1. Packages
  2. Panos Provider
  3. API Docs
  4. DefaultSecurityPolicy
panos 2.0.7 published on Thursday, Nov 27, 2025 by paloaltonetworks
Schema (JSON)
paloaltonetworks/terraform-provider-panos

panos.DefaultSecurityPolicy

panos logo
panos 2.0.7 published on Thursday, Nov 27, 2025 by paloaltonetworks
Schema (JSON)
paloaltonetworks/terraform-provider-panos

    Create DefaultSecurityPolicy Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new DefaultSecurityPolicy(name: string, args: DefaultSecurityPolicyArgs, opts?: CustomResourceOptions);
    @overload
def DefaultSecurityPolicy(resource_name: str,
                          args: DefaultSecurityPolicyArgs,
                          opts: Optional[ResourceOptions] = None)

@overload
def DefaultSecurityPolicy(resource_name: str,
                          opts: Optional[ResourceOptions] = None,
                          location: Optional[DefaultSecurityPolicyLocationArgs] = None,
                          rules: Optional[Sequence[DefaultSecurityPolicyRuleArgs]] = None)
    func NewDefaultSecurityPolicy(ctx *Context, name string, args DefaultSecurityPolicyArgs, opts ...ResourceOption) (*DefaultSecurityPolicy, error)
    public DefaultSecurityPolicy(string name, DefaultSecurityPolicyArgs args, CustomResourceOptions? opts = null)
    public DefaultSecurityPolicy(String name, DefaultSecurityPolicyArgs args)
public DefaultSecurityPolicy(String name, DefaultSecurityPolicyArgs args, CustomResourceOptions options)

    type: panos:DefaultSecurityPolicy
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args DefaultSecurityPolicyArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args DefaultSecurityPolicyArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args DefaultSecurityPolicyArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args DefaultSecurityPolicyArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args DefaultSecurityPolicyArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var defaultSecurityPolicyResource = new Panos.DefaultSecurityPolicy("defaultSecurityPolicyResource", new()
{
    Location = new Panos.Inputs.DefaultSecurityPolicyLocationArgs
    {
        DeviceGroup = new Panos.Inputs.DefaultSecurityPolicyLocationDeviceGroupArgs
        {
            Name = "string",
            PanoramaDevice = "string",
        },
        Shared = null,
    },
    Rules = new[]
    {
        new Panos.Inputs.DefaultSecurityPolicyRuleArgs
        {
            Name = "string",
            Action = "string",
            GroupTag = "string",
            IcmpUnreachable = false,
            LogEnd = false,
            LogSetting = "string",
            LogStart = false,
            ProfileSetting = new Panos.Inputs.DefaultSecurityPolicyRuleProfileSettingArgs
            {
                Groups = new[]
                {
                    "string",
                },
                Profiles = new Panos.Inputs.DefaultSecurityPolicyRuleProfileSettingProfilesArgs
                {
                    DataFilterings = new[]
                    {
                        "string",
                    },
                    FileBlockings = new[]
                    {
                        "string",
                    },
                    Gtps = new[]
                    {
                        "string",
                    },
                    Sctps = new[]
                    {
                        "string",
                    },
                    Spywares = new[]
                    {
                        "string",
                    },
                    UrlFilterings = new[]
                    {
                        "string",
                    },
                    Viri = new[]
                    {
                        "string",
                    },
                    Vulnerabilities = new[]
                    {
                        "string",
                    },
                    WildfireAnalyses = new[]
                    {
                        "string",
                    },
                },
            },
            Tags = new[]
            {
                "string",
            },
        },
    },
});

    example, err := panos.NewDefaultSecurityPolicy(ctx, "defaultSecurityPolicyResource", &panos.DefaultSecurityPolicyArgs{
	Location: &panos.DefaultSecurityPolicyLocationArgs{
		DeviceGroup: &panos.DefaultSecurityPolicyLocationDeviceGroupArgs{
			Name:           pulumi.String("string"),
			PanoramaDevice: pulumi.String("string"),
		},
		Shared: &panos.DefaultSecurityPolicyLocationSharedArgs{},
	},
	Rules: panos.DefaultSecurityPolicyRuleArray{
		&panos.DefaultSecurityPolicyRuleArgs{
			Name:            pulumi.String("string"),
			Action:          pulumi.String("string"),
			GroupTag:        pulumi.String("string"),
			IcmpUnreachable: pulumi.Bool(false),
			LogEnd:          pulumi.Bool(false),
			LogSetting:      pulumi.String("string"),
			LogStart:        pulumi.Bool(false),
			ProfileSetting: &panos.DefaultSecurityPolicyRuleProfileSettingArgs{
				Groups: pulumi.StringArray{
					pulumi.String("string"),
				},
				Profiles: &panos.DefaultSecurityPolicyRuleProfileSettingProfilesArgs{
					DataFilterings: pulumi.StringArray{
						pulumi.String("string"),
					},
					FileBlockings: pulumi.StringArray{
						pulumi.String("string"),
					},
					Gtps: pulumi.StringArray{
						pulumi.String("string"),
					},
					Sctps: pulumi.StringArray{
						pulumi.String("string"),
					},
					Spywares: pulumi.StringArray{
						pulumi.String("string"),
					},
					UrlFilterings: pulumi.StringArray{
						pulumi.String("string"),
					},
					Viri: pulumi.StringArray{
						pulumi.String("string"),
					},
					Vulnerabilities: pulumi.StringArray{
						pulumi.String("string"),
					},
					WildfireAnalyses: pulumi.StringArray{
						pulumi.String("string"),
					},
				},
			},
			Tags: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
	},
})

    var defaultSecurityPolicyResource = new DefaultSecurityPolicy("defaultSecurityPolicyResource", DefaultSecurityPolicyArgs.builder()
    .location(DefaultSecurityPolicyLocationArgs.builder()
        .deviceGroup(DefaultSecurityPolicyLocationDeviceGroupArgs.builder()
            .name("string")
            .panoramaDevice("string")
            .build())
        .shared(DefaultSecurityPolicyLocationSharedArgs.builder()
            .build())
        .build())
    .rules(DefaultSecurityPolicyRuleArgs.builder()
        .name("string")
        .action("string")
        .groupTag("string")
        .icmpUnreachable(false)
        .logEnd(false)
        .logSetting("string")
        .logStart(false)
        .profileSetting(DefaultSecurityPolicyRuleProfileSettingArgs.builder()
            .groups("string")
            .profiles(DefaultSecurityPolicyRuleProfileSettingProfilesArgs.builder()
                .dataFilterings("string")
                .fileBlockings("string")
                .gtps("string")
                .sctps("string")
                .spywares("string")
                .urlFilterings("string")
                .viri("string")
                .vulnerabilities("string")
                .wildfireAnalyses("string")
                .build())
            .build())
        .tags("string")
        .build())
    .build());

    default_security_policy_resource = panos.DefaultSecurityPolicy("defaultSecurityPolicyResource",
    location={
        "device_group": {
            "name": "string",
            "panorama_device": "string",
        },
        "shared": {},
    },
    rules=[{
        "name": "string",
        "action": "string",
        "group_tag": "string",
        "icmp_unreachable": False,
        "log_end": False,
        "log_setting": "string",
        "log_start": False,
        "profile_setting": {
            "groups": ["string"],
            "profiles": {
                "data_filterings": ["string"],
                "file_blockings": ["string"],
                "gtps": ["string"],
                "sctps": ["string"],
                "spywares": ["string"],
                "url_filterings": ["string"],
                "viri": ["string"],
                "vulnerabilities": ["string"],
                "wildfire_analyses": ["string"],
            },
        },
        "tags": ["string"],
    }])

    const defaultSecurityPolicyResource = new panos.DefaultSecurityPolicy("defaultSecurityPolicyResource", {
    location: {
        deviceGroup: {
            name: "string",
            panoramaDevice: "string",
        },
        shared: {},
    },
    rules: [{
        name: "string",
        action: "string",
        groupTag: "string",
        icmpUnreachable: false,
        logEnd: false,
        logSetting: "string",
        logStart: false,
        profileSetting: {
            groups: ["string"],
            profiles: {
                dataFilterings: ["string"],
                fileBlockings: ["string"],
                gtps: ["string"],
                sctps: ["string"],
                spywares: ["string"],
                urlFilterings: ["string"],
                viri: ["string"],
                vulnerabilities: ["string"],
                wildfireAnalyses: ["string"],
            },
        },
        tags: ["string"],
    }],
});

    type: panos:DefaultSecurityPolicy
properties:
    location:
        deviceGroup:
            name: string
            panoramaDevice: string
        shared: {}
    rules:
        - action: string
          groupTag: string
          icmpUnreachable: false
          logEnd: false
          logSetting: string
          logStart: false
          name: string
          profileSetting:
            groups:
                - string
            profiles:
                dataFilterings:
                    - string
                fileBlockings:
                    - string
                gtps:
                    - string
                sctps:
                    - string
                spywares:
                    - string
                urlFilterings:
                    - string
                viri:
                    - string
                vulnerabilities:
                    - string
                wildfireAnalyses:
                    - string
          tags:
            - string

    DefaultSecurityPolicy Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The DefaultSecurityPolicy resource accepts the following input properties:

    location Property Map
    The location of this object.
    rules List<Property Map>

    Outputs

    All input properties are implicitly available as output properties. Additionally, the DefaultSecurityPolicy resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing DefaultSecurityPolicy Resource

    Get an existing DefaultSecurityPolicy resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: DefaultSecurityPolicyState, opts?: CustomResourceOptions): DefaultSecurityPolicy
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        location: Optional[DefaultSecurityPolicyLocationArgs] = None,
        rules: Optional[Sequence[DefaultSecurityPolicyRuleArgs]] = None) -> DefaultSecurityPolicy
    func GetDefaultSecurityPolicy(ctx *Context, name string, id IDInput, state *DefaultSecurityPolicyState, opts ...ResourceOption) (*DefaultSecurityPolicy, error)
    public static DefaultSecurityPolicy Get(string name, Input<string> id, DefaultSecurityPolicyState? state, CustomResourceOptions? opts = null)
    public static DefaultSecurityPolicy get(String name, Output<String> id, DefaultSecurityPolicyState state, CustomResourceOptions options)
    resources:  _:    type: panos:DefaultSecurityPolicy    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.

    Supporting Types

    DefaultSecurityPolicyLocation, DefaultSecurityPolicyLocationArgs

    DeviceGroup DefaultSecurityPolicyLocationDeviceGroup
    Located in a specific device group.
    Shared DefaultSecurityPolicyLocationShared
    Located in a shared rulebase
    DeviceGroup DefaultSecurityPolicyLocationDeviceGroup
    Located in a specific device group.
    Shared DefaultSecurityPolicyLocationShared
    Located in a shared rulebase
    deviceGroup DefaultSecurityPolicyLocationDeviceGroup
    Located in a specific device group.
    shared DefaultSecurityPolicyLocationShared
    Located in a shared rulebase
    deviceGroup DefaultSecurityPolicyLocationDeviceGroup
    Located in a specific device group.
    shared DefaultSecurityPolicyLocationShared
    Located in a shared rulebase
    device_group DefaultSecurityPolicyLocationDeviceGroup
    Located in a specific device group.
    shared DefaultSecurityPolicyLocationShared
    Located in a shared rulebase
    deviceGroup Property Map
    Located in a specific device group.
    shared Property Map
    Located in a shared rulebase

    DefaultSecurityPolicyLocationDeviceGroup, DefaultSecurityPolicyLocationDeviceGroupArgs

    Name string
    The device group.
    PanoramaDevice string
    The panorama device.
    Name string
    The device group.
    PanoramaDevice string
    The panorama device.
    name String
    The device group.
    panoramaDevice String
    The panorama device.
    name string
    The device group.
    panoramaDevice string
    The panorama device.
    name str
    The device group.
    panorama_device str
    The panorama device.
    name String
    The device group.
    panoramaDevice String
    The panorama device.

    DefaultSecurityPolicyRule, DefaultSecurityPolicyRuleArgs

    Name string
    Action string
    GroupTag string
    IcmpUnreachable bool
    Send ICMP unreachable error when action is drop or reset
    LogEnd bool
    Log at session end (required for certain ACC tables)
    LogSetting string
    LogStart bool
    Log at session start
    ProfileSetting DefaultSecurityPolicyRuleProfileSetting
    Tags List<string>
    Name string
    Action string
    GroupTag string
    IcmpUnreachable bool
    Send ICMP unreachable error when action is drop or reset
    LogEnd bool
    Log at session end (required for certain ACC tables)
    LogSetting string
    LogStart bool
    Log at session start
    ProfileSetting DefaultSecurityPolicyRuleProfileSetting
    Tags []string
    name String
    action String
    groupTag String
    icmpUnreachable Boolean
    Send ICMP unreachable error when action is drop or reset
    logEnd Boolean
    Log at session end (required for certain ACC tables)
    logSetting String
    logStart Boolean
    Log at session start
    profileSetting DefaultSecurityPolicyRuleProfileSetting
    tags List<String>
    name string
    action string
    groupTag string
    icmpUnreachable boolean
    Send ICMP unreachable error when action is drop or reset
    logEnd boolean
    Log at session end (required for certain ACC tables)
    logSetting string
    logStart boolean
    Log at session start
    profileSetting DefaultSecurityPolicyRuleProfileSetting
    tags string[]
    name str
    action str
    group_tag str
    icmp_unreachable bool
    Send ICMP unreachable error when action is drop or reset
    log_end bool
    Log at session end (required for certain ACC tables)
    log_setting str
    log_start bool
    Log at session start
    profile_setting DefaultSecurityPolicyRuleProfileSetting
    tags Sequence[str]
    name String
    action String
    groupTag String
    icmpUnreachable Boolean
    Send ICMP unreachable error when action is drop or reset
    logEnd Boolean
    Log at session end (required for certain ACC tables)
    logSetting String
    logStart Boolean
    Log at session start
    profileSetting Property Map
    tags List<String>

    DefaultSecurityPolicyRuleProfileSetting, DefaultSecurityPolicyRuleProfileSettingArgs

    DefaultSecurityPolicyRuleProfileSettingProfiles, DefaultSecurityPolicyRuleProfileSettingProfilesArgs

    DataFilterings List<string>
    FileBlockings List<string>
    Gtps List<string>
    Sctps List<string>
    Spywares List<string>
    UrlFilterings List<string>
    Viri List<string>
    Vulnerabilities List<string>
    WildfireAnalyses List<string>
    DataFilterings []string
    FileBlockings []string
    Gtps []string
    Sctps []string
    Spywares []string
    UrlFilterings []string
    Viri []string
    Vulnerabilities []string
    WildfireAnalyses []string
    dataFilterings List<String>
    fileBlockings List<String>
    gtps List<String>
    sctps List<String>
    spywares List<String>
    urlFilterings List<String>
    viri List<String>
    vulnerabilities List<String>
    wildfireAnalyses List<String>
    dataFilterings string[]
    fileBlockings string[]
    gtps string[]
    sctps string[]
    spywares string[]
    urlFilterings string[]
    viri string[]
    vulnerabilities string[]
    wildfireAnalyses string[]
    data_filterings Sequence[str]
    file_blockings Sequence[str]
    gtps Sequence[str]
    sctps Sequence[str]
    spywares Sequence[str]
    url_filterings Sequence[str]
    viri Sequence[str]
    vulnerabilities Sequence[str]
    wildfire_analyses Sequence[str]
    dataFilterings List<String>
    fileBlockings List<String>
    gtps List<String>
    sctps List<String>
    spywares List<String>
    urlFilterings List<String>
    viri List<String>
    vulnerabilities List<String>
    wildfireAnalyses List<String>

    Package Details

    Repository
    panos paloaltonetworks/terraform-provider-panos
    License
    Notes
    This Pulumi package is based on the panos Terraform Provider.
    panos logo
    panos 2.0.7 published on Thursday, Nov 27, 2025 by paloaltonetworks
    Schema (JSON)
    paloaltonetworks/terraform-provider-panos
      Meet Neo: Your AI Platform Teammate