Sign in Dashboard Get started
  1. Packages
  2. Packages
  3. Panos Provider
  4. API Docs
  5. DecryptionProfile
Viewing docs for panos 2.0.12
published on Wednesday, Jun 17, 2026 by paloaltonetworks
Schema (JSON)
paloaltonetworks/terraform-provider-panos

panos.DecryptionProfile

Viewing docs for panos 2.0.12
published on Wednesday, Jun 17, 2026 by paloaltonetworks
Schema (JSON)
paloaltonetworks/terraform-provider-panos

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as panos from "@pulumi/panos";

const example = new panos.DecryptionProfile("example", {
    location: {
        shared: {},
    },
    name: "my-decryption-profile",
    sslForwardProxy: {
        blockExpiredCertificate: true,
        blockUntrustedIssuer: true,
        blockUnknownCert: true,
        blockUnsupportedVersion: true,
        blockUnsupportedCipher: true,
        restrictCertExts: true,
    },
    sslProtocolSettings: {
        minVersion: "tls1-2",
        maxVersion: "max",
        keyxchgAlgoRsa: true,
        keyxchgAlgoEcdhe: true,
        encAlgoAes128Gcm: true,
        encAlgoAes256Gcm: true,
        authAlgoSha256: true,
        authAlgoSha384: true,
    },
});

    import pulumi
import pulumi_panos as panos

example = panos.DecryptionProfile("example",
    location={
        "shared": {},
    },
    name="my-decryption-profile",
    ssl_forward_proxy={
        "block_expired_certificate": True,
        "block_untrusted_issuer": True,
        "block_unknown_cert": True,
        "block_unsupported_version": True,
        "block_unsupported_cipher": True,
        "restrict_cert_exts": True,
    },
    ssl_protocol_settings={
        "min_version": "tls1-2",
        "max_version": "max",
        "keyxchg_algo_rsa": True,
        "keyxchg_algo_ecdhe": True,
        "enc_algo_aes128_gcm": True,
        "enc_algo_aes256_gcm": True,
        "auth_algo_sha256": True,
        "auth_algo_sha384": True,
    })

    package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/panos/v2/panos"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := panos.NewDecryptionProfile(ctx, "example", &panos.DecryptionProfileArgs{
			Location: &panos.DecryptionProfileLocationArgs{
				Shared: &panos.DecryptionProfileLocationSharedArgs{},
			},
			Name: pulumi.String("my-decryption-profile"),
			SslForwardProxy: &panos.DecryptionProfileSslForwardProxyArgs{
				BlockExpiredCertificate: pulumi.Bool(true),
				BlockUntrustedIssuer:    pulumi.Bool(true),
				BlockUnknownCert:        pulumi.Bool(true),
				BlockUnsupportedVersion: pulumi.Bool(true),
				BlockUnsupportedCipher:  pulumi.Bool(true),
				RestrictCertExts:        pulumi.Bool(true),
			},
			SslProtocolSettings: &panos.DecryptionProfileSslProtocolSettingsArgs{
				MinVersion:       pulumi.String("tls1-2"),
				MaxVersion:       pulumi.String("max"),
				KeyxchgAlgoRsa:   pulumi.Bool(true),
				KeyxchgAlgoEcdhe: pulumi.Bool(true),
				EncAlgoAes128Gcm: pulumi.Bool(true),
				EncAlgoAes256Gcm: pulumi.Bool(true),
				AuthAlgoSha256:   pulumi.Bool(true),
				AuthAlgoSha384:   pulumi.Bool(true),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Panos = Pulumi.Panos;

return await Deployment.RunAsync(() => 
{
    var example = new Panos.DecryptionProfile("example", new()
    {
        Location = new Panos.Inputs.DecryptionProfileLocationArgs
        {
            Shared = null,
        },
        Name = "my-decryption-profile",
        SslForwardProxy = new Panos.Inputs.DecryptionProfileSslForwardProxyArgs
        {
            BlockExpiredCertificate = true,
            BlockUntrustedIssuer = true,
            BlockUnknownCert = true,
            BlockUnsupportedVersion = true,
            BlockUnsupportedCipher = true,
            RestrictCertExts = true,
        },
        SslProtocolSettings = new Panos.Inputs.DecryptionProfileSslProtocolSettingsArgs
        {
            MinVersion = "tls1-2",
            MaxVersion = "max",
            KeyxchgAlgoRsa = true,
            KeyxchgAlgoEcdhe = true,
            EncAlgoAes128Gcm = true,
            EncAlgoAes256Gcm = true,
            AuthAlgoSha256 = true,
            AuthAlgoSha384 = true,
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.panos.DecryptionProfile;
import com.pulumi.panos.DecryptionProfileArgs;
import com.pulumi.panos.inputs.DecryptionProfileLocationArgs;
import com.pulumi.panos.inputs.DecryptionProfileLocationSharedArgs;
import com.pulumi.panos.inputs.DecryptionProfileSslForwardProxyArgs;
import com.pulumi.panos.inputs.DecryptionProfileSslProtocolSettingsArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new DecryptionProfile("example", DecryptionProfileArgs.builder()
            .location(DecryptionProfileLocationArgs.builder()
                .shared(DecryptionProfileLocationSharedArgs.builder()
                    .build())
                .build())
            .name("my-decryption-profile")
            .sslForwardProxy(DecryptionProfileSslForwardProxyArgs.builder()
                .blockExpiredCertificate(true)
                .blockUntrustedIssuer(true)
                .blockUnknownCert(true)
                .blockUnsupportedVersion(true)
                .blockUnsupportedCipher(true)
                .restrictCertExts(true)
                .build())
            .sslProtocolSettings(DecryptionProfileSslProtocolSettingsArgs.builder()
                .minVersion("tls1-2")
                .maxVersion("max")
                .keyxchgAlgoRsa(true)
                .keyxchgAlgoEcdhe(true)
                .encAlgoAes128Gcm(true)
                .encAlgoAes256Gcm(true)
                .authAlgoSha256(true)
                .authAlgoSha384(true)
                .build())
            .build());

    }
}

    resources:
  example:
    type: panos:DecryptionProfile
    properties:
      location:
        shared: {}
      name: my-decryption-profile
      sslForwardProxy:
        blockExpiredCertificate: true
        blockUntrustedIssuer: true
        blockUnknownCert: true
        blockUnsupportedVersion: true
        blockUnsupportedCipher: true
        restrictCertExts: true
      sslProtocolSettings:
        minVersion: tls1-2
        maxVersion: max
        keyxchgAlgoRsa: true
        keyxchgAlgoEcdhe: true
        encAlgoAes128Gcm: true
        encAlgoAes256Gcm: true
        authAlgoSha256: true
        authAlgoSha384: true

    Example coming soon!

    Create DecryptionProfile Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new DecryptionProfile(name: string, args: DecryptionProfileArgs, opts?: CustomResourceOptions);
    @overload
def DecryptionProfile(resource_name: str,
                      args: DecryptionProfileArgs,
                      opts: Optional[ResourceOptions] = None)

@overload
def DecryptionProfile(resource_name: str,
                      opts: Optional[ResourceOptions] = None,
                      location: Optional[DecryptionProfileLocationArgs] = None,
                      disable_override: Optional[str] = None,
                      forwarded_only: Optional[bool] = None,
                      interface: Optional[str] = None,
                      name: Optional[str] = None,
                      ssh_proxy: Optional[DecryptionProfileSshProxyArgs] = None,
                      ssl_forward_proxy: Optional[DecryptionProfileSslForwardProxyArgs] = None,
                      ssl_inbound_proxy: Optional[DecryptionProfileSslInboundProxyArgs] = None,
                      ssl_no_proxy: Optional[DecryptionProfileSslNoProxyArgs] = None,
                      ssl_protocol_settings: Optional[DecryptionProfileSslProtocolSettingsArgs] = None)
    func NewDecryptionProfile(ctx *Context, name string, args DecryptionProfileArgs, opts ...ResourceOption) (*DecryptionProfile, error)
    public DecryptionProfile(string name, DecryptionProfileArgs args, CustomResourceOptions? opts = null)
    public DecryptionProfile(String name, DecryptionProfileArgs args)
public DecryptionProfile(String name, DecryptionProfileArgs args, CustomResourceOptions options)

    type: panos:DecryptionProfile
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "panos_decryptionprofile" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args DecryptionProfileArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args DecryptionProfileArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args DecryptionProfileArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args DecryptionProfileArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args DecryptionProfileArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var decryptionProfileResource = new Panos.DecryptionProfile("decryptionProfileResource", new()
{
    Location = new Panos.Inputs.DecryptionProfileLocationArgs
    {
        DeviceGroup = new Panos.Inputs.DecryptionProfileLocationDeviceGroupArgs
        {
            Name = "string",
            PanoramaDevice = "string",
        },
        Shared = null,
        Vsys = new Panos.Inputs.DecryptionProfileLocationVsysArgs
        {
            Name = "string",
            NgfwDevice = "string",
        },
    },
    DisableOverride = "string",
    ForwardedOnly = false,
    Interface = "string",
    Name = "string",
    SshProxy = new Panos.Inputs.DecryptionProfileSshProxyArgs
    {
        BlockIfNoResource = false,
        BlockSshErrors = false,
        BlockUnsupportedAlg = false,
        BlockUnsupportedVersion = false,
    },
    SslForwardProxy = new Panos.Inputs.DecryptionProfileSslForwardProxyArgs
    {
        AutoIncludeAltname = false,
        BlockClientCert = false,
        BlockExpiredCertificate = false,
        BlockIfHsmUnavailable = false,
        BlockIfNoResource = false,
        BlockIfSniMismatch = false,
        BlockTimeoutCert = false,
        BlockTls13DowngradeNoResource = false,
        BlockUnknownCert = false,
        BlockUnsupportedCipher = false,
        BlockUnsupportedVersion = false,
        BlockUntrustedIssuer = false,
        RestrictCertExts = false,
        StripAlpn = false,
    },
    SslInboundProxy = new Panos.Inputs.DecryptionProfileSslInboundProxyArgs
    {
        BlockIfHsmUnavailable = false,
        BlockIfNoResource = false,
        BlockTls13DowngradeNoResource = false,
        BlockUnsupportedCipher = false,
        BlockUnsupportedVersion = false,
    },
    SslNoProxy = new Panos.Inputs.DecryptionProfileSslNoProxyArgs
    {
        BlockExpiredCertificate = false,
        BlockUntrustedIssuer = false,
    },
    SslProtocolSettings = new Panos.Inputs.DecryptionProfileSslProtocolSettingsArgs
    {
        AuthAlgoMd5 = false,
        AuthAlgoSha1 = false,
        AuthAlgoSha256 = false,
        AuthAlgoSha384 = false,
        EncAlgo3des = false,
        EncAlgoAes128Cbc = false,
        EncAlgoAes128Gcm = false,
        EncAlgoAes256Cbc = false,
        EncAlgoAes256Gcm = false,
        EncAlgoChacha20Poly1305 = false,
        EncAlgoRc4 = false,
        KeyxchgAlgoDhe = false,
        KeyxchgAlgoEcdhe = false,
        KeyxchgAlgoRsa = false,
        MaxVersion = "string",
        MinVersion = "string",
    },
});

    example, err := panos.NewDecryptionProfile(ctx, "decryptionProfileResource", &panos.DecryptionProfileArgs{
	Location: &panos.DecryptionProfileLocationArgs{
		DeviceGroup: &panos.DecryptionProfileLocationDeviceGroupArgs{
			Name:           pulumi.String("string"),
			PanoramaDevice: pulumi.String("string"),
		},
		Shared: &panos.DecryptionProfileLocationSharedArgs{},
		Vsys: &panos.DecryptionProfileLocationVsysArgs{
			Name:       pulumi.String("string"),
			NgfwDevice: pulumi.String("string"),
		},
	},
	DisableOverride: pulumi.String("string"),
	ForwardedOnly:   pulumi.Bool(false),
	Interface:       pulumi.String("string"),
	Name:            pulumi.String("string"),
	SshProxy: &panos.DecryptionProfileSshProxyArgs{
		BlockIfNoResource:       pulumi.Bool(false),
		BlockSshErrors:          pulumi.Bool(false),
		BlockUnsupportedAlg:     pulumi.Bool(false),
		BlockUnsupportedVersion: pulumi.Bool(false),
	},
	SslForwardProxy: &panos.DecryptionProfileSslForwardProxyArgs{
		AutoIncludeAltname:            pulumi.Bool(false),
		BlockClientCert:               pulumi.Bool(false),
		BlockExpiredCertificate:       pulumi.Bool(false),
		BlockIfHsmUnavailable:         pulumi.Bool(false),
		BlockIfNoResource:             pulumi.Bool(false),
		BlockIfSniMismatch:            pulumi.Bool(false),
		BlockTimeoutCert:              pulumi.Bool(false),
		BlockTls13DowngradeNoResource: pulumi.Bool(false),
		BlockUnknownCert:              pulumi.Bool(false),
		BlockUnsupportedCipher:        pulumi.Bool(false),
		BlockUnsupportedVersion:       pulumi.Bool(false),
		BlockUntrustedIssuer:          pulumi.Bool(false),
		RestrictCertExts:              pulumi.Bool(false),
		StripAlpn:                     pulumi.Bool(false),
	},
	SslInboundProxy: &panos.DecryptionProfileSslInboundProxyArgs{
		BlockIfHsmUnavailable:         pulumi.Bool(false),
		BlockIfNoResource:             pulumi.Bool(false),
		BlockTls13DowngradeNoResource: pulumi.Bool(false),
		BlockUnsupportedCipher:        pulumi.Bool(false),
		BlockUnsupportedVersion:       pulumi.Bool(false),
	},
	SslNoProxy: &panos.DecryptionProfileSslNoProxyArgs{
		BlockExpiredCertificate: pulumi.Bool(false),
		BlockUntrustedIssuer:    pulumi.Bool(false),
	},
	SslProtocolSettings: &panos.DecryptionProfileSslProtocolSettingsArgs{
		AuthAlgoMd5:             pulumi.Bool(false),
		AuthAlgoSha1:            pulumi.Bool(false),
		AuthAlgoSha256:          pulumi.Bool(false),
		AuthAlgoSha384:          pulumi.Bool(false),
		EncAlgo3des:             pulumi.Bool(false),
		EncAlgoAes128Cbc:        pulumi.Bool(false),
		EncAlgoAes128Gcm:        pulumi.Bool(false),
		EncAlgoAes256Cbc:        pulumi.Bool(false),
		EncAlgoAes256Gcm:        pulumi.Bool(false),
		EncAlgoChacha20Poly1305: pulumi.Bool(false),
		EncAlgoRc4:              pulumi.Bool(false),
		KeyxchgAlgoDhe:          pulumi.Bool(false),
		KeyxchgAlgoEcdhe:        pulumi.Bool(false),
		KeyxchgAlgoRsa:          pulumi.Bool(false),
		MaxVersion:              pulumi.String("string"),
		MinVersion:              pulumi.String("string"),
	},
})

    resource "panos_decryptionprofile" "decryptionProfileResource" {
  location = {
    device_group = {
      name            = "string"
      panorama_device = "string"
    }
    shared = {}
    vsys = {
      name        = "string"
      ngfw_device = "string"
    }
  }
  disable_override = "string"
  forwarded_only   = false
  interface        = "string"
  name             = "string"
  ssh_proxy = {
    block_if_no_resource      = false
    block_ssh_errors          = false
    block_unsupported_alg     = false
    block_unsupported_version = false
  }
  ssl_forward_proxy = {
    auto_include_altname              = false
    block_client_cert                 = false
    block_expired_certificate         = false
    block_if_hsm_unavailable          = false
    block_if_no_resource              = false
    block_if_sni_mismatch             = false
    block_timeout_cert                = false
    block_tls13_downgrade_no_resource = false
    block_unknown_cert                = false
    block_unsupported_cipher          = false
    block_unsupported_version         = false
    block_untrusted_issuer            = false
    restrict_cert_exts                = false
    strip_alpn                        = false
  }
  ssl_inbound_proxy = {
    block_if_hsm_unavailable          = false
    block_if_no_resource              = false
    block_tls13_downgrade_no_resource = false
    block_unsupported_cipher          = false
    block_unsupported_version         = false
  }
  ssl_no_proxy = {
    block_expired_certificate = false
    block_untrusted_issuer    = false
  }
  ssl_protocol_settings = {
    auth_algo_md5              = false
    auth_algo_sha1             = false
    auth_algo_sha256           = false
    auth_algo_sha384           = false
    enc_algo3des               = false
    enc_algo_aes128_cbc        = false
    enc_algo_aes128_gcm        = false
    enc_algo_aes256_cbc        = false
    enc_algo_aes256_gcm        = false
    enc_algo_chacha20_poly1305 = false
    enc_algo_rc4               = false
    keyxchg_algo_dhe           = false
    keyxchg_algo_ecdhe         = false
    keyxchg_algo_rsa           = false
    max_version                = "string"
    min_version                = "string"
  }
}

    var decryptionProfileResource = new DecryptionProfile("decryptionProfileResource", DecryptionProfileArgs.builder()
    .location(DecryptionProfileLocationArgs.builder()
        .deviceGroup(DecryptionProfileLocationDeviceGroupArgs.builder()
            .name("string")
            .panoramaDevice("string")
            .build())
        .shared(DecryptionProfileLocationSharedArgs.builder()
            .build())
        .vsys(DecryptionProfileLocationVsysArgs.builder()
            .name("string")
            .ngfwDevice("string")
            .build())
        .build())
    .disableOverride("string")
    .forwardedOnly(false)
    .interface_("string")
    .name("string")
    .sshProxy(DecryptionProfileSshProxyArgs.builder()
        .blockIfNoResource(false)
        .blockSshErrors(false)
        .blockUnsupportedAlg(false)
        .blockUnsupportedVersion(false)
        .build())
    .sslForwardProxy(DecryptionProfileSslForwardProxyArgs.builder()
        .autoIncludeAltname(false)
        .blockClientCert(false)
        .blockExpiredCertificate(false)
        .blockIfHsmUnavailable(false)
        .blockIfNoResource(false)
        .blockIfSniMismatch(false)
        .blockTimeoutCert(false)
        .blockTls13DowngradeNoResource(false)
        .blockUnknownCert(false)
        .blockUnsupportedCipher(false)
        .blockUnsupportedVersion(false)
        .blockUntrustedIssuer(false)
        .restrictCertExts(false)
        .stripAlpn(false)
        .build())
    .sslInboundProxy(DecryptionProfileSslInboundProxyArgs.builder()
        .blockIfHsmUnavailable(false)
        .blockIfNoResource(false)
        .blockTls13DowngradeNoResource(false)
        .blockUnsupportedCipher(false)
        .blockUnsupportedVersion(false)
        .build())
    .sslNoProxy(DecryptionProfileSslNoProxyArgs.builder()
        .blockExpiredCertificate(false)
        .blockUntrustedIssuer(false)
        .build())
    .sslProtocolSettings(DecryptionProfileSslProtocolSettingsArgs.builder()
        .authAlgoMd5(false)
        .authAlgoSha1(false)
        .authAlgoSha256(false)
        .authAlgoSha384(false)
        .encAlgo3des(false)
        .encAlgoAes128Cbc(false)
        .encAlgoAes128Gcm(false)
        .encAlgoAes256Cbc(false)
        .encAlgoAes256Gcm(false)
        .encAlgoChacha20Poly1305(false)
        .encAlgoRc4(false)
        .keyxchgAlgoDhe(false)
        .keyxchgAlgoEcdhe(false)
        .keyxchgAlgoRsa(false)
        .maxVersion("string")
        .minVersion("string")
        .build())
    .build());

    decryption_profile_resource = panos.DecryptionProfile("decryptionProfileResource",
    location={
        "device_group": {
            "name": "string",
            "panorama_device": "string",
        },
        "shared": {},
        "vsys": {
            "name": "string",
            "ngfw_device": "string",
        },
    },
    disable_override="string",
    forwarded_only=False,
    interface="string",
    name="string",
    ssh_proxy={
        "block_if_no_resource": False,
        "block_ssh_errors": False,
        "block_unsupported_alg": False,
        "block_unsupported_version": False,
    },
    ssl_forward_proxy={
        "auto_include_altname": False,
        "block_client_cert": False,
        "block_expired_certificate": False,
        "block_if_hsm_unavailable": False,
        "block_if_no_resource": False,
        "block_if_sni_mismatch": False,
        "block_timeout_cert": False,
        "block_tls13_downgrade_no_resource": False,
        "block_unknown_cert": False,
        "block_unsupported_cipher": False,
        "block_unsupported_version": False,
        "block_untrusted_issuer": False,
        "restrict_cert_exts": False,
        "strip_alpn": False,
    },
    ssl_inbound_proxy={
        "block_if_hsm_unavailable": False,
        "block_if_no_resource": False,
        "block_tls13_downgrade_no_resource": False,
        "block_unsupported_cipher": False,
        "block_unsupported_version": False,
    },
    ssl_no_proxy={
        "block_expired_certificate": False,
        "block_untrusted_issuer": False,
    },
    ssl_protocol_settings={
        "auth_algo_md5": False,
        "auth_algo_sha1": False,
        "auth_algo_sha256": False,
        "auth_algo_sha384": False,
        "enc_algo3des": False,
        "enc_algo_aes128_cbc": False,
        "enc_algo_aes128_gcm": False,
        "enc_algo_aes256_cbc": False,
        "enc_algo_aes256_gcm": False,
        "enc_algo_chacha20_poly1305": False,
        "enc_algo_rc4": False,
        "keyxchg_algo_dhe": False,
        "keyxchg_algo_ecdhe": False,
        "keyxchg_algo_rsa": False,
        "max_version": "string",
        "min_version": "string",
    })

    const decryptionProfileResource = new panos.DecryptionProfile("decryptionProfileResource", {
    location: {
        deviceGroup: {
            name: "string",
            panoramaDevice: "string",
        },
        shared: {},
        vsys: {
            name: "string",
            ngfwDevice: "string",
        },
    },
    disableOverride: "string",
    forwardedOnly: false,
    "interface": "string",
    name: "string",
    sshProxy: {
        blockIfNoResource: false,
        blockSshErrors: false,
        blockUnsupportedAlg: false,
        blockUnsupportedVersion: false,
    },
    sslForwardProxy: {
        autoIncludeAltname: false,
        blockClientCert: false,
        blockExpiredCertificate: false,
        blockIfHsmUnavailable: false,
        blockIfNoResource: false,
        blockIfSniMismatch: false,
        blockTimeoutCert: false,
        blockTls13DowngradeNoResource: false,
        blockUnknownCert: false,
        blockUnsupportedCipher: false,
        blockUnsupportedVersion: false,
        blockUntrustedIssuer: false,
        restrictCertExts: false,
        stripAlpn: false,
    },
    sslInboundProxy: {
        blockIfHsmUnavailable: false,
        blockIfNoResource: false,
        blockTls13DowngradeNoResource: false,
        blockUnsupportedCipher: false,
        blockUnsupportedVersion: false,
    },
    sslNoProxy: {
        blockExpiredCertificate: false,
        blockUntrustedIssuer: false,
    },
    sslProtocolSettings: {
        authAlgoMd5: false,
        authAlgoSha1: false,
        authAlgoSha256: false,
        authAlgoSha384: false,
        encAlgo3des: false,
        encAlgoAes128Cbc: false,
        encAlgoAes128Gcm: false,
        encAlgoAes256Cbc: false,
        encAlgoAes256Gcm: false,
        encAlgoChacha20Poly1305: false,
        encAlgoRc4: false,
        keyxchgAlgoDhe: false,
        keyxchgAlgoEcdhe: false,
        keyxchgAlgoRsa: false,
        maxVersion: "string",
        minVersion: "string",
    },
});

    type: panos:DecryptionProfile
properties:
    disableOverride: string
    forwardedOnly: false
    interface: string
    location:
        deviceGroup:
            name: string
            panoramaDevice: string
        shared: {}
        vsys:
            name: string
            ngfwDevice: string
    name: string
    sshProxy:
        blockIfNoResource: false
        blockSshErrors: false
        blockUnsupportedAlg: false
        blockUnsupportedVersion: false
    sslForwardProxy:
        autoIncludeAltname: false
        blockClientCert: false
        blockExpiredCertificate: false
        blockIfHsmUnavailable: false
        blockIfNoResource: false
        blockIfSniMismatch: false
        blockTimeoutCert: false
        blockTls13DowngradeNoResource: false
        blockUnknownCert: false
        blockUnsupportedCipher: false
        blockUnsupportedVersion: false
        blockUntrustedIssuer: false
        restrictCertExts: false
        stripAlpn: false
    sslInboundProxy:
        blockIfHsmUnavailable: false
        blockIfNoResource: false
        blockTls13DowngradeNoResource: false
        blockUnsupportedCipher: false
        blockUnsupportedVersion: false
    sslNoProxy:
        blockExpiredCertificate: false
        blockUntrustedIssuer: false
    sslProtocolSettings:
        authAlgoMd5: false
        authAlgoSha1: false
        authAlgoSha256: false
        authAlgoSha384: false
        encAlgo3des: false
        encAlgoAes128Cbc: false
        encAlgoAes128Gcm: false
        encAlgoAes256Cbc: false
        encAlgoAes256Gcm: false
        encAlgoChacha20Poly1305: false
        encAlgoRc4: false
        keyxchgAlgoDhe: false
        keyxchgAlgoEcdhe: false
        keyxchgAlgoRsa: false
        maxVersion: string
        minVersion: string

    DecryptionProfile Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The DecryptionProfile resource accepts the following input properties:

    location object
    The location of this object.
    disable_override string
    disable object override in child device groups
    forwarded_only bool
    mirror after security policy allow
    interface string
    decrypt mirror port
    name string
    ssh_proxy object
    ssl_forward_proxy object
    ssl_inbound_proxy object
    ssl_no_proxy object
    ssl_protocol_settings object
    location Property Map
    The location of this object.
    disableOverride String
    disable object override in child device groups
    forwardedOnly Boolean
    mirror after security policy allow
    interface String
    decrypt mirror port
    name String
    sshProxy Property Map
    sslForwardProxy Property Map
    sslInboundProxy Property Map
    sslNoProxy Property Map
    sslProtocolSettings Property Map

    Outputs

    All input properties are implicitly available as output properties. Additionally, the DecryptionProfile resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing DecryptionProfile Resource

    Get an existing DecryptionProfile resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: DecryptionProfileState, opts?: CustomResourceOptions): DecryptionProfile
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        disable_override: Optional[str] = None,
        forwarded_only: Optional[bool] = None,
        interface: Optional[str] = None,
        location: Optional[DecryptionProfileLocationArgs] = None,
        name: Optional[str] = None,
        ssh_proxy: Optional[DecryptionProfileSshProxyArgs] = None,
        ssl_forward_proxy: Optional[DecryptionProfileSslForwardProxyArgs] = None,
        ssl_inbound_proxy: Optional[DecryptionProfileSslInboundProxyArgs] = None,
        ssl_no_proxy: Optional[DecryptionProfileSslNoProxyArgs] = None,
        ssl_protocol_settings: Optional[DecryptionProfileSslProtocolSettingsArgs] = None) -> DecryptionProfile
    func GetDecryptionProfile(ctx *Context, name string, id IDInput, state *DecryptionProfileState, opts ...ResourceOption) (*DecryptionProfile, error)
    public static DecryptionProfile Get(string name, Input<string> id, DecryptionProfileState? state, CustomResourceOptions? opts = null)
    public static DecryptionProfile get(String name, Output<String> id, DecryptionProfileState state, CustomResourceOptions options)
    resources:  _:    type: panos:DecryptionProfile    get:      id: ${id}
    import {
  to = panos_decryptionprofile.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    disable_override string
    disable object override in child device groups
    forwarded_only bool
    mirror after security policy allow
    interface string
    decrypt mirror port
    location object
    The location of this object.
    name string
    ssh_proxy object
    ssl_forward_proxy object
    ssl_inbound_proxy object
    ssl_no_proxy object
    ssl_protocol_settings object
    disableOverride String
    disable object override in child device groups
    forwardedOnly Boolean
    mirror after security policy allow
    interface String
    decrypt mirror port
    location Property Map
    The location of this object.
    name String
    sshProxy Property Map
    sslForwardProxy Property Map
    sslInboundProxy Property Map
    sslNoProxy Property Map
    sslProtocolSettings Property Map

    Supporting Types

    DecryptionProfileLocation, DecryptionProfileLocationArgs

    DeviceGroup DecryptionProfileLocationDeviceGroup
    Located in a specific Device Group
    Shared DecryptionProfileLocationShared
    Panorama shared object
    Vsys DecryptionProfileLocationVsys
    Located in a specific Virtual System
    DeviceGroup DecryptionProfileLocationDeviceGroup
    Located in a specific Device Group
    Shared DecryptionProfileLocationShared
    Panorama shared object
    Vsys DecryptionProfileLocationVsys
    Located in a specific Virtual System
    device_group object
    Located in a specific Device Group
    shared object
    Panorama shared object
    vsys object
    Located in a specific Virtual System
    deviceGroup DecryptionProfileLocationDeviceGroup
    Located in a specific Device Group
    shared DecryptionProfileLocationShared
    Panorama shared object
    vsys DecryptionProfileLocationVsys
    Located in a specific Virtual System
    deviceGroup DecryptionProfileLocationDeviceGroup
    Located in a specific Device Group
    shared DecryptionProfileLocationShared
    Panorama shared object
    vsys DecryptionProfileLocationVsys
    Located in a specific Virtual System
    device_group DecryptionProfileLocationDeviceGroup
    Located in a specific Device Group
    shared DecryptionProfileLocationShared
    Panorama shared object
    vsys DecryptionProfileLocationVsys
    Located in a specific Virtual System
    deviceGroup Property Map
    Located in a specific Device Group
    shared Property Map
    Panorama shared object
    vsys Property Map
    Located in a specific Virtual System

    DecryptionProfileLocationDeviceGroup, DecryptionProfileLocationDeviceGroupArgs

    Name string
    Device Group name
    PanoramaDevice string
    Panorama device name
    Name string
    Device Group name
    PanoramaDevice string
    Panorama device name
    name string
    Device Group name
    panorama_device string
    Panorama device name
    name String
    Device Group name
    panoramaDevice String
    Panorama device name
    name string
    Device Group name
    panoramaDevice string
    Panorama device name
    name str
    Device Group name
    panorama_device str
    Panorama device name
    name String
    Device Group name
    panoramaDevice String
    Panorama device name

    DecryptionProfileLocationVsys, DecryptionProfileLocationVsysArgs

    Name string
    The Virtual System name
    NgfwDevice string
    The NGFW device name
    Name string
    The Virtual System name
    NgfwDevice string
    The NGFW device name
    name string
    The Virtual System name
    ngfw_device string
    The NGFW device name
    name String
    The Virtual System name
    ngfwDevice String
    The NGFW device name
    name string
    The Virtual System name
    ngfwDevice string
    The NGFW device name
    name str
    The Virtual System name
    ngfw_device str
    The NGFW device name
    name String
    The Virtual System name
    ngfwDevice String
    The NGFW device name

    DecryptionProfileSshProxy, DecryptionProfileSshProxyArgs

    BlockIfNoResource bool
    whether to block sessions if device has no enough resources
    BlockSshErrors bool
    whether to block sessions if ssh errors are encountered
    BlockUnsupportedAlg bool
    whether to block sessions if ssh algorithm is not supported
    BlockUnsupportedVersion bool
    whether to block sessions if ssh version is not supported
    BlockIfNoResource bool
    whether to block sessions if device has no enough resources
    BlockSshErrors bool
    whether to block sessions if ssh errors are encountered
    BlockUnsupportedAlg bool
    whether to block sessions if ssh algorithm is not supported
    BlockUnsupportedVersion bool
    whether to block sessions if ssh version is not supported
    block_if_no_resource bool
    whether to block sessions if device has no enough resources
    block_ssh_errors bool
    whether to block sessions if ssh errors are encountered
    block_unsupported_alg bool
    whether to block sessions if ssh algorithm is not supported
    block_unsupported_version bool
    whether to block sessions if ssh version is not supported
    blockIfNoResource Boolean
    whether to block sessions if device has no enough resources
    blockSshErrors Boolean
    whether to block sessions if ssh errors are encountered
    blockUnsupportedAlg Boolean
    whether to block sessions if ssh algorithm is not supported
    blockUnsupportedVersion Boolean
    whether to block sessions if ssh version is not supported
    blockIfNoResource boolean
    whether to block sessions if device has no enough resources
    blockSshErrors boolean
    whether to block sessions if ssh errors are encountered
    blockUnsupportedAlg boolean
    whether to block sessions if ssh algorithm is not supported
    blockUnsupportedVersion boolean
    whether to block sessions if ssh version is not supported
    block_if_no_resource bool
    whether to block sessions if device has no enough resources
    block_ssh_errors bool
    whether to block sessions if ssh errors are encountered
    block_unsupported_alg bool
    whether to block sessions if ssh algorithm is not supported
    block_unsupported_version bool
    whether to block sessions if ssh version is not supported
    blockIfNoResource Boolean
    whether to block sessions if device has no enough resources
    blockSshErrors Boolean
    whether to block sessions if ssh errors are encountered
    blockUnsupportedAlg Boolean
    whether to block sessions if ssh algorithm is not supported
    blockUnsupportedVersion Boolean
    whether to block sessions if ssh version is not supported

    DecryptionProfileSslForwardProxy, DecryptionProfileSslForwardProxyArgs

    AutoIncludeAltname bool
    whether to automatically append SAN to impersonating certificate if server certificate is missing SAN
    BlockClientCert bool
    Block sessions with client certificate
    BlockExpiredCertificate bool
    Block sessions with expired certificates
    BlockIfHsmUnavailable bool
    whether to block sessions if HSM is unavailable
    BlockIfNoResource bool
    whether to block sessions if device has no enough resources
    BlockIfSniMismatch bool
    whether to block a session when certificate's subject name or SAN doesn't match SNI
    BlockTimeoutCert bool
    Block sessions if certificate status cannot be retrieved within timeout
    BlockTls13DowngradeNoResource bool
    whether to downgrade from tls1.3 if device has not enough resources
    BlockUnknownCert bool
    Block sessions if certificate status is unknown
    BlockUnsupportedCipher bool
    Block sessions with unsupported cipher suites
    BlockUnsupportedVersion bool
    Block sessions with unsupported protocol versions
    BlockUntrustedIssuer bool
    Block sessions with untrusted certificate issuers
    RestrictCertExts bool
    Restrict certificate extensions
    StripAlpn bool
    Strip ALPN extension from ClientHello
    AutoIncludeAltname bool
    whether to automatically append SAN to impersonating certificate if server certificate is missing SAN
    BlockClientCert bool
    Block sessions with client certificate
    BlockExpiredCertificate bool
    Block sessions with expired certificates
    BlockIfHsmUnavailable bool
    whether to block sessions if HSM is unavailable
    BlockIfNoResource bool
    whether to block sessions if device has no enough resources
    BlockIfSniMismatch bool
    whether to block a session when certificate's subject name or SAN doesn't match SNI
    BlockTimeoutCert bool
    Block sessions if certificate status cannot be retrieved within timeout
    BlockTls13DowngradeNoResource bool
    whether to downgrade from tls1.3 if device has not enough resources
    BlockUnknownCert bool
    Block sessions if certificate status is unknown
    BlockUnsupportedCipher bool
    Block sessions with unsupported cipher suites
    BlockUnsupportedVersion bool
    Block sessions with unsupported protocol versions
    BlockUntrustedIssuer bool
    Block sessions with untrusted certificate issuers
    RestrictCertExts bool
    Restrict certificate extensions
    StripAlpn bool
    Strip ALPN extension from ClientHello
    auto_include_altname bool
    whether to automatically append SAN to impersonating certificate if server certificate is missing SAN
    block_client_cert bool
    Block sessions with client certificate
    block_expired_certificate bool
    Block sessions with expired certificates
    block_if_hsm_unavailable bool
    whether to block sessions if HSM is unavailable
    block_if_no_resource bool
    whether to block sessions if device has no enough resources
    block_if_sni_mismatch bool
    whether to block a session when certificate's subject name or SAN doesn't match SNI
    block_timeout_cert bool
    Block sessions if certificate status cannot be retrieved within timeout
    block_tls13_downgrade_no_resource bool
    whether to downgrade from tls1.3 if device has not enough resources
    block_unknown_cert bool
    Block sessions if certificate status is unknown
    block_unsupported_cipher bool
    Block sessions with unsupported cipher suites
    block_unsupported_version bool
    Block sessions with unsupported protocol versions
    block_untrusted_issuer bool
    Block sessions with untrusted certificate issuers
    restrict_cert_exts bool
    Restrict certificate extensions
    strip_alpn bool
    Strip ALPN extension from ClientHello
    autoIncludeAltname Boolean
    whether to automatically append SAN to impersonating certificate if server certificate is missing SAN
    blockClientCert Boolean
    Block sessions with client certificate
    blockExpiredCertificate Boolean
    Block sessions with expired certificates
    blockIfHsmUnavailable Boolean
    whether to block sessions if HSM is unavailable
    blockIfNoResource Boolean
    whether to block sessions if device has no enough resources
    blockIfSniMismatch Boolean
    whether to block a session when certificate's subject name or SAN doesn't match SNI
    blockTimeoutCert Boolean
    Block sessions if certificate status cannot be retrieved within timeout
    blockTls13DowngradeNoResource Boolean
    whether to downgrade from tls1.3 if device has not enough resources
    blockUnknownCert Boolean
    Block sessions if certificate status is unknown
    blockUnsupportedCipher Boolean
    Block sessions with unsupported cipher suites
    blockUnsupportedVersion Boolean
    Block sessions with unsupported protocol versions
    blockUntrustedIssuer Boolean
    Block sessions with untrusted certificate issuers
    restrictCertExts Boolean
    Restrict certificate extensions
    stripAlpn Boolean
    Strip ALPN extension from ClientHello
    autoIncludeAltname boolean
    whether to automatically append SAN to impersonating certificate if server certificate is missing SAN
    blockClientCert boolean
    Block sessions with client certificate
    blockExpiredCertificate boolean
    Block sessions with expired certificates
    blockIfHsmUnavailable boolean
    whether to block sessions if HSM is unavailable
    blockIfNoResource boolean
    whether to block sessions if device has no enough resources
    blockIfSniMismatch boolean
    whether to block a session when certificate's subject name or SAN doesn't match SNI
    blockTimeoutCert boolean
    Block sessions if certificate status cannot be retrieved within timeout
    blockTls13DowngradeNoResource boolean
    whether to downgrade from tls1.3 if device has not enough resources
    blockUnknownCert boolean
    Block sessions if certificate status is unknown
    blockUnsupportedCipher boolean
    Block sessions with unsupported cipher suites
    blockUnsupportedVersion boolean
    Block sessions with unsupported protocol versions
    blockUntrustedIssuer boolean
    Block sessions with untrusted certificate issuers
    restrictCertExts boolean
    Restrict certificate extensions
    stripAlpn boolean
    Strip ALPN extension from ClientHello
    auto_include_altname bool
    whether to automatically append SAN to impersonating certificate if server certificate is missing SAN
    block_client_cert bool
    Block sessions with client certificate
    block_expired_certificate bool
    Block sessions with expired certificates
    block_if_hsm_unavailable bool
    whether to block sessions if HSM is unavailable
    block_if_no_resource bool
    whether to block sessions if device has no enough resources
    block_if_sni_mismatch bool
    whether to block a session when certificate's subject name or SAN doesn't match SNI
    block_timeout_cert bool
    Block sessions if certificate status cannot be retrieved within timeout
    block_tls13_downgrade_no_resource bool
    whether to downgrade from tls1.3 if device has not enough resources
    block_unknown_cert bool
    Block sessions if certificate status is unknown
    block_unsupported_cipher bool
    Block sessions with unsupported cipher suites
    block_unsupported_version bool
    Block sessions with unsupported protocol versions
    block_untrusted_issuer bool
    Block sessions with untrusted certificate issuers
    restrict_cert_exts bool
    Restrict certificate extensions
    strip_alpn bool
    Strip ALPN extension from ClientHello
    autoIncludeAltname Boolean
    whether to automatically append SAN to impersonating certificate if server certificate is missing SAN
    blockClientCert Boolean
    Block sessions with client certificate
    blockExpiredCertificate Boolean
    Block sessions with expired certificates
    blockIfHsmUnavailable Boolean
    whether to block sessions if HSM is unavailable
    blockIfNoResource Boolean
    whether to block sessions if device has no enough resources
    blockIfSniMismatch Boolean
    whether to block a session when certificate's subject name or SAN doesn't match SNI
    blockTimeoutCert Boolean
    Block sessions if certificate status cannot be retrieved within timeout
    blockTls13DowngradeNoResource Boolean
    whether to downgrade from tls1.3 if device has not enough resources
    blockUnknownCert Boolean
    Block sessions if certificate status is unknown
    blockUnsupportedCipher Boolean
    Block sessions with unsupported cipher suites
    blockUnsupportedVersion Boolean
    Block sessions with unsupported protocol versions
    blockUntrustedIssuer Boolean
    Block sessions with untrusted certificate issuers
    restrictCertExts Boolean
    Restrict certificate extensions
    stripAlpn Boolean
    Strip ALPN extension from ClientHello

    DecryptionProfileSslInboundProxy, DecryptionProfileSslInboundProxyArgs

    BlockIfHsmUnavailable bool
    Block sessions when HSM is unavailable
    BlockIfNoResource bool
    Block sessions when decryption resources are not available
    BlockTls13DowngradeNoResource bool
    Block TLS 1.3 downgrade when no resources are available
    BlockUnsupportedCipher bool
    Block sessions with unsupported cipher suites
    BlockUnsupportedVersion bool
    Block sessions with unsupported protocol versions
    BlockIfHsmUnavailable bool
    Block sessions when HSM is unavailable
    BlockIfNoResource bool
    Block sessions when decryption resources are not available
    BlockTls13DowngradeNoResource bool
    Block TLS 1.3 downgrade when no resources are available
    BlockUnsupportedCipher bool
    Block sessions with unsupported cipher suites
    BlockUnsupportedVersion bool
    Block sessions with unsupported protocol versions
    block_if_hsm_unavailable bool
    Block sessions when HSM is unavailable
    block_if_no_resource bool
    Block sessions when decryption resources are not available
    block_tls13_downgrade_no_resource bool
    Block TLS 1.3 downgrade when no resources are available
    block_unsupported_cipher bool
    Block sessions with unsupported cipher suites
    block_unsupported_version bool
    Block sessions with unsupported protocol versions
    blockIfHsmUnavailable Boolean
    Block sessions when HSM is unavailable
    blockIfNoResource Boolean
    Block sessions when decryption resources are not available
    blockTls13DowngradeNoResource Boolean
    Block TLS 1.3 downgrade when no resources are available
    blockUnsupportedCipher Boolean
    Block sessions with unsupported cipher suites
    blockUnsupportedVersion Boolean
    Block sessions with unsupported protocol versions
    blockIfHsmUnavailable boolean
    Block sessions when HSM is unavailable
    blockIfNoResource boolean
    Block sessions when decryption resources are not available
    blockTls13DowngradeNoResource boolean
    Block TLS 1.3 downgrade when no resources are available
    blockUnsupportedCipher boolean
    Block sessions with unsupported cipher suites
    blockUnsupportedVersion boolean
    Block sessions with unsupported protocol versions
    block_if_hsm_unavailable bool
    Block sessions when HSM is unavailable
    block_if_no_resource bool
    Block sessions when decryption resources are not available
    block_tls13_downgrade_no_resource bool
    Block TLS 1.3 downgrade when no resources are available
    block_unsupported_cipher bool
    Block sessions with unsupported cipher suites
    block_unsupported_version bool
    Block sessions with unsupported protocol versions
    blockIfHsmUnavailable Boolean
    Block sessions when HSM is unavailable
    blockIfNoResource Boolean
    Block sessions when decryption resources are not available
    blockTls13DowngradeNoResource Boolean
    Block TLS 1.3 downgrade when no resources are available
    blockUnsupportedCipher Boolean
    Block sessions with unsupported cipher suites
    blockUnsupportedVersion Boolean
    Block sessions with unsupported protocol versions

    DecryptionProfileSslNoProxy, DecryptionProfileSslNoProxyArgs

    BlockExpiredCertificate bool
    Block sessions with expired certificates
    BlockUntrustedIssuer bool
    Block sessions with untrusted certificate issuers
    BlockExpiredCertificate bool
    Block sessions with expired certificates
    BlockUntrustedIssuer bool
    Block sessions with untrusted certificate issuers
    block_expired_certificate bool
    Block sessions with expired certificates
    block_untrusted_issuer bool
    Block sessions with untrusted certificate issuers
    blockExpiredCertificate Boolean
    Block sessions with expired certificates
    blockUntrustedIssuer Boolean
    Block sessions with untrusted certificate issuers
    blockExpiredCertificate boolean
    Block sessions with expired certificates
    blockUntrustedIssuer boolean
    Block sessions with untrusted certificate issuers
    block_expired_certificate bool
    Block sessions with expired certificates
    block_untrusted_issuer bool
    Block sessions with untrusted certificate issuers
    blockExpiredCertificate Boolean
    Block sessions with expired certificates
    blockUntrustedIssuer Boolean
    Block sessions with untrusted certificate issuers

    DecryptionProfileSslProtocolSettings, DecryptionProfileSslProtocolSettingsArgs

    AuthAlgoMd5 bool
    Allow MD5 authentication algorithm
    AuthAlgoSha1 bool
    Allow SHA1 authentication algorithm
    AuthAlgoSha256 bool
    Allow SHA256 authentication algorithm
    AuthAlgoSha384 bool
    Allow SHA384 authentication algorithm
    EncAlgo3des bool
    Allow 3DES encryption algorithm
    EncAlgoAes128Cbc bool
    Allow AES-128-CBC encryption algorithm
    EncAlgoAes128Gcm bool
    Allow AES-128-GCM encryption algorithm
    EncAlgoAes256Cbc bool
    Allow AES-256-CBC encryption algorithm
    EncAlgoAes256Gcm bool
    Allow AES-256-GCM encryption algorithm
    EncAlgoChacha20Poly1305 bool
    Allow algorithm chacha20-poly1305
    EncAlgoRc4 bool
    Allow RC4 encryption algorithm
    KeyxchgAlgoDhe bool
    Allow DHE key exchange algorithm
    KeyxchgAlgoEcdhe bool
    Allow ECDHE key exchange algorithm
    KeyxchgAlgoRsa bool
    Allow RSA key exchange algorithm
    MaxVersion string
    Maximum SSL/TLS protocol version
    MinVersion string
    Minimum SSL/TLS protocol version
    AuthAlgoMd5 bool
    Allow MD5 authentication algorithm
    AuthAlgoSha1 bool
    Allow SHA1 authentication algorithm
    AuthAlgoSha256 bool
    Allow SHA256 authentication algorithm
    AuthAlgoSha384 bool
    Allow SHA384 authentication algorithm
    EncAlgo3des bool
    Allow 3DES encryption algorithm
    EncAlgoAes128Cbc bool
    Allow AES-128-CBC encryption algorithm
    EncAlgoAes128Gcm bool
    Allow AES-128-GCM encryption algorithm
    EncAlgoAes256Cbc bool
    Allow AES-256-CBC encryption algorithm
    EncAlgoAes256Gcm bool
    Allow AES-256-GCM encryption algorithm
    EncAlgoChacha20Poly1305 bool
    Allow algorithm chacha20-poly1305
    EncAlgoRc4 bool
    Allow RC4 encryption algorithm
    KeyxchgAlgoDhe bool
    Allow DHE key exchange algorithm
    KeyxchgAlgoEcdhe bool
    Allow ECDHE key exchange algorithm
    KeyxchgAlgoRsa bool
    Allow RSA key exchange algorithm
    MaxVersion string
    Maximum SSL/TLS protocol version
    MinVersion string
    Minimum SSL/TLS protocol version
    auth_algo_md5 bool
    Allow MD5 authentication algorithm
    auth_algo_sha1 bool
    Allow SHA1 authentication algorithm
    auth_algo_sha256 bool
    Allow SHA256 authentication algorithm
    auth_algo_sha384 bool
    Allow SHA384 authentication algorithm
    enc_algo3des bool
    Allow 3DES encryption algorithm
    enc_algo_aes128_cbc bool
    Allow AES-128-CBC encryption algorithm
    enc_algo_aes128_gcm bool
    Allow AES-128-GCM encryption algorithm
    enc_algo_aes256_cbc bool
    Allow AES-256-CBC encryption algorithm
    enc_algo_aes256_gcm bool
    Allow AES-256-GCM encryption algorithm
    enc_algo_chacha20_poly1305 bool
    Allow algorithm chacha20-poly1305
    enc_algo_rc4 bool
    Allow RC4 encryption algorithm
    keyxchg_algo_dhe bool
    Allow DHE key exchange algorithm
    keyxchg_algo_ecdhe bool
    Allow ECDHE key exchange algorithm
    keyxchg_algo_rsa bool
    Allow RSA key exchange algorithm
    max_version string
    Maximum SSL/TLS protocol version
    min_version string
    Minimum SSL/TLS protocol version
    authAlgoMd5 Boolean
    Allow MD5 authentication algorithm
    authAlgoSha1 Boolean
    Allow SHA1 authentication algorithm
    authAlgoSha256 Boolean
    Allow SHA256 authentication algorithm
    authAlgoSha384 Boolean
    Allow SHA384 authentication algorithm
    encAlgo3des Boolean
    Allow 3DES encryption algorithm
    encAlgoAes128Cbc Boolean
    Allow AES-128-CBC encryption algorithm
    encAlgoAes128Gcm Boolean
    Allow AES-128-GCM encryption algorithm
    encAlgoAes256Cbc Boolean
    Allow AES-256-CBC encryption algorithm
    encAlgoAes256Gcm Boolean
    Allow AES-256-GCM encryption algorithm
    encAlgoChacha20Poly1305 Boolean
    Allow algorithm chacha20-poly1305
    encAlgoRc4 Boolean
    Allow RC4 encryption algorithm
    keyxchgAlgoDhe Boolean
    Allow DHE key exchange algorithm
    keyxchgAlgoEcdhe Boolean
    Allow ECDHE key exchange algorithm
    keyxchgAlgoRsa Boolean
    Allow RSA key exchange algorithm
    maxVersion String
    Maximum SSL/TLS protocol version
    minVersion String
    Minimum SSL/TLS protocol version
    authAlgoMd5 boolean
    Allow MD5 authentication algorithm
    authAlgoSha1 boolean
    Allow SHA1 authentication algorithm
    authAlgoSha256 boolean
    Allow SHA256 authentication algorithm
    authAlgoSha384 boolean
    Allow SHA384 authentication algorithm
    encAlgo3des boolean
    Allow 3DES encryption algorithm
    encAlgoAes128Cbc boolean
    Allow AES-128-CBC encryption algorithm
    encAlgoAes128Gcm boolean
    Allow AES-128-GCM encryption algorithm
    encAlgoAes256Cbc boolean
    Allow AES-256-CBC encryption algorithm
    encAlgoAes256Gcm boolean
    Allow AES-256-GCM encryption algorithm
    encAlgoChacha20Poly1305 boolean
    Allow algorithm chacha20-poly1305
    encAlgoRc4 boolean
    Allow RC4 encryption algorithm
    keyxchgAlgoDhe boolean
    Allow DHE key exchange algorithm
    keyxchgAlgoEcdhe boolean
    Allow ECDHE key exchange algorithm
    keyxchgAlgoRsa boolean
    Allow RSA key exchange algorithm
    maxVersion string
    Maximum SSL/TLS protocol version
    minVersion string
    Minimum SSL/TLS protocol version
    auth_algo_md5 bool
    Allow MD5 authentication algorithm
    auth_algo_sha1 bool
    Allow SHA1 authentication algorithm
    auth_algo_sha256 bool
    Allow SHA256 authentication algorithm
    auth_algo_sha384 bool
    Allow SHA384 authentication algorithm
    enc_algo3des bool
    Allow 3DES encryption algorithm
    enc_algo_aes128_cbc bool
    Allow AES-128-CBC encryption algorithm
    enc_algo_aes128_gcm bool
    Allow AES-128-GCM encryption algorithm
    enc_algo_aes256_cbc bool
    Allow AES-256-CBC encryption algorithm
    enc_algo_aes256_gcm bool
    Allow AES-256-GCM encryption algorithm
    enc_algo_chacha20_poly1305 bool
    Allow algorithm chacha20-poly1305
    enc_algo_rc4 bool
    Allow RC4 encryption algorithm
    keyxchg_algo_dhe bool
    Allow DHE key exchange algorithm
    keyxchg_algo_ecdhe bool
    Allow ECDHE key exchange algorithm
    keyxchg_algo_rsa bool
    Allow RSA key exchange algorithm
    max_version str
    Maximum SSL/TLS protocol version
    min_version str
    Minimum SSL/TLS protocol version
    authAlgoMd5 Boolean
    Allow MD5 authentication algorithm
    authAlgoSha1 Boolean
    Allow SHA1 authentication algorithm
    authAlgoSha256 Boolean
    Allow SHA256 authentication algorithm
    authAlgoSha384 Boolean
    Allow SHA384 authentication algorithm
    encAlgo3des Boolean
    Allow 3DES encryption algorithm
    encAlgoAes128Cbc Boolean
    Allow AES-128-CBC encryption algorithm
    encAlgoAes128Gcm Boolean
    Allow AES-128-GCM encryption algorithm
    encAlgoAes256Cbc Boolean
    Allow AES-256-CBC encryption algorithm
    encAlgoAes256Gcm Boolean
    Allow AES-256-GCM encryption algorithm
    encAlgoChacha20Poly1305 Boolean
    Allow algorithm chacha20-poly1305
    encAlgoRc4 Boolean
    Allow RC4 encryption algorithm
    keyxchgAlgoDhe Boolean
    Allow DHE key exchange algorithm
    keyxchgAlgoEcdhe Boolean
    Allow ECDHE key exchange algorithm
    keyxchgAlgoRsa Boolean
    Allow RSA key exchange algorithm
    maxVersion String
    Maximum SSL/TLS protocol version
    minVersion String
    Minimum SSL/TLS protocol version

    Package Details

    Repository
    panos paloaltonetworks/terraform-provider-panos
    License
    Notes
    This Pulumi package is based on the panos Terraform Provider.
    Viewing docs for panos 2.0.12
    published on Wednesday, Jun 17, 2026 by paloaltonetworks
    Schema (JSON)
    paloaltonetworks/terraform-provider-panos

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial