above - Enable delete index files when index size above.
- delete
Index StringFiles When Index Size Above Metrics - Delete index files when index size above metrics
- delete
Index DoubleFiles When Index Size Above Threshold - Delete index files when index size above threshold.
- delete
When BooleanFree Disk Space Below - Enable delete when free disk space below.
- delete
When StringFree Disk Space Below Metrics - Delete when free disk space below metric.
- delete
When DoubleFree Disk Space Below Threshold - Delete when free disk space below threshold.
- detect
New BooleanCitrix Ica Application Names - Enable detect new Citrix ICA application names.
- forward
Logs BooleanTo Log Server - Enable forward logs to log server.
- forward
Logs StringTo Log Server Name - Forward logs to log server name.
- forward
Logs StringTo Log Server Schedule Name - Forward logs to log server schedule name.
- perform
Log BooleanRotate Before Log Forwarding - Enable perform log rotate before log forwarding.
- reject
Connections BooleanWhen Free Disk Space Below Threshold - Enable reject connections when free disk space below threshold.
- reserve
For StringPacket Capture Metrics - Reserve for packet capture metrics.
- reserve
For DoublePacket Capture Threshold - Reserve for packet capture threshold.
- rotate
Log BooleanBy File Size - Enable rotate log by file size.
- rotate
Log DoubleFile Size Threshold - Log file size threshold.
- rotate
Log BooleanOn Schedule - Enable rotate log on schedule.
- rotate
Log StringSchedule Name - Rotate log schedule name.
- stop
Logging BooleanWhen Free Disk Space Below - Enable stop logging when free disk space below.
- stop
Logging StringWhen Free Disk Space Below Metrics - Stop logging when free disk space below metrics
- stop
Logging DoubleWhen Free Disk Space Below Threshold - Stop logging when free disk space below threshold.
- turn
On BooleanQos Logging - Enable turn on QoS Logging.
- update
Account DoubleLog Every - Update account log in every amount of seconds.
- alert
When booleanFree Disk Space Below - Enable alert when free disk space is below threshold.
- alert
When stringFree Disk Space Below Metrics - Free disk space metrics.
- alert
When numberFree Disk Space Below Threshold - Alert when free disk space below threshold.
- alert
When stringFree Disk Space Below Type - Alert when free disk space below type.
- before
Delete booleanKeep Logs From The Last Days - Enable before delete keep logs from the last days.
- before
Delete numberKeep Logs From The Last Days Threshold - Before delete keep logs from the last days threshold.
- before
Delete booleanRun Script - Enable Before delete run script.
- before
Delete stringRun Script Command - Before delete run script command.
- delete
Index booleanFiles Older Than Days - Enable delete index files older than days.
- delete
Index numberFiles Older Than Days Threshold - Delete index files older than days threshold.
- delete
Index booleanFiles When Index Size Above - Enable delete index files when index size above.
- delete
Index stringFiles When Index Size Above Metrics - Delete index files when index size above metrics
- delete
Index numberFiles When Index Size Above Threshold - Delete index files when index size above threshold.
- delete
When booleanFree Disk Space Below - Enable delete when free disk space below.
- delete
When stringFree Disk Space Below Metrics - Delete when free disk space below metric.
- delete
When numberFree Disk Space Below Threshold - Delete when free disk space below threshold.
- detect
New booleanCitrix Ica Application Names - Enable detect new Citrix ICA application names.
- forward
Logs booleanTo Log Server - Enable forward logs to log server.
- forward
Logs stringTo Log Server Name - Forward logs to log server name.
- forward
Logs stringTo Log Server Schedule Name - Forward logs to log server schedule name.
- perform
Log booleanRotate Before Log Forwarding - Enable perform log rotate before log forwarding.
- reject
Connections booleanWhen Free Disk Space Below Threshold - Enable reject connections when free disk space below threshold.
- reserve
For stringPacket Capture Metrics - Reserve for packet capture metrics.
- reserve
For numberPacket Capture Threshold - Reserve for packet capture threshold.
- rotate
Log booleanBy File Size - Enable rotate log by file size.
- rotate
Log numberFile Size Threshold - Log file size threshold.
- rotate
Log booleanOn Schedule - Enable rotate log on schedule.
- rotate
Log stringSchedule Name - Rotate log schedule name.
- stop
Logging booleanWhen Free Disk Space Below - Enable stop logging when free disk space below.
- stop
Logging stringWhen Free Disk Space Below Metrics - Stop logging when free disk space below metrics
- stop
Logging numberWhen Free Disk Space Below Threshold - Stop logging when free disk space below threshold.
- turn
On booleanQos Logging - Enable turn on QoS Logging.
- update
Account numberLog Every - Update account log in every amount of seconds.
- alert_
when_ boolfree_ disk_ space_ below - Enable alert when free disk space is below threshold.
- alert_
when_ strfree_ disk_ space_ below_ metrics - Free disk space metrics.
- alert_
when_ floatfree_ disk_ space_ below_ threshold - Alert when free disk space below threshold.
- alert_
when_ strfree_ disk_ space_ below_ type - Alert when free disk space below type.
- before_
delete_ boolkeep_ logs_ from_ the_ last_ days - Enable before delete keep logs from the last days.
- before_
delete_ floatkeep_ logs_ from_ the_ last_ days_ threshold - Before delete keep logs from the last days threshold.
- before_
delete_ boolrun_ script - Enable Before delete run script.
- before_
delete_ strrun_ script_ command - Before delete run script command.
- delete_
index_ boolfiles_ older_ than_ days - Enable delete index files older than days.
- delete_
index_ floatfiles_ older_ than_ days_ threshold - Delete index files older than days threshold.
- delete_
index_ boolfiles_ when_ index_ size_ above - Enable delete index files when index size above.
- delete_
index_ strfiles_ when_ index_ size_ above_ metrics - Delete index files when index size above metrics
- delete_
index_ floatfiles_ when_ index_ size_ above_ threshold - Delete index files when index size above threshold.
- delete_
when_ boolfree_ disk_ space_ below - Enable delete when free disk space below.
- delete_
when_ strfree_ disk_ space_ below_ metrics - Delete when free disk space below metric.
- delete_
when_ floatfree_ disk_ space_ below_ threshold - Delete when free disk space below threshold.
- detect_
new_ boolcitrix_ ica_ application_ names - Enable detect new Citrix ICA application names.
- forward_
logs_ boolto_ log_ server - Enable forward logs to log server.
- forward_
logs_ strto_ log_ server_ name - Forward logs to log server name.
- forward_
logs_ strto_ log_ server_ schedule_ name - Forward logs to log server schedule name.
- perform_
log_ boolrotate_ before_ log_ forwarding - Enable perform log rotate before log forwarding.
- reject_
connections_ boolwhen_ free_ disk_ space_ below_ threshold - Enable reject connections when free disk space below threshold.
- reserve_
for_ strpacket_ capture_ metrics - Reserve for packet capture metrics.
- reserve_
for_ floatpacket_ capture_ threshold - Reserve for packet capture threshold.
- rotate_
log_ boolby_ file_ size - Enable rotate log by file size.
- rotate_
log_ floatfile_ size_ threshold - Log file size threshold.
- rotate_
log_ boolon_ schedule - Enable rotate log on schedule.
- rotate_
log_ strschedule_ name - Rotate log schedule name.
- stop_
logging_ boolwhen_ free_ disk_ space_ below - Enable stop logging when free disk space below.
- stop_
logging_ strwhen_ free_ disk_ space_ below_ metrics - Stop logging when free disk space below metrics
- stop_
logging_ floatwhen_ free_ disk_ space_ below_ threshold - Stop logging when free disk space below threshold.
- turn_
on_ boolqos_ logging - Enable turn on QoS Logging.
- update_
account_ floatlog_ every - Update account log in every amount of seconds.
- alert
When BooleanFree Disk Space Below - Enable alert when free disk space is below threshold.
- alert
When StringFree Disk Space Below Metrics - Free disk space metrics.
- alert
When NumberFree Disk Space Below Threshold - Alert when free disk space below threshold.
- alert
When StringFree Disk Space Below Type - Alert when free disk space below type.
- before
Delete BooleanKeep Logs From The Last Days - Enable before delete keep logs from the last days.
- before
Delete NumberKeep Logs From The Last Days Threshold - Before delete keep logs from the last days threshold.
- before
Delete BooleanRun Script - Enable Before delete run script.
- before
Delete StringRun Script Command - Before delete run script command.
- delete
Index BooleanFiles Older Than Days - Enable delete index files older than days.
- delete
Index NumberFiles Older Than Days Threshold - Delete index files older than days threshold.
- delete
Index BooleanFiles When Index Size Above - Enable delete index files when index size above.
- delete
Index StringFiles When Index Size Above Metrics - Delete index files when index size above metrics
- delete
Index NumberFiles When Index Size Above Threshold - Delete index files when index size above threshold.
- delete
When BooleanFree Disk Space Below - Enable delete when free disk space below.
- delete
When StringFree Disk Space Below Metrics - Delete when free disk space below metric.
- delete
When NumberFree Disk Space Below Threshold - Delete when free disk space below threshold.
- detect
New BooleanCitrix Ica Application Names - Enable detect new Citrix ICA application names.
- forward
Logs BooleanTo Log Server - Enable forward logs to log server.
- forward
Logs StringTo Log Server Name - Forward logs to log server name.
- forward
Logs StringTo Log Server Schedule Name - Forward logs to log server schedule name.
- perform
Log BooleanRotate Before Log Forwarding - Enable perform log rotate before log forwarding.
- reject
Connections BooleanWhen Free Disk Space Below Threshold - Enable reject connections when free disk space below threshold.
- reserve
For StringPacket Capture Metrics - Reserve for packet capture metrics.
- reserve
For NumberPacket Capture Threshold - Reserve for packet capture threshold.
- rotate
Log BooleanBy File Size - Enable rotate log by file size.
- rotate
Log NumberFile Size Threshold - Log file size threshold.
- rotate
Log BooleanOn Schedule - Enable rotate log on schedule.
- rotate
Log StringSchedule Name - Rotate log schedule name.
- stop
Logging BooleanWhen Free Disk Space Below - Enable stop logging when free disk space below.
- stop
Logging StringWhen Free Disk Space Below Metrics - Stop logging when free disk space below metrics
- stop
Logging NumberWhen Free Disk Space Below Threshold - Stop logging when free disk space below threshold.
- turn
On BooleanQos Logging - Enable turn on QoS Logging.
- update
Account NumberLog Every - Update account log in every amount of seconds.
ManagementSimpleGatewayNatSettings, ManagementSimpleGatewayNatSettingsArgs
- Auto
Rule bool - Whether to add automatic address translation rules.
- Hide
Behind string - Hide behind method. This parameter is forbidden in case "method" parameter is "static".
- Install
On string - Which gateway should apply the NAT translation.
- Ipv4Address string
- IPv4 address.
- Ipv6Address string
- IPv6 address.
- Method string
- NAT translation method.
- Auto
Rule bool - Whether to add automatic address translation rules.
- Hide
Behind string - Hide behind method. This parameter is forbidden in case "method" parameter is "static".
- Install
On string - Which gateway should apply the NAT translation.
- Ipv4Address string
- IPv4 address.
- Ipv6Address string
- IPv6 address.
- Method string
- NAT translation method.
- auto
Rule Boolean - Whether to add automatic address translation rules.
- hide
Behind String - Hide behind method. This parameter is forbidden in case "method" parameter is "static".
- install
On String - Which gateway should apply the NAT translation.
- ipv4Address String
- IPv4 address.
- ipv6Address String
- IPv6 address.
- method String
- NAT translation method.
- auto
Rule boolean - Whether to add automatic address translation rules.
- hide
Behind string - Hide behind method. This parameter is forbidden in case "method" parameter is "static".
- install
On string - Which gateway should apply the NAT translation.
- ipv4Address string
- IPv4 address.
- ipv6Address string
- IPv6 address.
- method string
- NAT translation method.
- auto_
rule bool - Whether to add automatic address translation rules.
- hide_
behind str - Hide behind method. This parameter is forbidden in case "method" parameter is "static".
- install_
on str - Which gateway should apply the NAT translation.
- ipv4_
address str - IPv4 address.
- ipv6_
address str - IPv6 address.
- method str
- NAT translation method.
- auto
Rule Boolean - Whether to add automatic address translation rules.
- hide
Behind String - Hide behind method. This parameter is forbidden in case "method" parameter is "static".
- install
On String - Which gateway should apply the NAT translation.
- ipv4Address String
- IPv4 address.
- ipv6Address String
- IPv6 address.
- method String
- NAT translation method.
ManagementSimpleGatewayPlatformPortalSettings, ManagementSimpleGatewayPlatformPortalSettingsArgs
- Accessibility
Management
Simple Gateway Platform Portal Settings Accessibility - Configuration of the portal access settings.accessibility blocks are documented below.
- Certificate
Settings ManagementSimple Gateway Platform Portal Settings Certificate Settings - Configuration of the portal certificate settings.certificate_settings blocks are documented below.
- Portal
Web ManagementSettings Simple Gateway Platform Portal Settings Portal Web Settings - Configuration of the portal web settings.portal_web_settings blocks are documented below.
- Accessibility
Management
Simple Gateway Platform Portal Settings Accessibility - Configuration of the portal access settings.accessibility blocks are documented below.
- Certificate
Settings ManagementSimple Gateway Platform Portal Settings Certificate Settings - Configuration of the portal certificate settings.certificate_settings blocks are documented below.
- Portal
Web ManagementSettings Simple Gateway Platform Portal Settings Portal Web Settings - Configuration of the portal web settings.portal_web_settings blocks are documented below.
- accessibility
Management
Simple Gateway Platform Portal Settings Accessibility - Configuration of the portal access settings.accessibility blocks are documented below.
- certificate
Settings ManagementSimple Gateway Platform Portal Settings Certificate Settings - Configuration of the portal certificate settings.certificate_settings blocks are documented below.
- portal
Web ManagementSettings Simple Gateway Platform Portal Settings Portal Web Settings - Configuration of the portal web settings.portal_web_settings blocks are documented below.
- accessibility
Management
Simple Gateway Platform Portal Settings Accessibility - Configuration of the portal access settings.accessibility blocks are documented below.
- certificate
Settings ManagementSimple Gateway Platform Portal Settings Certificate Settings - Configuration of the portal certificate settings.certificate_settings blocks are documented below.
- portal
Web ManagementSettings Simple Gateway Platform Portal Settings Portal Web Settings - Configuration of the portal web settings.portal_web_settings blocks are documented below.
- accessibility
Management
Simple Gateway Platform Portal Settings Accessibility - Configuration of the portal access settings.accessibility blocks are documented below.
- certificate_
settings ManagementSimple Gateway Platform Portal Settings Certificate Settings - Configuration of the portal certificate settings.certificate_settings blocks are documented below.
- portal_
web_ Managementsettings Simple Gateway Platform Portal Settings Portal Web Settings - Configuration of the portal web settings.portal_web_settings blocks are documented below.
- accessibility Property Map
- Configuration of the portal access settings.accessibility blocks are documented below.
- certificate
Settings Property Map - Configuration of the portal certificate settings.certificate_settings blocks are documented below.
- portal
Web Property MapSettings - Configuration of the portal web settings.portal_web_settings blocks are documented below.
ManagementSimpleGatewayPlatformPortalSettingsAccessibility, ManagementSimpleGatewayPlatformPortalSettingsAccessibilityArgs
- Allow
Access stringFrom - Allowed access to the web portal (based on interfaces, or security policy).
- Internal
Access ManagementSettings Simple Gateway Platform Portal Settings Accessibility Internal Access Settings - Configuration of the additional portal access settings for internal interfaces only.internal_access_settings blocks are documented below.
- Allow
Access stringFrom - Allowed access to the web portal (based on interfaces, or security policy).
- Internal
Access ManagementSettings Simple Gateway Platform Portal Settings Accessibility Internal Access Settings - Configuration of the additional portal access settings for internal interfaces only.internal_access_settings blocks are documented below.
- allow
Access StringFrom - Allowed access to the web portal (based on interfaces, or security policy).
- internal
Access ManagementSettings Simple Gateway Platform Portal Settings Accessibility Internal Access Settings - Configuration of the additional portal access settings for internal interfaces only.internal_access_settings blocks are documented below.
- allow
Access stringFrom - Allowed access to the web portal (based on interfaces, or security policy).
- internal
Access ManagementSettings Simple Gateway Platform Portal Settings Accessibility Internal Access Settings - Configuration of the additional portal access settings for internal interfaces only.internal_access_settings blocks are documented below.
- allow_
access_ strfrom - Allowed access to the web portal (based on interfaces, or security policy).
- internal_
access_ Managementsettings Simple Gateway Platform Portal Settings Accessibility Internal Access Settings - Configuration of the additional portal access settings for internal interfaces only.internal_access_settings blocks are documented below.
- allow
Access StringFrom - Allowed access to the web portal (based on interfaces, or security policy).
- internal
Access Property MapSettings - Configuration of the additional portal access settings for internal interfaces only.internal_access_settings blocks are documented below.
ManagementSimpleGatewayPlatformPortalSettingsAccessibilityInternalAccessSettings, ManagementSimpleGatewayPlatformPortalSettingsAccessibilityInternalAccessSettingsArgs
- Dmz bool
- Controls portal access settings for internal interfaces, whose topology is set to 'DMZ'.
- Undefined bool
- Controls portal access settings for internal interfaces, whose topology is set to 'Undefined'.
- Vpn bool
- Controls portal access settings for interfaces that are part of a VPN Encryption Domain.
- Dmz bool
- Controls portal access settings for internal interfaces, whose topology is set to 'DMZ'.
- Undefined bool
- Controls portal access settings for internal interfaces, whose topology is set to 'Undefined'.
- Vpn bool
- Controls portal access settings for interfaces that are part of a VPN Encryption Domain.
- dmz Boolean
- Controls portal access settings for internal interfaces, whose topology is set to 'DMZ'.
- undefined Boolean
- Controls portal access settings for internal interfaces, whose topology is set to 'Undefined'.
- vpn Boolean
- Controls portal access settings for interfaces that are part of a VPN Encryption Domain.
- dmz boolean
- Controls portal access settings for internal interfaces, whose topology is set to 'DMZ'.
- undefined boolean
- Controls portal access settings for internal interfaces, whose topology is set to 'Undefined'.
- vpn boolean
- Controls portal access settings for interfaces that are part of a VPN Encryption Domain.
- dmz bool
- Controls portal access settings for internal interfaces, whose topology is set to 'DMZ'.
- undefined bool
- Controls portal access settings for internal interfaces, whose topology is set to 'Undefined'.
- vpn bool
- Controls portal access settings for interfaces that are part of a VPN Encryption Domain.
- dmz Boolean
- Controls portal access settings for internal interfaces, whose topology is set to 'DMZ'.
- undefined Boolean
- Controls portal access settings for internal interfaces, whose topology is set to 'Undefined'.
- vpn Boolean
- Controls portal access settings for interfaces that are part of a VPN Encryption Domain.
ManagementSimpleGatewayPlatformPortalSettingsCertificateSettings, ManagementSimpleGatewayPlatformPortalSettingsCertificateSettingsArgs
- Base64Certificate string
- The certificate file encoded in Base64 with padding. This file must be in the *.p12 format.
- Base64Password string
- Password (encoded in Base64 with padding) for the certificate file.
- Base64Certificate string
- The certificate file encoded in Base64 with padding. This file must be in the *.p12 format.
- Base64Password string
- Password (encoded in Base64 with padding) for the certificate file.
- base64Certificate String
- The certificate file encoded in Base64 with padding. This file must be in the *.p12 format.
- base64Password String
- Password (encoded in Base64 with padding) for the certificate file.
- base64Certificate string
- The certificate file encoded in Base64 with padding. This file must be in the *.p12 format.
- base64Password string
- Password (encoded in Base64 with padding) for the certificate file.
- base64_
certificate str - The certificate file encoded in Base64 with padding. This file must be in the *.p12 format.
- base64_
password str - Password (encoded in Base64 with padding) for the certificate file.
- base64Certificate String
- The certificate file encoded in Base64 with padding. This file must be in the *.p12 format.
- base64Password String
- Password (encoded in Base64 with padding) for the certificate file.
ManagementSimpleGatewayPlatformPortalSettingsPortalWebSettings, ManagementSimpleGatewayPlatformPortalSettingsPortalWebSettingsArgs
ManagementSimpleGatewayProxySettings, ManagementSimpleGatewayProxySettingsArgs
- Port double
- N/A
- Proxy
Server string - N/A
- Use
Custom boolProxy - Use custom proxy settings for this network object.
- Port float64
- N/A
- Proxy
Server string - N/A
- Use
Custom boolProxy - Use custom proxy settings for this network object.
- port Double
- N/A
- proxy
Server String - N/A
- use
Custom BooleanProxy - Use custom proxy settings for this network object.
- port number
- N/A
- proxy
Server string - N/A
- use
Custom booleanProxy - Use custom proxy settings for this network object.
- port float
- N/A
- proxy_
server str - N/A
- use_
custom_ boolproxy - Use custom proxy settings for this network object.
- port Number
- N/A
- proxy
Server String - N/A
- use
Custom BooleanProxy - Use custom proxy settings for this network object.
ManagementSimpleGatewayUsercheckPortalSettings, ManagementSimpleGatewayUsercheckPortalSettingsArgs
- Accessibility
Management
Simple Gateway Usercheck Portal Settings Accessibility - Configuration of the portal access settings.accessibility blocks are documented below.
- Certificate
Settings ManagementSimple Gateway Usercheck Portal Settings Certificate Settings - Configuration of the portal certificate settings.certificate_settings blocks are documented below.
- Enabled bool
- State of the web portal (enabled or disabled). The supported blades are: {'Application Control', 'URL Filtering', 'Data Loss Prevention', 'Anti Virus', 'Anti Bot', 'Threat Emulation', 'Threat Extraction', 'Data Awareness'}.
- Portal
Web ManagementSettings Simple Gateway Usercheck Portal Settings Portal Web Settings - Configuration of the portal web settings.portal_web_settings blocks are documented below.
- Accessibility
Management
Simple Gateway Usercheck Portal Settings Accessibility - Configuration of the portal access settings.accessibility blocks are documented below.
- Certificate
Settings ManagementSimple Gateway Usercheck Portal Settings Certificate Settings - Configuration of the portal certificate settings.certificate_settings blocks are documented below.
- Enabled bool
- State of the web portal (enabled or disabled). The supported blades are: {'Application Control', 'URL Filtering', 'Data Loss Prevention', 'Anti Virus', 'Anti Bot', 'Threat Emulation', 'Threat Extraction', 'Data Awareness'}.
- Portal
Web ManagementSettings Simple Gateway Usercheck Portal Settings Portal Web Settings - Configuration of the portal web settings.portal_web_settings blocks are documented below.
- accessibility
Management
Simple Gateway Usercheck Portal Settings Accessibility - Configuration of the portal access settings.accessibility blocks are documented below.
- certificate
Settings ManagementSimple Gateway Usercheck Portal Settings Certificate Settings - Configuration of the portal certificate settings.certificate_settings blocks are documented below.
- enabled Boolean
- State of the web portal (enabled or disabled). The supported blades are: {'Application Control', 'URL Filtering', 'Data Loss Prevention', 'Anti Virus', 'Anti Bot', 'Threat Emulation', 'Threat Extraction', 'Data Awareness'}.
- portal
Web ManagementSettings Simple Gateway Usercheck Portal Settings Portal Web Settings - Configuration of the portal web settings.portal_web_settings blocks are documented below.
- accessibility
Management
Simple Gateway Usercheck Portal Settings Accessibility - Configuration of the portal access settings.accessibility blocks are documented below.
- certificate
Settings ManagementSimple Gateway Usercheck Portal Settings Certificate Settings - Configuration of the portal certificate settings.certificate_settings blocks are documented below.
- enabled boolean
- State of the web portal (enabled or disabled). The supported blades are: {'Application Control', 'URL Filtering', 'Data Loss Prevention', 'Anti Virus', 'Anti Bot', 'Threat Emulation', 'Threat Extraction', 'Data Awareness'}.
- portal
Web ManagementSettings Simple Gateway Usercheck Portal Settings Portal Web Settings - Configuration of the portal web settings.portal_web_settings blocks are documented below.
- accessibility
Management
Simple Gateway Usercheck Portal Settings Accessibility - Configuration of the portal access settings.accessibility blocks are documented below.
- certificate_
settings ManagementSimple Gateway Usercheck Portal Settings Certificate Settings - Configuration of the portal certificate settings.certificate_settings blocks are documented below.
- enabled bool
- State of the web portal (enabled or disabled). The supported blades are: {'Application Control', 'URL Filtering', 'Data Loss Prevention', 'Anti Virus', 'Anti Bot', 'Threat Emulation', 'Threat Extraction', 'Data Awareness'}.
- portal_
web_ Managementsettings Simple Gateway Usercheck Portal Settings Portal Web Settings - Configuration of the portal web settings.portal_web_settings blocks are documented below.
- accessibility Property Map
- Configuration of the portal access settings.accessibility blocks are documented below.
- certificate
Settings Property Map - Configuration of the portal certificate settings.certificate_settings blocks are documented below.
- enabled Boolean
- State of the web portal (enabled or disabled). The supported blades are: {'Application Control', 'URL Filtering', 'Data Loss Prevention', 'Anti Virus', 'Anti Bot', 'Threat Emulation', 'Threat Extraction', 'Data Awareness'}.
- portal
Web Property MapSettings - Configuration of the portal web settings.portal_web_settings blocks are documented below.
ManagementSimpleGatewayUsercheckPortalSettingsAccessibility, ManagementSimpleGatewayUsercheckPortalSettingsAccessibilityArgs
- Allow
Access stringFrom - Allowed access to the web portal (based on interfaces, or security policy).
- Internal
Access ManagementSettings Simple Gateway Usercheck Portal Settings Accessibility Internal Access Settings - Configuration of the additional portal access settings for internal interfaces only.internal_access_settings blocks are documented below.
- Allow
Access stringFrom - Allowed access to the web portal (based on interfaces, or security policy).
- Internal
Access ManagementSettings Simple Gateway Usercheck Portal Settings Accessibility Internal Access Settings - Configuration of the additional portal access settings for internal interfaces only.internal_access_settings blocks are documented below.
- allow
Access StringFrom - Allowed access to the web portal (based on interfaces, or security policy).
- internal
Access ManagementSettings Simple Gateway Usercheck Portal Settings Accessibility Internal Access Settings - Configuration of the additional portal access settings for internal interfaces only.internal_access_settings blocks are documented below.
- allow
Access stringFrom - Allowed access to the web portal (based on interfaces, or security policy).
- internal
Access ManagementSettings Simple Gateway Usercheck Portal Settings Accessibility Internal Access Settings - Configuration of the additional portal access settings for internal interfaces only.internal_access_settings blocks are documented below.
- allow_
access_ strfrom - Allowed access to the web portal (based on interfaces, or security policy).
- internal_
access_ Managementsettings Simple Gateway Usercheck Portal Settings Accessibility Internal Access Settings - Configuration of the additional portal access settings for internal interfaces only.internal_access_settings blocks are documented below.
- allow
Access StringFrom - Allowed access to the web portal (based on interfaces, or security policy).
- internal
Access Property MapSettings - Configuration of the additional portal access settings for internal interfaces only.internal_access_settings blocks are documented below.
ManagementSimpleGatewayUsercheckPortalSettingsAccessibilityInternalAccessSettings, ManagementSimpleGatewayUsercheckPortalSettingsAccessibilityInternalAccessSettingsArgs
- Dmz bool
- Controls portal access settings for internal interfaces, whose topology is set to 'DMZ'.
- Undefined bool
- Controls portal access settings for internal interfaces, whose topology is set to 'Undefined'.
- Vpn bool
- Controls portal access settings for interfaces that are part of a VPN Encryption Domain.
- Dmz bool
- Controls portal access settings for internal interfaces, whose topology is set to 'DMZ'.
- Undefined bool
- Controls portal access settings for internal interfaces, whose topology is set to 'Undefined'.
- Vpn bool
- Controls portal access settings for interfaces that are part of a VPN Encryption Domain.
- dmz Boolean
- Controls portal access settings for internal interfaces, whose topology is set to 'DMZ'.
- undefined Boolean
- Controls portal access settings for internal interfaces, whose topology is set to 'Undefined'.
- vpn Boolean
- Controls portal access settings for interfaces that are part of a VPN Encryption Domain.
- dmz boolean
- Controls portal access settings for internal interfaces, whose topology is set to 'DMZ'.
- undefined boolean
- Controls portal access settings for internal interfaces, whose topology is set to 'Undefined'.
- vpn boolean
- Controls portal access settings for interfaces that are part of a VPN Encryption Domain.
- dmz bool
- Controls portal access settings for internal interfaces, whose topology is set to 'DMZ'.
- undefined bool
- Controls portal access settings for internal interfaces, whose topology is set to 'Undefined'.
- vpn bool
- Controls portal access settings for interfaces that are part of a VPN Encryption Domain.
- dmz Boolean
- Controls portal access settings for internal interfaces, whose topology is set to 'DMZ'.
- undefined Boolean
- Controls portal access settings for internal interfaces, whose topology is set to 'Undefined'.
- vpn Boolean
- Controls portal access settings for interfaces that are part of a VPN Encryption Domain.
ManagementSimpleGatewayUsercheckPortalSettingsCertificateSettings, ManagementSimpleGatewayUsercheckPortalSettingsCertificateSettingsArgs
- Base64Certificate string
- The certificate file encoded in Base64 with padding. This file must be in the *.p12 format.
- Base64Password string
- Password (encoded in Base64 with padding) for the certificate file.
- Base64Certificate string
- The certificate file encoded in Base64 with padding. This file must be in the *.p12 format.
- Base64Password string
- Password (encoded in Base64 with padding) for the certificate file.
- base64Certificate String
- The certificate file encoded in Base64 with padding. This file must be in the *.p12 format.
- base64Password String
- Password (encoded in Base64 with padding) for the certificate file.
- base64Certificate string
- The certificate file encoded in Base64 with padding. This file must be in the *.p12 format.
- base64Password string
- Password (encoded in Base64 with padding) for the certificate file.
- base64_
certificate str - The certificate file encoded in Base64 with padding. This file must be in the *.p12 format.
- base64_
password str - Password (encoded in Base64 with padding) for the certificate file.
- base64Certificate String
- The certificate file encoded in Base64 with padding. This file must be in the *.p12 format.
- base64Password String
- Password (encoded in Base64 with padding) for the certificate file.
ManagementSimpleGatewayUsercheckPortalSettingsPortalWebSettings, ManagementSimpleGatewayUsercheckPortalSettingsPortalWebSettingsArgs
ManagementSimpleGatewayVpnSettings, ManagementSimpleGatewayVpnSettingsArgs
- Authentication
Management
Simple Gateway Vpn Settings Authentication - Authentication.authentication blocks are documented below.
- Link
Selection ManagementSimple Gateway Vpn Settings Link Selection - Link Selection.link_selection blocks are documented below.
- Maximum
Concurrent doubleIke Negotiations - N/A
- Maximum
Concurrent doubleTunnels - N/A
- Office
Mode ManagementSimple Gateway Vpn Settings Office Mode - Office Mode. Notation Wide Impact - Office Mode apply IPSec VPN Software Blade clients and to the Mobile Access Software Blade clients.office_mode blocks are documented below.
- Remote
Access ManagementSimple Gateway Vpn Settings Remote Access - Remote Access.remote_access blocks are documented below.
- Vpn
Domain string - Gateway VPN domain identified by the name or UID.
- Vpn
Domain boolExclude External Ip Addresses - Exclude the external IP addresses from the VPN domain of this Security Gateway.
- Vpn
Domain stringType - Gateway VPN domain type.
- Authentication
Management
Simple Gateway Vpn Settings Authentication - Authentication.authentication blocks are documented below.
- Link
Selection ManagementSimple Gateway Vpn Settings Link Selection - Link Selection.link_selection blocks are documented below.
- Maximum
Concurrent float64Ike Negotiations - N/A
- Maximum
Concurrent float64Tunnels - N/A
- Office
Mode ManagementSimple Gateway Vpn Settings Office Mode - Office Mode. Notation Wide Impact - Office Mode apply IPSec VPN Software Blade clients and to the Mobile Access Software Blade clients.office_mode blocks are documented below.
- Remote
Access ManagementSimple Gateway Vpn Settings Remote Access - Remote Access.remote_access blocks are documented below.
- Vpn
Domain string - Gateway VPN domain identified by the name or UID.
- Vpn
Domain boolExclude External Ip Addresses - Exclude the external IP addresses from the VPN domain of this Security Gateway.
- Vpn
Domain stringType - Gateway VPN domain type.
- authentication
Management
Simple Gateway Vpn Settings Authentication - Authentication.authentication blocks are documented below.
- link
Selection ManagementSimple Gateway Vpn Settings Link Selection - Link Selection.link_selection blocks are documented below.
- maximum
Concurrent DoubleIke Negotiations - N/A
- maximum
Concurrent DoubleTunnels - N/A
- office
Mode ManagementSimple Gateway Vpn Settings Office Mode - Office Mode. Notation Wide Impact - Office Mode apply IPSec VPN Software Blade clients and to the Mobile Access Software Blade clients.office_mode blocks are documented below.
- remote
Access ManagementSimple Gateway Vpn Settings Remote Access - Remote Access.remote_access blocks are documented below.
- vpn
Domain String - Gateway VPN domain identified by the name or UID.
- vpn
Domain BooleanExclude External Ip Addresses - Exclude the external IP addresses from the VPN domain of this Security Gateway.
- vpn
Domain StringType - Gateway VPN domain type.
- authentication
Management
Simple Gateway Vpn Settings Authentication - Authentication.authentication blocks are documented below.
- link
Selection ManagementSimple Gateway Vpn Settings Link Selection - Link Selection.link_selection blocks are documented below.
- maximum
Concurrent numberIke Negotiations - N/A
- maximum
Concurrent numberTunnels - N/A
- office
Mode ManagementSimple Gateway Vpn Settings Office Mode - Office Mode. Notation Wide Impact - Office Mode apply IPSec VPN Software Blade clients and to the Mobile Access Software Blade clients.office_mode blocks are documented below.
- remote
Access ManagementSimple Gateway Vpn Settings Remote Access - Remote Access.remote_access blocks are documented below.
- vpn
Domain string - Gateway VPN domain identified by the name or UID.
- vpn
Domain booleanExclude External Ip Addresses - Exclude the external IP addresses from the VPN domain of this Security Gateway.
- vpn
Domain stringType - Gateway VPN domain type.
- authentication
Management
Simple Gateway Vpn Settings Authentication - Authentication.authentication blocks are documented below.
- link_
selection ManagementSimple Gateway Vpn Settings Link Selection - Link Selection.link_selection blocks are documented below.
- maximum_
concurrent_ floatike_ negotiations - N/A
- maximum_
concurrent_ floattunnels - N/A
- office_
mode ManagementSimple Gateway Vpn Settings Office Mode - Office Mode. Notation Wide Impact - Office Mode apply IPSec VPN Software Blade clients and to the Mobile Access Software Blade clients.office_mode blocks are documented below.
- remote_
access ManagementSimple Gateway Vpn Settings Remote Access - Remote Access.remote_access blocks are documented below.
- vpn_
domain str - Gateway VPN domain identified by the name or UID.
- vpn_
domain_ boolexclude_ external_ ip_ addresses - Exclude the external IP addresses from the VPN domain of this Security Gateway.
- vpn_
domain_ strtype - Gateway VPN domain type.
- authentication Property Map
- Authentication.authentication blocks are documented below.
- link
Selection Property Map - Link Selection.link_selection blocks are documented below.
- maximum
Concurrent NumberIke Negotiations - N/A
- maximum
Concurrent NumberTunnels - N/A
- office
Mode Property Map - Office Mode. Notation Wide Impact - Office Mode apply IPSec VPN Software Blade clients and to the Mobile Access Software Blade clients.office_mode blocks are documented below.
- remote
Access Property Map - Remote Access.remote_access blocks are documented below.
- vpn
Domain String - Gateway VPN domain identified by the name or UID.
- vpn
Domain BooleanExclude External Ip Addresses - Exclude the external IP addresses from the VPN domain of this Security Gateway.
- vpn
Domain StringType - Gateway VPN domain type.
ManagementSimpleGatewayVpnSettingsAuthentication, ManagementSimpleGatewayVpnSettingsAuthenticationArgs
- Authentication
Clients List<string> - Collection of VPN Authentication clients identified by the name or UID.authentication_clients blocks are documented below.
- Authentication
Clients []string - Collection of VPN Authentication clients identified by the name or UID.authentication_clients blocks are documented below.
- authentication
Clients List<String> - Collection of VPN Authentication clients identified by the name or UID.authentication_clients blocks are documented below.
- authentication
Clients string[] - Collection of VPN Authentication clients identified by the name or UID.authentication_clients blocks are documented below.
- authentication_
clients Sequence[str] - Collection of VPN Authentication clients identified by the name or UID.authentication_clients blocks are documented below.
- authentication
Clients List<String> - Collection of VPN Authentication clients identified by the name or UID.authentication_clients blocks are documented below.
ManagementSimpleGatewayVpnSettingsLinkSelection, ManagementSimpleGatewayVpnSettingsLinkSelectionArgs
- Dns
Resolving stringHostname - DNS Resolving Hostname. Must be set when "ip-selection" was selected to be "dns-resolving-from-hostname".
- Ip
Address string - IP Address. Must be set when "ip-selection" was selected to be "use-selected-address-from-topology" or "use-statically-nated-ip"
- Ip
Selection string - IP selection
- Dns
Resolving stringHostname - DNS Resolving Hostname. Must be set when "ip-selection" was selected to be "dns-resolving-from-hostname".
- Ip
Address string - IP Address. Must be set when "ip-selection" was selected to be "use-selected-address-from-topology" or "use-statically-nated-ip"
- Ip
Selection string - IP selection
- dns
Resolving StringHostname - DNS Resolving Hostname. Must be set when "ip-selection" was selected to be "dns-resolving-from-hostname".
- ip
Address String - IP Address. Must be set when "ip-selection" was selected to be "use-selected-address-from-topology" or "use-statically-nated-ip"
- ip
Selection String - IP selection
- dns
Resolving stringHostname - DNS Resolving Hostname. Must be set when "ip-selection" was selected to be "dns-resolving-from-hostname".
- ip
Address string - IP Address. Must be set when "ip-selection" was selected to be "use-selected-address-from-topology" or "use-statically-nated-ip"
- ip
Selection string - IP selection
- dns_
resolving_ strhostname - DNS Resolving Hostname. Must be set when "ip-selection" was selected to be "dns-resolving-from-hostname".
- ip_
address str - IP Address. Must be set when "ip-selection" was selected to be "use-selected-address-from-topology" or "use-statically-nated-ip"
- ip_
selection str - IP selection
- dns
Resolving StringHostname - DNS Resolving Hostname. Must be set when "ip-selection" was selected to be "dns-resolving-from-hostname".
- ip
Address String - IP Address. Must be set when "ip-selection" was selected to be "use-selected-address-from-topology" or "use-statically-nated-ip"
- ip
Selection String - IP selection
ManagementSimpleGatewayVpnSettingsOfficeMode, ManagementSimpleGatewayVpnSettingsOfficeModeArgs
- Allocate
Ip ManagementAddress From Simple Gateway Vpn Settings Office Mode Allocate Ip Address From - Allocate IP address Method. Allocate IP address by sequentially trying the given methods until success.allocate_ip_address_from blocks are documented below.
- Anti
Spoofing stringAdditional Addresses - Additional IP Addresses for Anti-Spoofing. Identified by name or UID. Must be set when "perform-anti-spoofings" is true.
- Group string
- Group. Identified by name or UID. Must be set when "office-mode-permissions" was selected to be "group".
- Mode string
- Office Mode Permissions. When selected to be "off", all the other definitions are irrelevant.
- Perform
Anti boolSpoofing - Perform Anti-Spoofing on Office Mode addresses.
- Support
Multiple boolInterfaces - Support connectivity enhancement for gateways with multiple external interfaces.
- Allocate
Ip ManagementAddress From Simple Gateway Vpn Settings Office Mode Allocate Ip Address From - Allocate IP address Method. Allocate IP address by sequentially trying the given methods until success.allocate_ip_address_from blocks are documented below.
- Anti
Spoofing stringAdditional Addresses - Additional IP Addresses for Anti-Spoofing. Identified by name or UID. Must be set when "perform-anti-spoofings" is true.
- Group string
- Group. Identified by name or UID. Must be set when "office-mode-permissions" was selected to be "group".
- Mode string
- Office Mode Permissions. When selected to be "off", all the other definitions are irrelevant.
- Perform
Anti boolSpoofing - Perform Anti-Spoofing on Office Mode addresses.
- Support
Multiple boolInterfaces - Support connectivity enhancement for gateways with multiple external interfaces.
- allocate
Ip ManagementAddress From Simple Gateway Vpn Settings Office Mode Allocate Ip Address From - Allocate IP address Method. Allocate IP address by sequentially trying the given methods until success.allocate_ip_address_from blocks are documented below.
- anti
Spoofing StringAdditional Addresses - Additional IP Addresses for Anti-Spoofing. Identified by name or UID. Must be set when "perform-anti-spoofings" is true.
- group String
- Group. Identified by name or UID. Must be set when "office-mode-permissions" was selected to be "group".
- mode String
- Office Mode Permissions. When selected to be "off", all the other definitions are irrelevant.
- perform
Anti BooleanSpoofing - Perform Anti-Spoofing on Office Mode addresses.
- support
Multiple BooleanInterfaces - Support connectivity enhancement for gateways with multiple external interfaces.
- allocate
Ip ManagementAddress From Simple Gateway Vpn Settings Office Mode Allocate Ip Address From - Allocate IP address Method. Allocate IP address by sequentially trying the given methods until success.allocate_ip_address_from blocks are documented below.
- anti
Spoofing stringAdditional Addresses - Additional IP Addresses for Anti-Spoofing. Identified by name or UID. Must be set when "perform-anti-spoofings" is true.
- group string
- Group. Identified by name or UID. Must be set when "office-mode-permissions" was selected to be "group".
- mode string
- Office Mode Permissions. When selected to be "off", all the other definitions are irrelevant.
- perform
Anti booleanSpoofing - Perform Anti-Spoofing on Office Mode addresses.
- support
Multiple booleanInterfaces - Support connectivity enhancement for gateways with multiple external interfaces.
- allocate_
ip_ Managementaddress_ from Simple Gateway Vpn Settings Office Mode Allocate Ip Address From - Allocate IP address Method. Allocate IP address by sequentially trying the given methods until success.allocate_ip_address_from blocks are documented below.
- anti_
spoofing_ stradditional_ addresses - Additional IP Addresses for Anti-Spoofing. Identified by name or UID. Must be set when "perform-anti-spoofings" is true.
- group str
- Group. Identified by name or UID. Must be set when "office-mode-permissions" was selected to be "group".
- mode str
- Office Mode Permissions. When selected to be "off", all the other definitions are irrelevant.
- perform_
anti_ boolspoofing - Perform Anti-Spoofing on Office Mode addresses.
- support_
multiple_ boolinterfaces - Support connectivity enhancement for gateways with multiple external interfaces.
- allocate
Ip Property MapAddress From - Allocate IP address Method. Allocate IP address by sequentially trying the given methods until success.allocate_ip_address_from blocks are documented below.
- anti
Spoofing StringAdditional Addresses - Additional IP Addresses for Anti-Spoofing. Identified by name or UID. Must be set when "perform-anti-spoofings" is true.
- group String
- Group. Identified by name or UID. Must be set when "office-mode-permissions" was selected to be "group".
- mode String
- Office Mode Permissions. When selected to be "off", all the other definitions are irrelevant.
- perform
Anti BooleanSpoofing - Perform Anti-Spoofing on Office Mode addresses.
- support
Multiple BooleanInterfaces - Support connectivity enhancement for gateways with multiple external interfaces.
ManagementSimpleGatewayVpnSettingsOfficeModeAllocateIpAddressFrom, ManagementSimpleGatewayVpnSettingsOfficeModeAllocateIpAddressFromArgs
- Allocate
Method string - Using either Manual (IP Pool) or Automatic (DHCP). Must be set when "use-allocate-method" is true.
- Dhcp
Mac stringAddress - Calculated MAC address for DHCP allocation. Must be set when "allocate-method" was selected to be "automatic".
- Dhcp
Server string - DHCP Server. Identified by name or UID. Must be set when "allocate-method" was selected to be "automatic".
- Manual
Network string - Manual Network. Identified by name or UID. Must be set when "allocate-method" was selected to be "manual".
- Optional
Parameters ManagementSimple Gateway Vpn Settings Office Mode Allocate Ip Address From Optional Parameters - This configuration applies to all Office Mode methods except Automatic (using DHCP) and ipassignment.conf entries which contain this data.optional_parameters blocks are documented below.
- Radius
Server bool - Radius server used to authenticate the user.
- Use
Allocate boolMethod - Use Allocate Method.
- Virtual
Ip stringAddress - Virtual IPV4 address for DHCP server replies. Must be set when "allocate-method" was selected to be "automatic".
- Allocate
Method string - Using either Manual (IP Pool) or Automatic (DHCP). Must be set when "use-allocate-method" is true.
- Dhcp
Mac stringAddress - Calculated MAC address for DHCP allocation. Must be set when "allocate-method" was selected to be "automatic".
- Dhcp
Server string - DHCP Server. Identified by name or UID. Must be set when "allocate-method" was selected to be "automatic".
- Manual
Network string - Manual Network. Identified by name or UID. Must be set when "allocate-method" was selected to be "manual".
- Optional
Parameters ManagementSimple Gateway Vpn Settings Office Mode Allocate Ip Address From Optional Parameters - This configuration applies to all Office Mode methods except Automatic (using DHCP) and ipassignment.conf entries which contain this data.optional_parameters blocks are documented below.
- Radius
Server bool - Radius server used to authenticate the user.
- Use
Allocate boolMethod - Use Allocate Method.
- Virtual
Ip stringAddress - Virtual IPV4 address for DHCP server replies. Must be set when "allocate-method" was selected to be "automatic".
- allocate
Method String - Using either Manual (IP Pool) or Automatic (DHCP). Must be set when "use-allocate-method" is true.
- dhcp
Mac StringAddress - Calculated MAC address for DHCP allocation. Must be set when "allocate-method" was selected to be "automatic".
- dhcp
Server String - DHCP Server. Identified by name or UID. Must be set when "allocate-method" was selected to be "automatic".
- manual
Network String - Manual Network. Identified by name or UID. Must be set when "allocate-method" was selected to be "manual".
- optional
Parameters ManagementSimple Gateway Vpn Settings Office Mode Allocate Ip Address From Optional Parameters - This configuration applies to all Office Mode methods except Automatic (using DHCP) and ipassignment.conf entries which contain this data.optional_parameters blocks are documented below.
- radius
Server Boolean - Radius server used to authenticate the user.
- use
Allocate BooleanMethod - Use Allocate Method.
- virtual
Ip StringAddress - Virtual IPV4 address for DHCP server replies. Must be set when "allocate-method" was selected to be "automatic".
- allocate
Method string - Using either Manual (IP Pool) or Automatic (DHCP). Must be set when "use-allocate-method" is true.
- dhcp
Mac stringAddress - Calculated MAC address for DHCP allocation. Must be set when "allocate-method" was selected to be "automatic".
- dhcp
Server string - DHCP Server. Identified by name or UID. Must be set when "allocate-method" was selected to be "automatic".
- manual
Network string - Manual Network. Identified by name or UID. Must be set when "allocate-method" was selected to be "manual".
- optional
Parameters ManagementSimple Gateway Vpn Settings Office Mode Allocate Ip Address From Optional Parameters - This configuration applies to all Office Mode methods except Automatic (using DHCP) and ipassignment.conf entries which contain this data.optional_parameters blocks are documented below.
- radius
Server boolean - Radius server used to authenticate the user.
- use
Allocate booleanMethod - Use Allocate Method.
- virtual
Ip stringAddress - Virtual IPV4 address for DHCP server replies. Must be set when "allocate-method" was selected to be "automatic".
- allocate_
method str - Using either Manual (IP Pool) or Automatic (DHCP). Must be set when "use-allocate-method" is true.
- dhcp_
mac_ straddress - Calculated MAC address for DHCP allocation. Must be set when "allocate-method" was selected to be "automatic".
- dhcp_
server str - DHCP Server. Identified by name or UID. Must be set when "allocate-method" was selected to be "automatic".
- manual_
network str - Manual Network. Identified by name or UID. Must be set when "allocate-method" was selected to be "manual".
- optional_
parameters ManagementSimple Gateway Vpn Settings Office Mode Allocate Ip Address From Optional Parameters - This configuration applies to all Office Mode methods except Automatic (using DHCP) and ipassignment.conf entries which contain this data.optional_parameters blocks are documented below.
- radius_
server bool - Radius server used to authenticate the user.
- use_
allocate_ boolmethod - Use Allocate Method.
- virtual_
ip_ straddress - Virtual IPV4 address for DHCP server replies. Must be set when "allocate-method" was selected to be "automatic".
- allocate
Method String - Using either Manual (IP Pool) or Automatic (DHCP). Must be set when "use-allocate-method" is true.
- dhcp
Mac StringAddress - Calculated MAC address for DHCP allocation. Must be set when "allocate-method" was selected to be "automatic".
- dhcp
Server String - DHCP Server. Identified by name or UID. Must be set when "allocate-method" was selected to be "automatic".
- manual
Network String - Manual Network. Identified by name or UID. Must be set when "allocate-method" was selected to be "manual".
- optional
Parameters Property Map - This configuration applies to all Office Mode methods except Automatic (using DHCP) and ipassignment.conf entries which contain this data.optional_parameters blocks are documented below.
- radius
Server Boolean - Radius server used to authenticate the user.
- use
Allocate BooleanMethod - Use Allocate Method.
- virtual
Ip StringAddress - Virtual IPV4 address for DHCP server replies. Must be set when "allocate-method" was selected to be "automatic".
ManagementSimpleGatewayVpnSettingsOfficeModeAllocateIpAddressFromOptionalParameters, ManagementSimpleGatewayVpnSettingsOfficeModeAllocateIpAddressFromOptionalParametersArgs
- Dns
Suffixes string - DNS Suffixes.
- First
Backup stringDns Server - First Backup DNS Server. Identified by name or UID. Must be set when "use-first-backup-dns-server" is true and can not be set when "use-first-backup-dns-server" is false.
- First
Backup stringWins Server - First Backup WINS Server. Identified by name or UID. Must be set when "use-first-backup-wins-server" is true and can not be set when "use-first-backup-wins-server" is false.
- Ip
Lease doubleDuration - IP Lease Duration in Minutes. The value must be in the range 2-32767.
- Primary
Dns stringServer - Primary DNS Server. Identified by name or UID. Must be set when "use-primary-dns-server" is true and can not be set when "use-primary-dns-server" is false.
- Primary
Wins stringServer - Primary WINS Server. Identified by name or UID. Must be set when "use-primary-wins-server" is true and can not be set when "use-primary-wins-server" is false.
- Second
Backup stringDns Server - Second Backup DNS Server. Identified by name or UID. Must be set when "use-second-backup-dns-server" is true and can not be set when "use-second-backup-dns-server" is false.
- Second
Backup stringWins Server - Second Backup WINS Server. Identified by name or UID. Must be set when "use-second-backup-wins-server" is true and can not be set when "use-second-backup-wins-server" is false.
- Use
First boolBackup Dns Server - Use First Backup DNS Server.
- Use
First boolBackup Wins Server - Use First Backup WINS Server.
- Use
Primary boolDns Server - Use Primary DNS Server.
- Use
Primary boolWins Server - Use Primary WINS Server.
- Use
Second boolBackup Dns Server - Use Second Backup DNS Server.
- Use
Second boolBackup Wins Server - Use Second Backup WINS Server.
- Dns
Suffixes string - DNS Suffixes.
- First
Backup stringDns Server - First Backup DNS Server. Identified by name or UID. Must be set when "use-first-backup-dns-server" is true and can not be set when "use-first-backup-dns-server" is false.
- First
Backup stringWins Server - First Backup WINS Server. Identified by name or UID. Must be set when "use-first-backup-wins-server" is true and can not be set when "use-first-backup-wins-server" is false.
- Ip
Lease float64Duration - IP Lease Duration in Minutes. The value must be in the range 2-32767.
- Primary
Dns stringServer - Primary DNS Server. Identified by name or UID. Must be set when "use-primary-dns-server" is true and can not be set when "use-primary-dns-server" is false.
- Primary
Wins stringServer - Primary WINS Server. Identified by name or UID. Must be set when "use-primary-wins-server" is true and can not be set when "use-primary-wins-server" is false.
- Second
Backup stringDns Server - Second Backup DNS Server. Identified by name or UID. Must be set when "use-second-backup-dns-server" is true and can not be set when "use-second-backup-dns-server" is false.
- Second
Backup stringWins Server - Second Backup WINS Server. Identified by name or UID. Must be set when "use-second-backup-wins-server" is true and can not be set when "use-second-backup-wins-server" is false.
- Use
First boolBackup Dns Server - Use First Backup DNS Server.
- Use
First boolBackup Wins Server - Use First Backup WINS Server.
- Use
Primary boolDns Server - Use Primary DNS Server.
- Use
Primary boolWins Server - Use Primary WINS Server.
- Use
Second boolBackup Dns Server - Use Second Backup DNS Server.
- Use
Second boolBackup Wins Server - Use Second Backup WINS Server.
- dns
Suffixes String - DNS Suffixes.
- first
Backup StringDns Server - First Backup DNS Server. Identified by name or UID. Must be set when "use-first-backup-dns-server" is true and can not be set when "use-first-backup-dns-server" is false.
- first
Backup StringWins Server - First Backup WINS Server. Identified by name or UID. Must be set when "use-first-backup-wins-server" is true and can not be set when "use-first-backup-wins-server" is false.
- ip
Lease DoubleDuration - IP Lease Duration in Minutes. The value must be in the range 2-32767.
- primary
Dns StringServer - Primary DNS Server. Identified by name or UID. Must be set when "use-primary-dns-server" is true and can not be set when "use-primary-dns-server" is false.
- primary
Wins StringServer - Primary WINS Server. Identified by name or UID. Must be set when "use-primary-wins-server" is true and can not be set when "use-primary-wins-server" is false.
- second
Backup StringDns Server - Second Backup DNS Server. Identified by name or UID. Must be set when "use-second-backup-dns-server" is true and can not be set when "use-second-backup-dns-server" is false.
- second
Backup StringWins Server - Second Backup WINS Server. Identified by name or UID. Must be set when "use-second-backup-wins-server" is true and can not be set when "use-second-backup-wins-server" is false.
- use
First BooleanBackup Dns Server - Use First Backup DNS Server.
- use
First BooleanBackup Wins Server - Use First Backup WINS Server.
- use
Primary BooleanDns Server - Use Primary DNS Server.
- use
Primary BooleanWins Server - Use Primary WINS Server.
- use
Second BooleanBackup Dns Server - Use Second Backup DNS Server.
- use
Second BooleanBackup Wins Server - Use Second Backup WINS Server.
- dns
Suffixes string - DNS Suffixes.
- first
Backup stringDns Server - First Backup DNS Server. Identified by name or UID. Must be set when "use-first-backup-dns-server" is true and can not be set when "use-first-backup-dns-server" is false.
- first
Backup stringWins Server - First Backup WINS Server. Identified by name or UID. Must be set when "use-first-backup-wins-server" is true and can not be set when "use-first-backup-wins-server" is false.
- ip
Lease numberDuration - IP Lease Duration in Minutes. The value must be in the range 2-32767.
- primary
Dns stringServer - Primary DNS Server. Identified by name or UID. Must be set when "use-primary-dns-server" is true and can not be set when "use-primary-dns-server" is false.
- primary
Wins stringServer - Primary WINS Server. Identified by name or UID. Must be set when "use-primary-wins-server" is true and can not be set when "use-primary-wins-server" is false.
- second
Backup stringDns Server - Second Backup DNS Server. Identified by name or UID. Must be set when "use-second-backup-dns-server" is true and can not be set when "use-second-backup-dns-server" is false.
- second
Backup stringWins Server - Second Backup WINS Server. Identified by name or UID. Must be set when "use-second-backup-wins-server" is true and can not be set when "use-second-backup-wins-server" is false.
- use
First booleanBackup Dns Server - Use First Backup DNS Server.
- use
First booleanBackup Wins Server - Use First Backup WINS Server.
- use
Primary booleanDns Server - Use Primary DNS Server.
- use
Primary booleanWins Server - Use Primary WINS Server.
- use
Second booleanBackup Dns Server - Use Second Backup DNS Server.
- use
Second booleanBackup Wins Server - Use Second Backup WINS Server.
- dns_
suffixes str - DNS Suffixes.
- first_
backup_ strdns_ server - First Backup DNS Server. Identified by name or UID. Must be set when "use-first-backup-dns-server" is true and can not be set when "use-first-backup-dns-server" is false.
- first_
backup_ strwins_ server - First Backup WINS Server. Identified by name or UID. Must be set when "use-first-backup-wins-server" is true and can not be set when "use-first-backup-wins-server" is false.
- ip_
lease_ floatduration - IP Lease Duration in Minutes. The value must be in the range 2-32767.
- primary_
dns_ strserver - Primary DNS Server. Identified by name or UID. Must be set when "use-primary-dns-server" is true and can not be set when "use-primary-dns-server" is false.
- primary_
wins_ strserver - Primary WINS Server. Identified by name or UID. Must be set when "use-primary-wins-server" is true and can not be set when "use-primary-wins-server" is false.
- second_
backup_ strdns_ server - Second Backup DNS Server. Identified by name or UID. Must be set when "use-second-backup-dns-server" is true and can not be set when "use-second-backup-dns-server" is false.
- second_
backup_ strwins_ server - Second Backup WINS Server. Identified by name or UID. Must be set when "use-second-backup-wins-server" is true and can not be set when "use-second-backup-wins-server" is false.
- use_
first_ boolbackup_ dns_ server - Use First Backup DNS Server.
- use_
first_ boolbackup_ wins_ server - Use First Backup WINS Server.
- use_
primary_ booldns_ server - Use Primary DNS Server.
- use_
primary_ boolwins_ server - Use Primary WINS Server.
- use_
second_ boolbackup_ dns_ server - Use Second Backup DNS Server.
- use_
second_ boolbackup_ wins_ server - Use Second Backup WINS Server.
- dns
Suffixes String - DNS Suffixes.
- first
Backup StringDns Server - First Backup DNS Server. Identified by name or UID. Must be set when "use-first-backup-dns-server" is true and can not be set when "use-first-backup-dns-server" is false.
- first
Backup StringWins Server - First Backup WINS Server. Identified by name or UID. Must be set when "use-first-backup-wins-server" is true and can not be set when "use-first-backup-wins-server" is false.
- ip
Lease NumberDuration - IP Lease Duration in Minutes. The value must be in the range 2-32767.
- primary
Dns StringServer - Primary DNS Server. Identified by name or UID. Must be set when "use-primary-dns-server" is true and can not be set when "use-primary-dns-server" is false.
- primary
Wins StringServer - Primary WINS Server. Identified by name or UID. Must be set when "use-primary-wins-server" is true and can not be set when "use-primary-wins-server" is false.
- second
Backup StringDns Server - Second Backup DNS Server. Identified by name or UID. Must be set when "use-second-backup-dns-server" is true and can not be set when "use-second-backup-dns-server" is false.
- second
Backup StringWins Server - Second Backup WINS Server. Identified by name or UID. Must be set when "use-second-backup-wins-server" is true and can not be set when "use-second-backup-wins-server" is false.
- use
First BooleanBackup Dns Server - Use First Backup DNS Server.
- use
First BooleanBackup Wins Server - Use First Backup WINS Server.
- use
Primary BooleanDns Server - Use Primary DNS Server.
- use
Primary BooleanWins Server - Use Primary WINS Server.
- use
Second BooleanBackup Dns Server - Use Second Backup DNS Server.
- use
Second BooleanBackup Wins Server - Use Second Backup WINS Server.
ManagementSimpleGatewayVpnSettingsRemoteAccess, ManagementSimpleGatewayVpnSettingsRemoteAccessArgs
- Allow
Vpn boolClients To Route Traffic - Allow VPN clients to route traffic.
- L2tp
Auth stringMethod - L2TP Authentication Method. Must be set when "support-l2tp" is true.
- L2tp
Certificate string - L2TP Certificate. Must be set when "l2tp-auth-method" was selected to be "certificate". Insert "defaultCert" when you want to use the default certificate.
- Nat
Traversal stringService - Allocated NAT traversal UDP service. Identified by name or UID. Must be set when "support-nat-traversal-mechanism" is true.
- Support
L2tp bool - Support L2TP (relevant only when office mode is active).
- Support
Nat boolTraversal Mechanism - Support NAT traversal mechanism (UDP encapsulation).
- Support
Visitor boolMode - Support Visitor Mode.
- Visitor
Mode stringInterface - Interface for Visitor Mode. Must be set when "support-visitor-mode" is true. Insert IPV4 Address of existing interface or "All IPs" when you want all interfaces.
- Visitor
Mode stringService - TCP Service for Visitor Mode. Identified by name or UID. Must be set when "support-visitor-mode" is true.
- Allow
Vpn boolClients To Route Traffic - Allow VPN clients to route traffic.
- L2tp
Auth stringMethod - L2TP Authentication Method. Must be set when "support-l2tp" is true.
- L2tp
Certificate string - L2TP Certificate. Must be set when "l2tp-auth-method" was selected to be "certificate". Insert "defaultCert" when you want to use the default certificate.
- Nat
Traversal stringService - Allocated NAT traversal UDP service. Identified by name or UID. Must be set when "support-nat-traversal-mechanism" is true.
- Support
L2tp bool - Support L2TP (relevant only when office mode is active).
- Support
Nat boolTraversal Mechanism - Support NAT traversal mechanism (UDP encapsulation).
- Support
Visitor boolMode - Support Visitor Mode.
- Visitor
Mode stringInterface - Interface for Visitor Mode. Must be set when "support-visitor-mode" is true. Insert IPV4 Address of existing interface or "All IPs" when you want all interfaces.
- Visitor
Mode stringService - TCP Service for Visitor Mode. Identified by name or UID. Must be set when "support-visitor-mode" is true.
- allow
Vpn BooleanClients To Route Traffic - Allow VPN clients to route traffic.
- l2tp
Auth StringMethod - L2TP Authentication Method. Must be set when "support-l2tp" is true.
- l2tp
Certificate String - L2TP Certificate. Must be set when "l2tp-auth-method" was selected to be "certificate". Insert "defaultCert" when you want to use the default certificate.
- nat
Traversal StringService - Allocated NAT traversal UDP service. Identified by name or UID. Must be set when "support-nat-traversal-mechanism" is true.
- support
L2tp Boolean - Support L2TP (relevant only when office mode is active).
- support
Nat BooleanTraversal Mechanism - Support NAT traversal mechanism (UDP encapsulation).
- support
Visitor BooleanMode - Support Visitor Mode.
- visitor
Mode StringInterface - Interface for Visitor Mode. Must be set when "support-visitor-mode" is true. Insert IPV4 Address of existing interface or "All IPs" when you want all interfaces.
- visitor
Mode StringService - TCP Service for Visitor Mode. Identified by name or UID. Must be set when "support-visitor-mode" is true.
- allow
Vpn booleanClients To Route Traffic - Allow VPN clients to route traffic.
- l2tp
Auth stringMethod - L2TP Authentication Method. Must be set when "support-l2tp" is true.
- l2tp
Certificate string - L2TP Certificate. Must be set when "l2tp-auth-method" was selected to be "certificate". Insert "defaultCert" when you want to use the default certificate.
- nat
Traversal stringService - Allocated NAT traversal UDP service. Identified by name or UID. Must be set when "support-nat-traversal-mechanism" is true.
- support
L2tp boolean - Support L2TP (relevant only when office mode is active).
- support
Nat booleanTraversal Mechanism - Support NAT traversal mechanism (UDP encapsulation).
- support
Visitor booleanMode - Support Visitor Mode.
- visitor
Mode stringInterface - Interface for Visitor Mode. Must be set when "support-visitor-mode" is true. Insert IPV4 Address of existing interface or "All IPs" when you want all interfaces.
- visitor
Mode stringService - TCP Service for Visitor Mode. Identified by name or UID. Must be set when "support-visitor-mode" is true.
- allow_
vpn_ boolclients_ to_ route_ traffic - Allow VPN clients to route traffic.
- l2tp_
auth_ strmethod - L2TP Authentication Method. Must be set when "support-l2tp" is true.
- l2tp_
certificate str - L2TP Certificate. Must be set when "l2tp-auth-method" was selected to be "certificate". Insert "defaultCert" when you want to use the default certificate.
- nat_
traversal_ strservice - Allocated NAT traversal UDP service. Identified by name or UID. Must be set when "support-nat-traversal-mechanism" is true.
- support_
l2tp bool - Support L2TP (relevant only when office mode is active).
- support_
nat_ booltraversal_ mechanism - Support NAT traversal mechanism (UDP encapsulation).
- support_
visitor_ boolmode - Support Visitor Mode.
- visitor_
mode_ strinterface - Interface for Visitor Mode. Must be set when "support-visitor-mode" is true. Insert IPV4 Address of existing interface or "All IPs" when you want all interfaces.
- visitor_
mode_ strservice - TCP Service for Visitor Mode. Identified by name or UID. Must be set when "support-visitor-mode" is true.
- allow
Vpn BooleanClients To Route Traffic - Allow VPN clients to route traffic.
- l2tp
Auth StringMethod - L2TP Authentication Method. Must be set when "support-l2tp" is true.
- l2tp
Certificate String - L2TP Certificate. Must be set when "l2tp-auth-method" was selected to be "certificate". Insert "defaultCert" when you want to use the default certificate.
- nat
Traversal StringService - Allocated NAT traversal UDP service. Identified by name or UID. Must be set when "support-nat-traversal-mechanism" is true.
- support
L2tp Boolean - Support L2TP (relevant only when office mode is active).
- support
Nat BooleanTraversal Mechanism - Support NAT traversal mechanism (UDP encapsulation).
- support
Visitor BooleanMode - Support Visitor Mode.
- visitor
Mode StringInterface - Interface for Visitor Mode. Must be set when "support-visitor-mode" is true. Insert IPV4 Address of existing interface or "All IPs" when you want all interfaces.
- visitor
Mode StringService - TCP Service for Visitor Mode. Identified by name or UID. Must be set when "support-visitor-mode" is true.
Package Details
- Repository
- checkpoint checkpointsw/terraform-provider-checkpoint
- License
- Notes
- This Pulumi package is based on the
checkpointTerraform Provider.
Viewing docs for checkpoint 3.0.0
published on Monday, Mar 30, 2026 by checkpointsw
published on Monday, Mar 30, 2026 by checkpointsw
