published on Monday, May 18, 2026 by vmware
published on Monday, May 18, 2026 by vmware
Create PolicyIntrusionServiceGatewayPolicy Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new PolicyIntrusionServiceGatewayPolicy(name: string, args: PolicyIntrusionServiceGatewayPolicyArgs, opts?: CustomResourceOptions);@overload
def PolicyIntrusionServiceGatewayPolicy(resource_name: str,
args: PolicyIntrusionServiceGatewayPolicyArgs,
opts: Optional[ResourceOptions] = None)
@overload
def PolicyIntrusionServiceGatewayPolicy(resource_name: str,
opts: Optional[ResourceOptions] = None,
category: Optional[str] = None,
display_name: Optional[str] = None,
comments: Optional[str] = None,
description: Optional[str] = None,
domain: Optional[str] = None,
locked: Optional[bool] = None,
nsx_id: Optional[str] = None,
policy_intrusion_service_gateway_policy_id: Optional[str] = None,
rules: Optional[Sequence[PolicyIntrusionServiceGatewayPolicyRuleArgs]] = None,
sequence_number: Optional[float] = None,
tags: Optional[Sequence[PolicyIntrusionServiceGatewayPolicyTagArgs]] = None)func NewPolicyIntrusionServiceGatewayPolicy(ctx *Context, name string, args PolicyIntrusionServiceGatewayPolicyArgs, opts ...ResourceOption) (*PolicyIntrusionServiceGatewayPolicy, error)public PolicyIntrusionServiceGatewayPolicy(string name, PolicyIntrusionServiceGatewayPolicyArgs args, CustomResourceOptions? opts = null)
public PolicyIntrusionServiceGatewayPolicy(String name, PolicyIntrusionServiceGatewayPolicyArgs args)
public PolicyIntrusionServiceGatewayPolicy(String name, PolicyIntrusionServiceGatewayPolicyArgs args, CustomResourceOptions options)
type: nsxt:PolicyIntrusionServiceGatewayPolicy
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
resource "nsxt_policyintrusionservicegatewaypolicy" "name" {
# resource properties
}Parameters
- name string
- The unique name of the resource.
- args PolicyIntrusionServiceGatewayPolicyArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args PolicyIntrusionServiceGatewayPolicyArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args PolicyIntrusionServiceGatewayPolicyArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args PolicyIntrusionServiceGatewayPolicyArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args PolicyIntrusionServiceGatewayPolicyArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var policyIntrusionServiceGatewayPolicyResource = new Nsxt.PolicyIntrusionServiceGatewayPolicy("policyIntrusionServiceGatewayPolicyResource", new()
{
Category = "string",
DisplayName = "string",
Comments = "string",
Description = "string",
Domain = "string",
Locked = false,
NsxId = "string",
PolicyIntrusionServiceGatewayPolicyId = "string",
Rules = new[]
{
new Nsxt.Inputs.PolicyIntrusionServiceGatewayPolicyRuleArgs
{
DisplayName = "string",
Scopes = new[]
{
"string",
},
IdsProfiles = new[]
{
"string",
},
Logged = false,
NsxId = "string",
Disabled = false,
DestinationsExcluded = false,
DestinationGroups = new[]
{
"string",
},
IpVersion = "string",
LogLabel = "string",
Action = "string",
Notes = "string",
Direction = "string",
Path = "string",
Revision = 0,
RuleId = 0,
Description = "string",
SequenceNumber = 0,
Services = new[]
{
"string",
},
SourceGroups = new[]
{
"string",
},
SourcesExcluded = false,
Tags = new[]
{
new Nsxt.Inputs.PolicyIntrusionServiceGatewayPolicyRuleTagArgs
{
Scope = "string",
Tag = "string",
},
},
},
},
SequenceNumber = 0,
Tags = new[]
{
new Nsxt.Inputs.PolicyIntrusionServiceGatewayPolicyTagArgs
{
Scope = "string",
Tag = "string",
},
},
});
example, err := nsxt.NewPolicyIntrusionServiceGatewayPolicy(ctx, "policyIntrusionServiceGatewayPolicyResource", &nsxt.PolicyIntrusionServiceGatewayPolicyArgs{
Category: pulumi.String("string"),
DisplayName: pulumi.String("string"),
Comments: pulumi.String("string"),
Description: pulumi.String("string"),
Domain: pulumi.String("string"),
Locked: pulumi.Bool(false),
NsxId: pulumi.String("string"),
PolicyIntrusionServiceGatewayPolicyId: pulumi.String("string"),
Rules: nsxt.PolicyIntrusionServiceGatewayPolicyRuleTypeArray{
&nsxt.PolicyIntrusionServiceGatewayPolicyRuleTypeArgs{
DisplayName: pulumi.String("string"),
Scopes: pulumi.StringArray{
pulumi.String("string"),
},
IdsProfiles: pulumi.StringArray{
pulumi.String("string"),
},
Logged: pulumi.Bool(false),
NsxId: pulumi.String("string"),
Disabled: pulumi.Bool(false),
DestinationsExcluded: pulumi.Bool(false),
DestinationGroups: pulumi.StringArray{
pulumi.String("string"),
},
IpVersion: pulumi.String("string"),
LogLabel: pulumi.String("string"),
Action: pulumi.String("string"),
Notes: pulumi.String("string"),
Direction: pulumi.String("string"),
Path: pulumi.String("string"),
Revision: pulumi.Float64(0),
RuleId: pulumi.Float64(0),
Description: pulumi.String("string"),
SequenceNumber: pulumi.Float64(0),
Services: pulumi.StringArray{
pulumi.String("string"),
},
SourceGroups: pulumi.StringArray{
pulumi.String("string"),
},
SourcesExcluded: pulumi.Bool(false),
Tags: nsxt.PolicyIntrusionServiceGatewayPolicyRuleTagArray{
&nsxt.PolicyIntrusionServiceGatewayPolicyRuleTagArgs{
Scope: pulumi.String("string"),
Tag: pulumi.String("string"),
},
},
},
},
SequenceNumber: pulumi.Float64(0),
Tags: nsxt.PolicyIntrusionServiceGatewayPolicyTagArray{
&nsxt.PolicyIntrusionServiceGatewayPolicyTagArgs{
Scope: pulumi.String("string"),
Tag: pulumi.String("string"),
},
},
})
resource "nsxt_policyintrusionservicegatewaypolicy" "policyIntrusionServiceGatewayPolicyResource" {
category = "string"
display_name = "string"
comments = "string"
description = "string"
domain = "string"
locked = false
nsx_id = "string"
policy_intrusion_service_gateway_policy_id = "string"
rules {
display_name = "string"
scopes = ["string"]
ids_profiles = ["string"]
logged = false
nsx_id = "string"
disabled = false
destinations_excluded = false
destination_groups = ["string"]
ip_version = "string"
log_label = "string"
action = "string"
notes = "string"
direction = "string"
path = "string"
revision = 0
rule_id = 0
description = "string"
sequence_number = 0
services = ["string"]
source_groups = ["string"]
sources_excluded = false
tags {
scope = "string"
tag = "string"
}
}
sequence_number = 0
tags {
scope = "string"
tag = "string"
}
}
var policyIntrusionServiceGatewayPolicyResource = new PolicyIntrusionServiceGatewayPolicy("policyIntrusionServiceGatewayPolicyResource", PolicyIntrusionServiceGatewayPolicyArgs.builder()
.category("string")
.displayName("string")
.comments("string")
.description("string")
.domain("string")
.locked(false)
.nsxId("string")
.policyIntrusionServiceGatewayPolicyId("string")
.rules(PolicyIntrusionServiceGatewayPolicyRuleArgs.builder()
.displayName("string")
.scopes("string")
.idsProfiles("string")
.logged(false)
.nsxId("string")
.disabled(false)
.destinationsExcluded(false)
.destinationGroups("string")
.ipVersion("string")
.logLabel("string")
.action("string")
.notes("string")
.direction("string")
.path("string")
.revision(0.0)
.ruleId(0.0)
.description("string")
.sequenceNumber(0.0)
.services("string")
.sourceGroups("string")
.sourcesExcluded(false)
.tags(PolicyIntrusionServiceGatewayPolicyRuleTagArgs.builder()
.scope("string")
.tag("string")
.build())
.build())
.sequenceNumber(0.0)
.tags(PolicyIntrusionServiceGatewayPolicyTagArgs.builder()
.scope("string")
.tag("string")
.build())
.build());
policy_intrusion_service_gateway_policy_resource = nsxt.PolicyIntrusionServiceGatewayPolicy("policyIntrusionServiceGatewayPolicyResource",
category="string",
display_name="string",
comments="string",
description="string",
domain="string",
locked=False,
nsx_id="string",
policy_intrusion_service_gateway_policy_id="string",
rules=[{
"display_name": "string",
"scopes": ["string"],
"ids_profiles": ["string"],
"logged": False,
"nsx_id": "string",
"disabled": False,
"destinations_excluded": False,
"destination_groups": ["string"],
"ip_version": "string",
"log_label": "string",
"action": "string",
"notes": "string",
"direction": "string",
"path": "string",
"revision": float(0),
"rule_id": float(0),
"description": "string",
"sequence_number": float(0),
"services": ["string"],
"source_groups": ["string"],
"sources_excluded": False,
"tags": [{
"scope": "string",
"tag": "string",
}],
}],
sequence_number=float(0),
tags=[{
"scope": "string",
"tag": "string",
}])
const policyIntrusionServiceGatewayPolicyResource = new nsxt.PolicyIntrusionServiceGatewayPolicy("policyIntrusionServiceGatewayPolicyResource", {
category: "string",
displayName: "string",
comments: "string",
description: "string",
domain: "string",
locked: false,
nsxId: "string",
policyIntrusionServiceGatewayPolicyId: "string",
rules: [{
displayName: "string",
scopes: ["string"],
idsProfiles: ["string"],
logged: false,
nsxId: "string",
disabled: false,
destinationsExcluded: false,
destinationGroups: ["string"],
ipVersion: "string",
logLabel: "string",
action: "string",
notes: "string",
direction: "string",
path: "string",
revision: 0,
ruleId: 0,
description: "string",
sequenceNumber: 0,
services: ["string"],
sourceGroups: ["string"],
sourcesExcluded: false,
tags: [{
scope: "string",
tag: "string",
}],
}],
sequenceNumber: 0,
tags: [{
scope: "string",
tag: "string",
}],
});
type: nsxt:PolicyIntrusionServiceGatewayPolicy
properties:
category: string
comments: string
description: string
displayName: string
domain: string
locked: false
nsxId: string
policyIntrusionServiceGatewayPolicyId: string
rules:
- action: string
description: string
destinationGroups:
- string
destinationsExcluded: false
direction: string
disabled: false
displayName: string
idsProfiles:
- string
ipVersion: string
logLabel: string
logged: false
notes: string
nsxId: string
path: string
revision: 0
ruleId: 0
scopes:
- string
sequenceNumber: 0
services:
- string
sourceGroups:
- string
sourcesExcluded: false
tags:
- scope: string
tag: string
sequenceNumber: 0
tags:
- scope: string
tag: string
PolicyIntrusionServiceGatewayPolicy Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The PolicyIntrusionServiceGatewayPolicy resource accepts the following input properties:
- Category string
- The category to use for priority of this Intrusion Service Gateway Policy. Must be one of:
SharedPreRules,LocalGatewayRules, orDefault. - Display
Name string - Display name of the resource.
- Comments string
- Comments for this Intrusion Service Gateway Policy including lock/unlock comments.
- Description string
- Description of the resource.
- Domain string
- The domain to use for the resource. This domain must already exist. If not specified, this field is default to
default. - Locked bool
- A boolean value indicating if the policy is locked. If locked, no other users can update the resource. Default is
false. - Nsx
Id string - The NSX ID of this resource. If set, this ID will be used to create the resource.
- Policy
Intrusion stringService Gateway Policy Id - ID of the resource.
- Rules
List<Policy
Intrusion Service Gateway Policy Rule> - List of Intrusion Service rules in the policy
- Sequence
Number double - An int value used to resolve conflicts between intrusion service gateway policies across domains. Default is
0. -
List<Policy
Intrusion Service Gateway Policy Tag> - A list of scope + tag pairs to associate with this policy.
- Category string
- The category to use for priority of this Intrusion Service Gateway Policy. Must be one of:
SharedPreRules,LocalGatewayRules, orDefault. - Display
Name string - Display name of the resource.
- Comments string
- Comments for this Intrusion Service Gateway Policy including lock/unlock comments.
- Description string
- Description of the resource.
- Domain string
- The domain to use for the resource. This domain must already exist. If not specified, this field is default to
default. - Locked bool
- A boolean value indicating if the policy is locked. If locked, no other users can update the resource. Default is
false. - Nsx
Id string - The NSX ID of this resource. If set, this ID will be used to create the resource.
- Policy
Intrusion stringService Gateway Policy Id - ID of the resource.
- Rules
[]Policy
Intrusion Service Gateway Policy Rule Type Args - List of Intrusion Service rules in the policy
- Sequence
Number float64 - An int value used to resolve conflicts between intrusion service gateway policies across domains. Default is
0. -
[]Policy
Intrusion Service Gateway Policy Tag Args - A list of scope + tag pairs to associate with this policy.
- category string
- The category to use for priority of this Intrusion Service Gateway Policy. Must be one of:
SharedPreRules,LocalGatewayRules, orDefault. - display_
name string - Display name of the resource.
- comments string
- Comments for this Intrusion Service Gateway Policy including lock/unlock comments.
- description string
- Description of the resource.
- domain string
- The domain to use for the resource. This domain must already exist. If not specified, this field is default to
default. - locked bool
- A boolean value indicating if the policy is locked. If locked, no other users can update the resource. Default is
false. - nsx_
id string - The NSX ID of this resource. If set, this ID will be used to create the resource.
- policy_
intrusion_ stringservice_ gateway_ policy_ id - ID of the resource.
- rules list(object)
- List of Intrusion Service rules in the policy
- sequence_
number number - An int value used to resolve conflicts between intrusion service gateway policies across domains. Default is
0. - list(object)
- A list of scope + tag pairs to associate with this policy.
- category String
- The category to use for priority of this Intrusion Service Gateway Policy. Must be one of:
SharedPreRules,LocalGatewayRules, orDefault. - display
Name String - Display name of the resource.
- comments String
- Comments for this Intrusion Service Gateway Policy including lock/unlock comments.
- description String
- Description of the resource.
- domain String
- The domain to use for the resource. This domain must already exist. If not specified, this field is default to
default. - locked Boolean
- A boolean value indicating if the policy is locked. If locked, no other users can update the resource. Default is
false. - nsx
Id String - The NSX ID of this resource. If set, this ID will be used to create the resource.
- policy
Intrusion StringService Gateway Policy Id - ID of the resource.
- rules
List<Policy
Intrusion Service Gateway Policy Rule> - List of Intrusion Service rules in the policy
- sequence
Number Double - An int value used to resolve conflicts between intrusion service gateway policies across domains. Default is
0. -
List<Policy
Intrusion Service Gateway Policy Tag> - A list of scope + tag pairs to associate with this policy.
- category string
- The category to use for priority of this Intrusion Service Gateway Policy. Must be one of:
SharedPreRules,LocalGatewayRules, orDefault. - display
Name string - Display name of the resource.
- comments string
- Comments for this Intrusion Service Gateway Policy including lock/unlock comments.
- description string
- Description of the resource.
- domain string
- The domain to use for the resource. This domain must already exist. If not specified, this field is default to
default. - locked boolean
- A boolean value indicating if the policy is locked. If locked, no other users can update the resource. Default is
false. - nsx
Id string - The NSX ID of this resource. If set, this ID will be used to create the resource.
- policy
Intrusion stringService Gateway Policy Id - ID of the resource.
- rules
Policy
Intrusion Service Gateway Policy Rule[] - List of Intrusion Service rules in the policy
- sequence
Number number - An int value used to resolve conflicts between intrusion service gateway policies across domains. Default is
0. -
Policy
Intrusion Service Gateway Policy Tag[] - A list of scope + tag pairs to associate with this policy.
- category str
- The category to use for priority of this Intrusion Service Gateway Policy. Must be one of:
SharedPreRules,LocalGatewayRules, orDefault. - display_
name str - Display name of the resource.
- comments str
- Comments for this Intrusion Service Gateway Policy including lock/unlock comments.
- description str
- Description of the resource.
- domain str
- The domain to use for the resource. This domain must already exist. If not specified, this field is default to
default. - locked bool
- A boolean value indicating if the policy is locked. If locked, no other users can update the resource. Default is
false. - nsx_
id str - The NSX ID of this resource. If set, this ID will be used to create the resource.
- policy_
intrusion_ strservice_ gateway_ policy_ id - ID of the resource.
- rules
Sequence[Policy
Intrusion Service Gateway Policy Rule Args] - List of Intrusion Service rules in the policy
- sequence_
number float - An int value used to resolve conflicts between intrusion service gateway policies across domains. Default is
0. -
Sequence[Policy
Intrusion Service Gateway Policy Tag Args] - A list of scope + tag pairs to associate with this policy.
- category String
- The category to use for priority of this Intrusion Service Gateway Policy. Must be one of:
SharedPreRules,LocalGatewayRules, orDefault. - display
Name String - Display name of the resource.
- comments String
- Comments for this Intrusion Service Gateway Policy including lock/unlock comments.
- description String
- Description of the resource.
- domain String
- The domain to use for the resource. This domain must already exist. If not specified, this field is default to
default. - locked Boolean
- A boolean value indicating if the policy is locked. If locked, no other users can update the resource. Default is
false. - nsx
Id String - The NSX ID of this resource. If set, this ID will be used to create the resource.
- policy
Intrusion StringService Gateway Policy Id - ID of the resource.
- rules List<Property Map>
- List of Intrusion Service rules in the policy
- sequence
Number Number - An int value used to resolve conflicts between intrusion service gateway policies across domains. Default is
0. - List<Property Map>
- A list of scope + tag pairs to associate with this policy.
Outputs
All input properties are implicitly available as output properties. Additionally, the PolicyIntrusionServiceGatewayPolicy resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Path string
- The NSX path of the rule.
- Revision double
- Indicates current revision number of the rule.
- Stateful bool
- A boolean value indicating if this Policy is stateful. Intrusion Service Gateway Policies are always stateful as they require connection state tracking for proper intrusion detection and prevention. This field is read-only and always returns
true.
- Id string
- The provider-assigned unique ID for this managed resource.
- Path string
- The NSX path of the rule.
- Revision float64
- Indicates current revision number of the rule.
- Stateful bool
- A boolean value indicating if this Policy is stateful. Intrusion Service Gateway Policies are always stateful as they require connection state tracking for proper intrusion detection and prevention. This field is read-only and always returns
true.
- id string
- The provider-assigned unique ID for this managed resource.
- path string
- The NSX path of the rule.
- revision number
- Indicates current revision number of the rule.
- stateful bool
- A boolean value indicating if this Policy is stateful. Intrusion Service Gateway Policies are always stateful as they require connection state tracking for proper intrusion detection and prevention. This field is read-only and always returns
true.
- id String
- The provider-assigned unique ID for this managed resource.
- path String
- The NSX path of the rule.
- revision Double
- Indicates current revision number of the rule.
- stateful Boolean
- A boolean value indicating if this Policy is stateful. Intrusion Service Gateway Policies are always stateful as they require connection state tracking for proper intrusion detection and prevention. This field is read-only and always returns
true.
- id string
- The provider-assigned unique ID for this managed resource.
- path string
- The NSX path of the rule.
- revision number
- Indicates current revision number of the rule.
- stateful boolean
- A boolean value indicating if this Policy is stateful. Intrusion Service Gateway Policies are always stateful as they require connection state tracking for proper intrusion detection and prevention. This field is read-only and always returns
true.
- id str
- The provider-assigned unique ID for this managed resource.
- path str
- The NSX path of the rule.
- revision float
- Indicates current revision number of the rule.
- stateful bool
- A boolean value indicating if this Policy is stateful. Intrusion Service Gateway Policies are always stateful as they require connection state tracking for proper intrusion detection and prevention. This field is read-only and always returns
true.
- id String
- The provider-assigned unique ID for this managed resource.
- path String
- The NSX path of the rule.
- revision Number
- Indicates current revision number of the rule.
- stateful Boolean
- A boolean value indicating if this Policy is stateful. Intrusion Service Gateway Policies are always stateful as they require connection state tracking for proper intrusion detection and prevention. This field is read-only and always returns
true.
Look up Existing PolicyIntrusionServiceGatewayPolicy Resource
Get an existing PolicyIntrusionServiceGatewayPolicy resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: PolicyIntrusionServiceGatewayPolicyState, opts?: CustomResourceOptions): PolicyIntrusionServiceGatewayPolicy@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
category: Optional[str] = None,
comments: Optional[str] = None,
description: Optional[str] = None,
display_name: Optional[str] = None,
domain: Optional[str] = None,
locked: Optional[bool] = None,
nsx_id: Optional[str] = None,
path: Optional[str] = None,
policy_intrusion_service_gateway_policy_id: Optional[str] = None,
revision: Optional[float] = None,
rules: Optional[Sequence[PolicyIntrusionServiceGatewayPolicyRuleArgs]] = None,
sequence_number: Optional[float] = None,
stateful: Optional[bool] = None,
tags: Optional[Sequence[PolicyIntrusionServiceGatewayPolicyTagArgs]] = None) -> PolicyIntrusionServiceGatewayPolicyfunc GetPolicyIntrusionServiceGatewayPolicy(ctx *Context, name string, id IDInput, state *PolicyIntrusionServiceGatewayPolicyState, opts ...ResourceOption) (*PolicyIntrusionServiceGatewayPolicy, error)public static PolicyIntrusionServiceGatewayPolicy Get(string name, Input<string> id, PolicyIntrusionServiceGatewayPolicyState? state, CustomResourceOptions? opts = null)public static PolicyIntrusionServiceGatewayPolicy get(String name, Output<String> id, PolicyIntrusionServiceGatewayPolicyState state, CustomResourceOptions options)resources: _: type: nsxt:PolicyIntrusionServiceGatewayPolicy get: id: ${id}import {
to = nsxt_policyintrusionservicegatewaypolicy.example
id = "${id}"
}
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Category string
- The category to use for priority of this Intrusion Service Gateway Policy. Must be one of:
SharedPreRules,LocalGatewayRules, orDefault. - Comments string
- Comments for this Intrusion Service Gateway Policy including lock/unlock comments.
- Description string
- Description of the resource.
- Display
Name string - Display name of the resource.
- Domain string
- The domain to use for the resource. This domain must already exist. If not specified, this field is default to
default. - Locked bool
- A boolean value indicating if the policy is locked. If locked, no other users can update the resource. Default is
false. - Nsx
Id string - The NSX ID of this resource. If set, this ID will be used to create the resource.
- Path string
- The NSX path of the rule.
- Policy
Intrusion stringService Gateway Policy Id - ID of the resource.
- Revision double
- Indicates current revision number of the rule.
- Rules
List<Policy
Intrusion Service Gateway Policy Rule> - List of Intrusion Service rules in the policy
- Sequence
Number double - An int value used to resolve conflicts between intrusion service gateway policies across domains. Default is
0. - Stateful bool
- A boolean value indicating if this Policy is stateful. Intrusion Service Gateway Policies are always stateful as they require connection state tracking for proper intrusion detection and prevention. This field is read-only and always returns
true. -
List<Policy
Intrusion Service Gateway Policy Tag> - A list of scope + tag pairs to associate with this policy.
- Category string
- The category to use for priority of this Intrusion Service Gateway Policy. Must be one of:
SharedPreRules,LocalGatewayRules, orDefault. - Comments string
- Comments for this Intrusion Service Gateway Policy including lock/unlock comments.
- Description string
- Description of the resource.
- Display
Name string - Display name of the resource.
- Domain string
- The domain to use for the resource. This domain must already exist. If not specified, this field is default to
default. - Locked bool
- A boolean value indicating if the policy is locked. If locked, no other users can update the resource. Default is
false. - Nsx
Id string - The NSX ID of this resource. If set, this ID will be used to create the resource.
- Path string
- The NSX path of the rule.
- Policy
Intrusion stringService Gateway Policy Id - ID of the resource.
- Revision float64
- Indicates current revision number of the rule.
- Rules
[]Policy
Intrusion Service Gateway Policy Rule Type Args - List of Intrusion Service rules in the policy
- Sequence
Number float64 - An int value used to resolve conflicts between intrusion service gateway policies across domains. Default is
0. - Stateful bool
- A boolean value indicating if this Policy is stateful. Intrusion Service Gateway Policies are always stateful as they require connection state tracking for proper intrusion detection and prevention. This field is read-only and always returns
true. -
[]Policy
Intrusion Service Gateway Policy Tag Args - A list of scope + tag pairs to associate with this policy.
- category string
- The category to use for priority of this Intrusion Service Gateway Policy. Must be one of:
SharedPreRules,LocalGatewayRules, orDefault. - comments string
- Comments for this Intrusion Service Gateway Policy including lock/unlock comments.
- description string
- Description of the resource.
- display_
name string - Display name of the resource.
- domain string
- The domain to use for the resource. This domain must already exist. If not specified, this field is default to
default. - locked bool
- A boolean value indicating if the policy is locked. If locked, no other users can update the resource. Default is
false. - nsx_
id string - The NSX ID of this resource. If set, this ID will be used to create the resource.
- path string
- The NSX path of the rule.
- policy_
intrusion_ stringservice_ gateway_ policy_ id - ID of the resource.
- revision number
- Indicates current revision number of the rule.
- rules list(object)
- List of Intrusion Service rules in the policy
- sequence_
number number - An int value used to resolve conflicts between intrusion service gateway policies across domains. Default is
0. - stateful bool
- A boolean value indicating if this Policy is stateful. Intrusion Service Gateway Policies are always stateful as they require connection state tracking for proper intrusion detection and prevention. This field is read-only and always returns
true. - list(object)
- A list of scope + tag pairs to associate with this policy.
- category String
- The category to use for priority of this Intrusion Service Gateway Policy. Must be one of:
SharedPreRules,LocalGatewayRules, orDefault. - comments String
- Comments for this Intrusion Service Gateway Policy including lock/unlock comments.
- description String
- Description of the resource.
- display
Name String - Display name of the resource.
- domain String
- The domain to use for the resource. This domain must already exist. If not specified, this field is default to
default. - locked Boolean
- A boolean value indicating if the policy is locked. If locked, no other users can update the resource. Default is
false. - nsx
Id String - The NSX ID of this resource. If set, this ID will be used to create the resource.
- path String
- The NSX path of the rule.
- policy
Intrusion StringService Gateway Policy Id - ID of the resource.
- revision Double
- Indicates current revision number of the rule.
- rules
List<Policy
Intrusion Service Gateway Policy Rule> - List of Intrusion Service rules in the policy
- sequence
Number Double - An int value used to resolve conflicts between intrusion service gateway policies across domains. Default is
0. - stateful Boolean
- A boolean value indicating if this Policy is stateful. Intrusion Service Gateway Policies are always stateful as they require connection state tracking for proper intrusion detection and prevention. This field is read-only and always returns
true. -
List<Policy
Intrusion Service Gateway Policy Tag> - A list of scope + tag pairs to associate with this policy.
- category string
- The category to use for priority of this Intrusion Service Gateway Policy. Must be one of:
SharedPreRules,LocalGatewayRules, orDefault. - comments string
- Comments for this Intrusion Service Gateway Policy including lock/unlock comments.
- description string
- Description of the resource.
- display
Name string - Display name of the resource.
- domain string
- The domain to use for the resource. This domain must already exist. If not specified, this field is default to
default. - locked boolean
- A boolean value indicating if the policy is locked. If locked, no other users can update the resource. Default is
false. - nsx
Id string - The NSX ID of this resource. If set, this ID will be used to create the resource.
- path string
- The NSX path of the rule.
- policy
Intrusion stringService Gateway Policy Id - ID of the resource.
- revision number
- Indicates current revision number of the rule.
- rules
Policy
Intrusion Service Gateway Policy Rule[] - List of Intrusion Service rules in the policy
- sequence
Number number - An int value used to resolve conflicts between intrusion service gateway policies across domains. Default is
0. - stateful boolean
- A boolean value indicating if this Policy is stateful. Intrusion Service Gateway Policies are always stateful as they require connection state tracking for proper intrusion detection and prevention. This field is read-only and always returns
true. -
Policy
Intrusion Service Gateway Policy Tag[] - A list of scope + tag pairs to associate with this policy.
- category str
- The category to use for priority of this Intrusion Service Gateway Policy. Must be one of:
SharedPreRules,LocalGatewayRules, orDefault. - comments str
- Comments for this Intrusion Service Gateway Policy including lock/unlock comments.
- description str
- Description of the resource.
- display_
name str - Display name of the resource.
- domain str
- The domain to use for the resource. This domain must already exist. If not specified, this field is default to
default. - locked bool
- A boolean value indicating if the policy is locked. If locked, no other users can update the resource. Default is
false. - nsx_
id str - The NSX ID of this resource. If set, this ID will be used to create the resource.
- path str
- The NSX path of the rule.
- policy_
intrusion_ strservice_ gateway_ policy_ id - ID of the resource.
- revision float
- Indicates current revision number of the rule.
- rules
Sequence[Policy
Intrusion Service Gateway Policy Rule Args] - List of Intrusion Service rules in the policy
- sequence_
number float - An int value used to resolve conflicts between intrusion service gateway policies across domains. Default is
0. - stateful bool
- A boolean value indicating if this Policy is stateful. Intrusion Service Gateway Policies are always stateful as they require connection state tracking for proper intrusion detection and prevention. This field is read-only and always returns
true. -
Sequence[Policy
Intrusion Service Gateway Policy Tag Args] - A list of scope + tag pairs to associate with this policy.
- category String
- The category to use for priority of this Intrusion Service Gateway Policy. Must be one of:
SharedPreRules,LocalGatewayRules, orDefault. - comments String
- Comments for this Intrusion Service Gateway Policy including lock/unlock comments.
- description String
- Description of the resource.
- display
Name String - Display name of the resource.
- domain String
- The domain to use for the resource. This domain must already exist. If not specified, this field is default to
default. - locked Boolean
- A boolean value indicating if the policy is locked. If locked, no other users can update the resource. Default is
false. - nsx
Id String - The NSX ID of this resource. If set, this ID will be used to create the resource.
- path String
- The NSX path of the rule.
- policy
Intrusion StringService Gateway Policy Id - ID of the resource.
- revision Number
- Indicates current revision number of the rule.
- rules List<Property Map>
- List of Intrusion Service rules in the policy
- sequence
Number Number - An int value used to resolve conflicts between intrusion service gateway policies across domains. Default is
0. - stateful Boolean
- A boolean value indicating if this Policy is stateful. Intrusion Service Gateway Policies are always stateful as they require connection state tracking for proper intrusion detection and prevention. This field is read-only and always returns
true. - List<Property Map>
- A list of scope + tag pairs to associate with this policy.
Supporting Types
PolicyIntrusionServiceGatewayPolicyRule, PolicyIntrusionServiceGatewayPolicyRuleArgs
- Display
Name string - Display name of the rule.
- Ids
Profiles List<string> - Set of IDS profile paths for this rule. These profiles define the intrusion detection signatures to be applied.
- Scopes List<string>
- Set of policy paths where the rule is applied. These should be Tier-0 or Tier-1 gateway paths for North-South traffic inspection.
- Action string
- Rule action for intrusion detection/prevention. One of
DETECTorDETECT_PREVENT. Default isDETECT. - Description string
- Description of the rule.
- Destination
Groups List<string> - Set of group paths that serve as the destination for this rule. An empty set can be used to specify
ANY. Default isANY. - Destinations
Excluded bool - A boolean value indicating negation of destination groups. Default is
false. - Direction string
- The traffic direction for the rule. Must be one of:
IN,OUTorIN_OUT. Default isIN_OUT. - Disabled bool
- A boolean value to indicate the rule is disabled. Default is
false. - Ip
Version string - The IP Protocol for the rule. Must be one of:
IPV4,IPV6orIPV4_IPV6. Default isIPV4_IPV6. - Log
Label string - Additional information which will be propagated to the rule syslog.
- Logged bool
- A boolean flag to enable packet logging. Default is
false. - Notes string
- Text for additional notes on changes for the rule.
- Nsx
Id string - The NSX ID of this resource. If set, this ID will be used to create the resource.
- Path string
- The NSX path of the rule.
- Revision double
- Indicates current revision number of the rule.
- Rule
Id double - Unique positive number that is assigned by the system and is useful for debugging.
- Sequence
Number double - Sequence number to determine the order of rule processing within this policy.
- Services List<string>
- Set of service paths to match for this rule. An empty set can be used to specify
ANY. Default isANY. - Source
Groups List<string> - Set of group paths that serve as the source for this rule. An empty set can be used to specify
ANY. Default isANY. - Sources
Excluded bool - A boolean value indicating negation of source groups. Default is
false. -
List<Policy
Intrusion Service Gateway Policy Rule Tag> - A list of scope + tag pairs to associate with this rule.
- Display
Name string - Display name of the rule.
- Ids
Profiles []string - Set of IDS profile paths for this rule. These profiles define the intrusion detection signatures to be applied.
- Scopes []string
- Set of policy paths where the rule is applied. These should be Tier-0 or Tier-1 gateway paths for North-South traffic inspection.
- Action string
- Rule action for intrusion detection/prevention. One of
DETECTorDETECT_PREVENT. Default isDETECT. - Description string
- Description of the rule.
- Destination
Groups []string - Set of group paths that serve as the destination for this rule. An empty set can be used to specify
ANY. Default isANY. - Destinations
Excluded bool - A boolean value indicating negation of destination groups. Default is
false. - Direction string
- The traffic direction for the rule. Must be one of:
IN,OUTorIN_OUT. Default isIN_OUT. - Disabled bool
- A boolean value to indicate the rule is disabled. Default is
false. - Ip
Version string - The IP Protocol for the rule. Must be one of:
IPV4,IPV6orIPV4_IPV6. Default isIPV4_IPV6. - Log
Label string - Additional information which will be propagated to the rule syslog.
- Logged bool
- A boolean flag to enable packet logging. Default is
false. - Notes string
- Text for additional notes on changes for the rule.
- Nsx
Id string - The NSX ID of this resource. If set, this ID will be used to create the resource.
- Path string
- The NSX path of the rule.
- Revision float64
- Indicates current revision number of the rule.
- Rule
Id float64 - Unique positive number that is assigned by the system and is useful for debugging.
- Sequence
Number float64 - Sequence number to determine the order of rule processing within this policy.
- Services []string
- Set of service paths to match for this rule. An empty set can be used to specify
ANY. Default isANY. - Source
Groups []string - Set of group paths that serve as the source for this rule. An empty set can be used to specify
ANY. Default isANY. - Sources
Excluded bool - A boolean value indicating negation of source groups. Default is
false. -
[]Policy
Intrusion Service Gateway Policy Rule Tag - A list of scope + tag pairs to associate with this rule.
- display_
name string - Display name of the rule.
- ids_
profiles list(string) - Set of IDS profile paths for this rule. These profiles define the intrusion detection signatures to be applied.
- scopes list(string)
- Set of policy paths where the rule is applied. These should be Tier-0 or Tier-1 gateway paths for North-South traffic inspection.
- action string
- Rule action for intrusion detection/prevention. One of
DETECTorDETECT_PREVENT. Default isDETECT. - description string
- Description of the rule.
- destination_
groups list(string) - Set of group paths that serve as the destination for this rule. An empty set can be used to specify
ANY. Default isANY. - destinations_
excluded bool - A boolean value indicating negation of destination groups. Default is
false. - direction string
- The traffic direction for the rule. Must be one of:
IN,OUTorIN_OUT. Default isIN_OUT. - disabled bool
- A boolean value to indicate the rule is disabled. Default is
false. - ip_
version string - The IP Protocol for the rule. Must be one of:
IPV4,IPV6orIPV4_IPV6. Default isIPV4_IPV6. - log_
label string - Additional information which will be propagated to the rule syslog.
- logged bool
- A boolean flag to enable packet logging. Default is
false. - notes string
- Text for additional notes on changes for the rule.
- nsx_
id string - The NSX ID of this resource. If set, this ID will be used to create the resource.
- path string
- The NSX path of the rule.
- revision number
- Indicates current revision number of the rule.
- rule_
id number - Unique positive number that is assigned by the system and is useful for debugging.
- sequence_
number number - Sequence number to determine the order of rule processing within this policy.
- services list(string)
- Set of service paths to match for this rule. An empty set can be used to specify
ANY. Default isANY. - source_
groups list(string) - Set of group paths that serve as the source for this rule. An empty set can be used to specify
ANY. Default isANY. - sources_
excluded bool - A boolean value indicating negation of source groups. Default is
false. - list(object)
- A list of scope + tag pairs to associate with this rule.
- display
Name String - Display name of the rule.
- ids
Profiles List<String> - Set of IDS profile paths for this rule. These profiles define the intrusion detection signatures to be applied.
- scopes List<String>
- Set of policy paths where the rule is applied. These should be Tier-0 or Tier-1 gateway paths for North-South traffic inspection.
- action String
- Rule action for intrusion detection/prevention. One of
DETECTorDETECT_PREVENT. Default isDETECT. - description String
- Description of the rule.
- destination
Groups List<String> - Set of group paths that serve as the destination for this rule. An empty set can be used to specify
ANY. Default isANY. - destinations
Excluded Boolean - A boolean value indicating negation of destination groups. Default is
false. - direction String
- The traffic direction for the rule. Must be one of:
IN,OUTorIN_OUT. Default isIN_OUT. - disabled Boolean
- A boolean value to indicate the rule is disabled. Default is
false. - ip
Version String - The IP Protocol for the rule. Must be one of:
IPV4,IPV6orIPV4_IPV6. Default isIPV4_IPV6. - log
Label String - Additional information which will be propagated to the rule syslog.
- logged Boolean
- A boolean flag to enable packet logging. Default is
false. - notes String
- Text for additional notes on changes for the rule.
- nsx
Id String - The NSX ID of this resource. If set, this ID will be used to create the resource.
- path String
- The NSX path of the rule.
- revision Double
- Indicates current revision number of the rule.
- rule
Id Double - Unique positive number that is assigned by the system and is useful for debugging.
- sequence
Number Double - Sequence number to determine the order of rule processing within this policy.
- services List<String>
- Set of service paths to match for this rule. An empty set can be used to specify
ANY. Default isANY. - source
Groups List<String> - Set of group paths that serve as the source for this rule. An empty set can be used to specify
ANY. Default isANY. - sources
Excluded Boolean - A boolean value indicating negation of source groups. Default is
false. -
List<Policy
Intrusion Service Gateway Policy Rule Tag> - A list of scope + tag pairs to associate with this rule.
- display
Name string - Display name of the rule.
- ids
Profiles string[] - Set of IDS profile paths for this rule. These profiles define the intrusion detection signatures to be applied.
- scopes string[]
- Set of policy paths where the rule is applied. These should be Tier-0 or Tier-1 gateway paths for North-South traffic inspection.
- action string
- Rule action for intrusion detection/prevention. One of
DETECTorDETECT_PREVENT. Default isDETECT. - description string
- Description of the rule.
- destination
Groups string[] - Set of group paths that serve as the destination for this rule. An empty set can be used to specify
ANY. Default isANY. - destinations
Excluded boolean - A boolean value indicating negation of destination groups. Default is
false. - direction string
- The traffic direction for the rule. Must be one of:
IN,OUTorIN_OUT. Default isIN_OUT. - disabled boolean
- A boolean value to indicate the rule is disabled. Default is
false. - ip
Version string - The IP Protocol for the rule. Must be one of:
IPV4,IPV6orIPV4_IPV6. Default isIPV4_IPV6. - log
Label string - Additional information which will be propagated to the rule syslog.
- logged boolean
- A boolean flag to enable packet logging. Default is
false. - notes string
- Text for additional notes on changes for the rule.
- nsx
Id string - The NSX ID of this resource. If set, this ID will be used to create the resource.
- path string
- The NSX path of the rule.
- revision number
- Indicates current revision number of the rule.
- rule
Id number - Unique positive number that is assigned by the system and is useful for debugging.
- sequence
Number number - Sequence number to determine the order of rule processing within this policy.
- services string[]
- Set of service paths to match for this rule. An empty set can be used to specify
ANY. Default isANY. - source
Groups string[] - Set of group paths that serve as the source for this rule. An empty set can be used to specify
ANY. Default isANY. - sources
Excluded boolean - A boolean value indicating negation of source groups. Default is
false. -
Policy
Intrusion Service Gateway Policy Rule Tag[] - A list of scope + tag pairs to associate with this rule.
- display_
name str - Display name of the rule.
- ids_
profiles Sequence[str] - Set of IDS profile paths for this rule. These profiles define the intrusion detection signatures to be applied.
- scopes Sequence[str]
- Set of policy paths where the rule is applied. These should be Tier-0 or Tier-1 gateway paths for North-South traffic inspection.
- action str
- Rule action for intrusion detection/prevention. One of
DETECTorDETECT_PREVENT. Default isDETECT. - description str
- Description of the rule.
- destination_
groups Sequence[str] - Set of group paths that serve as the destination for this rule. An empty set can be used to specify
ANY. Default isANY. - destinations_
excluded bool - A boolean value indicating negation of destination groups. Default is
false. - direction str
- The traffic direction for the rule. Must be one of:
IN,OUTorIN_OUT. Default isIN_OUT. - disabled bool
- A boolean value to indicate the rule is disabled. Default is
false. - ip_
version str - The IP Protocol for the rule. Must be one of:
IPV4,IPV6orIPV4_IPV6. Default isIPV4_IPV6. - log_
label str - Additional information which will be propagated to the rule syslog.
- logged bool
- A boolean flag to enable packet logging. Default is
false. - notes str
- Text for additional notes on changes for the rule.
- nsx_
id str - The NSX ID of this resource. If set, this ID will be used to create the resource.
- path str
- The NSX path of the rule.
- revision float
- Indicates current revision number of the rule.
- rule_
id float - Unique positive number that is assigned by the system and is useful for debugging.
- sequence_
number float - Sequence number to determine the order of rule processing within this policy.
- services Sequence[str]
- Set of service paths to match for this rule. An empty set can be used to specify
ANY. Default isANY. - source_
groups Sequence[str] - Set of group paths that serve as the source for this rule. An empty set can be used to specify
ANY. Default isANY. - sources_
excluded bool - A boolean value indicating negation of source groups. Default is
false. -
Sequence[Policy
Intrusion Service Gateway Policy Rule Tag] - A list of scope + tag pairs to associate with this rule.
- display
Name String - Display name of the rule.
- ids
Profiles List<String> - Set of IDS profile paths for this rule. These profiles define the intrusion detection signatures to be applied.
- scopes List<String>
- Set of policy paths where the rule is applied. These should be Tier-0 or Tier-1 gateway paths for North-South traffic inspection.
- action String
- Rule action for intrusion detection/prevention. One of
DETECTorDETECT_PREVENT. Default isDETECT. - description String
- Description of the rule.
- destination
Groups List<String> - Set of group paths that serve as the destination for this rule. An empty set can be used to specify
ANY. Default isANY. - destinations
Excluded Boolean - A boolean value indicating negation of destination groups. Default is
false. - direction String
- The traffic direction for the rule. Must be one of:
IN,OUTorIN_OUT. Default isIN_OUT. - disabled Boolean
- A boolean value to indicate the rule is disabled. Default is
false. - ip
Version String - The IP Protocol for the rule. Must be one of:
IPV4,IPV6orIPV4_IPV6. Default isIPV4_IPV6. - log
Label String - Additional information which will be propagated to the rule syslog.
- logged Boolean
- A boolean flag to enable packet logging. Default is
false. - notes String
- Text for additional notes on changes for the rule.
- nsx
Id String - The NSX ID of this resource. If set, this ID will be used to create the resource.
- path String
- The NSX path of the rule.
- revision Number
- Indicates current revision number of the rule.
- rule
Id Number - Unique positive number that is assigned by the system and is useful for debugging.
- sequence
Number Number - Sequence number to determine the order of rule processing within this policy.
- services List<String>
- Set of service paths to match for this rule. An empty set can be used to specify
ANY. Default isANY. - source
Groups List<String> - Set of group paths that serve as the source for this rule. An empty set can be used to specify
ANY. Default isANY. - sources
Excluded Boolean - A boolean value indicating negation of source groups. Default is
false. - List<Property Map>
- A list of scope + tag pairs to associate with this rule.
PolicyIntrusionServiceGatewayPolicyRuleTag, PolicyIntrusionServiceGatewayPolicyRuleTagArgs
PolicyIntrusionServiceGatewayPolicyTag, PolicyIntrusionServiceGatewayPolicyTagArgs
Package Details
- Repository
- nsxt vmware/terraform-provider-nsxt
- License
- Notes
- This Pulumi package is based on the
nsxtTerraform Provider.
published on Monday, May 18, 2026 by vmware