1. Packages
  2. Packages
  3. Panos Provider
  4. API Docs
  5. getPbfPolicyRules
Viewing docs for panos 2.0.11
published on Tuesday, Apr 28, 2026 by paloaltonetworks
Schema (JSON)
paloaltonetworks/terraform-provider-panos

panos.getPbfPolicyRules

Viewing docs for panos 2.0.11
published on Tuesday, Apr 28, 2026 by paloaltonetworks
Schema (JSON)
paloaltonetworks/terraform-provider-panos

    Using getPbfPolicyRules

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getPbfPolicyRules(args: GetPbfPolicyRulesArgs, opts?: InvokeOptions): Promise<GetPbfPolicyRulesResult>
function getPbfPolicyRulesOutput(args: GetPbfPolicyRulesOutputArgs, opts?: InvokeOptions): Output<GetPbfPolicyRulesResult>
    def get_pbf_policy_rules(location: Optional[GetPbfPolicyRulesLocation] = None,
                         position: Optional[GetPbfPolicyRulesPosition] = None,
                         rules: Optional[Sequence[GetPbfPolicyRulesRule]] = None,
                         opts: Optional[InvokeOptions] = None) -> GetPbfPolicyRulesResult
def get_pbf_policy_rules_output(location: Optional[pulumi.Input[GetPbfPolicyRulesLocationArgs]] = None,
                         position: Optional[pulumi.Input[GetPbfPolicyRulesPositionArgs]] = None,
                         rules: Optional[pulumi.Input[Sequence[pulumi.Input[GetPbfPolicyRulesRuleArgs]]]] = None,
                         opts: Optional[InvokeOptions] = None) -> Output[GetPbfPolicyRulesResult]
    func LookupPbfPolicyRules(ctx *Context, args *LookupPbfPolicyRulesArgs, opts ...InvokeOption) (*LookupPbfPolicyRulesResult, error)
func LookupPbfPolicyRulesOutput(ctx *Context, args *LookupPbfPolicyRulesOutputArgs, opts ...InvokeOption) LookupPbfPolicyRulesResultOutput

    > Note: This function is named LookupPbfPolicyRules in the Go SDK.

    public static class GetPbfPolicyRules 
{
    public static Task<GetPbfPolicyRulesResult> InvokeAsync(GetPbfPolicyRulesArgs args, InvokeOptions? opts = null)
    public static Output<GetPbfPolicyRulesResult> Invoke(GetPbfPolicyRulesInvokeArgs args, InvokeOptions? opts = null)
}
    public static CompletableFuture<GetPbfPolicyRulesResult> getPbfPolicyRules(GetPbfPolicyRulesArgs args, InvokeOptions options)
public static Output<GetPbfPolicyRulesResult> getPbfPolicyRules(GetPbfPolicyRulesArgs args, InvokeOptions options)

    fn::invoke:
  function: panos:index/getPbfPolicyRules:getPbfPolicyRules
  arguments:
    # arguments dictionary

    The following arguments are supported:

    getPbfPolicyRules Result

    The following output properties are available:

    Id string
    The provider-assigned unique ID for this managed resource.
    Location GetPbfPolicyRulesLocation
    The location of this object.
    Position GetPbfPolicyRulesPosition
    Rules List<GetPbfPolicyRulesRule>
    Id string
    The provider-assigned unique ID for this managed resource.
    Location GetPbfPolicyRulesLocation
    The location of this object.
    Position GetPbfPolicyRulesPosition
    Rules []GetPbfPolicyRulesRule
    id String
    The provider-assigned unique ID for this managed resource.
    location GetPbfPolicyRulesLocation
    The location of this object.
    position GetPbfPolicyRulesPosition
    rules List<GetPbfPolicyRulesRule>
    id string
    The provider-assigned unique ID for this managed resource.
    location GetPbfPolicyRulesLocation
    The location of this object.
    position GetPbfPolicyRulesPosition
    rules GetPbfPolicyRulesRule[]
    id str
    The provider-assigned unique ID for this managed resource.
    location GetPbfPolicyRulesLocation
    The location of this object.
    position GetPbfPolicyRulesPosition
    rules Sequence[GetPbfPolicyRulesRule]
    id String
    The provider-assigned unique ID for this managed resource.
    location Property Map
    The location of this object.
    position Property Map
    rules List<Property Map>

    Supporting Types

    GetPbfPolicyRulesLocation

    DeviceGroup GetPbfPolicyRulesLocationDeviceGroup
    Located in a specific device group rulebase
    Shared GetPbfPolicyRulesLocationShared
    Located in a shared rulebase
    Vsys GetPbfPolicyRulesLocationVsys
    Located in a specific vsys rulebase
    DeviceGroup GetPbfPolicyRulesLocationDeviceGroup
    Located in a specific device group rulebase
    Shared GetPbfPolicyRulesLocationShared
    Located in a shared rulebase
    Vsys GetPbfPolicyRulesLocationVsys
    Located in a specific vsys rulebase
    deviceGroup GetPbfPolicyRulesLocationDeviceGroup
    Located in a specific device group rulebase
    shared GetPbfPolicyRulesLocationShared
    Located in a shared rulebase
    vsys GetPbfPolicyRulesLocationVsys
    Located in a specific vsys rulebase
    deviceGroup GetPbfPolicyRulesLocationDeviceGroup
    Located in a specific device group rulebase
    shared GetPbfPolicyRulesLocationShared
    Located in a shared rulebase
    vsys GetPbfPolicyRulesLocationVsys
    Located in a specific vsys rulebase
    device_group GetPbfPolicyRulesLocationDeviceGroup
    Located in a specific device group rulebase
    shared GetPbfPolicyRulesLocationShared
    Located in a shared rulebase
    vsys GetPbfPolicyRulesLocationVsys
    Located in a specific vsys rulebase
    deviceGroup Property Map
    Located in a specific device group rulebase
    shared Property Map
    Located in a shared rulebase
    vsys Property Map
    Located in a specific vsys rulebase

    GetPbfPolicyRulesLocationDeviceGroup

    Name string
    The device group name
    PanoramaDevice string
    The panorama device
    Rulebase string
    The rulebase
    Name string
    The device group name
    PanoramaDevice string
    The panorama device
    Rulebase string
    The rulebase
    name String
    The device group name
    panoramaDevice String
    The panorama device
    rulebase String
    The rulebase
    name string
    The device group name
    panoramaDevice string
    The panorama device
    rulebase string
    The rulebase
    name str
    The device group name
    panorama_device str
    The panorama device
    rulebase str
    The rulebase
    name String
    The device group name
    panoramaDevice String
    The panorama device
    rulebase String
    The rulebase

    GetPbfPolicyRulesLocationShared

    Rulebase string
    Rulebase name
    Rulebase string
    Rulebase name
    rulebase String
    Rulebase name
    rulebase string
    Rulebase name
    rulebase str
    Rulebase name
    rulebase String
    Rulebase name

    GetPbfPolicyRulesLocationVsys

    Name string
    The vsys name
    NgfwDevice string
    The NGFW device
    Name string
    The vsys name
    NgfwDevice string
    The NGFW device
    name String
    The vsys name
    ngfwDevice String
    The NGFW device
    name string
    The vsys name
    ngfwDevice string
    The NGFW device
    name str
    The vsys name
    ngfw_device str
    The NGFW device
    name String
    The vsys name
    ngfwDevice String
    The NGFW device

    GetPbfPolicyRulesPosition

    Where string
    Directly bool
    Pivot string
    Where string
    Directly bool
    Pivot string
    where String
    directly Boolean
    pivot String
    where string
    directly boolean
    pivot string
    where str
    directly bool
    pivot str
    where String
    directly Boolean
    pivot String

    GetPbfPolicyRulesRule

    Action GetPbfPolicyRulesRuleAction
    ActiveActiveDeviceBinding string
    Device binding configuration in HA Active-Active mode
    Applications List<string>
    AuditCommentVersion string
    Version trigger for audit comments. Change this value to send the auditcommentwo to PAN-OS. This attribute is not sent to PAN-OS itself, but serves as a trigger to detect when the audit comment should be updated.
    Description string
    DestinationAddresses List<string>
    Disabled bool
    Disable the rule
    EnforceSymmetricReturn GetPbfPolicyRulesRuleEnforceSymmetricReturn
    From GetPbfPolicyRulesRuleFrom
    GroupTag string
    Name string
    NegateDestination bool
    NegateSource bool
    Schedule string
    Services List<string>
    SourceAddresses List<string>
    SourceUsers List<string>
    Tags List<string>
    Target GetPbfPolicyRulesRuleTarget
    Action GetPbfPolicyRulesRuleAction
    ActiveActiveDeviceBinding string
    Device binding configuration in HA Active-Active mode
    Applications []string
    AuditCommentVersion string
    Version trigger for audit comments. Change this value to send the auditcommentwo to PAN-OS. This attribute is not sent to PAN-OS itself, but serves as a trigger to detect when the audit comment should be updated.
    Description string
    DestinationAddresses []string
    Disabled bool
    Disable the rule
    EnforceSymmetricReturn GetPbfPolicyRulesRuleEnforceSymmetricReturn
    From GetPbfPolicyRulesRuleFrom
    GroupTag string
    Name string
    NegateDestination bool
    NegateSource bool
    Schedule string
    Services []string
    SourceAddresses []string
    SourceUsers []string
    Tags []string
    Target GetPbfPolicyRulesRuleTarget
    action GetPbfPolicyRulesRuleAction
    activeActiveDeviceBinding String
    Device binding configuration in HA Active-Active mode
    applications List<String>
    auditCommentVersion String
    Version trigger for audit comments. Change this value to send the auditcommentwo to PAN-OS. This attribute is not sent to PAN-OS itself, but serves as a trigger to detect when the audit comment should be updated.
    description String
    destinationAddresses List<String>
    disabled Boolean
    Disable the rule
    enforceSymmetricReturn GetPbfPolicyRulesRuleEnforceSymmetricReturn
    from GetPbfPolicyRulesRuleFrom
    groupTag String
    name String
    negateDestination Boolean
    negateSource Boolean
    schedule String
    services List<String>
    sourceAddresses List<String>
    sourceUsers List<String>
    tags List<String>
    target GetPbfPolicyRulesRuleTarget
    action GetPbfPolicyRulesRuleAction
    activeActiveDeviceBinding string
    Device binding configuration in HA Active-Active mode
    applications string[]
    auditCommentVersion string
    Version trigger for audit comments. Change this value to send the auditcommentwo to PAN-OS. This attribute is not sent to PAN-OS itself, but serves as a trigger to detect when the audit comment should be updated.
    description string
    destinationAddresses string[]
    disabled boolean
    Disable the rule
    enforceSymmetricReturn GetPbfPolicyRulesRuleEnforceSymmetricReturn
    from GetPbfPolicyRulesRuleFrom
    groupTag string
    name string
    negateDestination boolean
    negateSource boolean
    schedule string
    services string[]
    sourceAddresses string[]
    sourceUsers string[]
    tags string[]
    target GetPbfPolicyRulesRuleTarget
    action GetPbfPolicyRulesRuleAction
    active_active_device_binding str
    Device binding configuration in HA Active-Active mode
    applications Sequence[str]
    audit_comment_version str
    Version trigger for audit comments. Change this value to send the auditcommentwo to PAN-OS. This attribute is not sent to PAN-OS itself, but serves as a trigger to detect when the audit comment should be updated.
    description str
    destination_addresses Sequence[str]
    disabled bool
    Disable the rule
    enforce_symmetric_return GetPbfPolicyRulesRuleEnforceSymmetricReturn
    from_ GetPbfPolicyRulesRuleFrom
    group_tag str
    name str
    negate_destination bool
    negate_source bool
    schedule str
    services Sequence[str]
    source_addresses Sequence[str]
    source_users Sequence[str]
    tags Sequence[str]
    target GetPbfPolicyRulesRuleTarget
    action Property Map
    activeActiveDeviceBinding String
    Device binding configuration in HA Active-Active mode
    applications List<String>
    auditCommentVersion String
    Version trigger for audit comments. Change this value to send the auditcommentwo to PAN-OS. This attribute is not sent to PAN-OS itself, but serves as a trigger to detect when the audit comment should be updated.
    description String
    destinationAddresses List<String>
    disabled Boolean
    Disable the rule
    enforceSymmetricReturn Property Map
    from Property Map
    groupTag String
    name String
    negateDestination Boolean
    negateSource Boolean
    schedule String
    services List<String>
    sourceAddresses List<String>
    sourceUsers List<String>
    tags List<String>
    target Property Map

    GetPbfPolicyRulesRuleAction

    discard Property Map
    forward Property Map
    forwardToVsys String
    Virtual system/Shared gateway to route packet to
    noPbf Property Map

    GetPbfPolicyRulesRuleActionForward

    egressInterface String
    Interface to route packet to
    monitor Property Map
    nexthop Property Map

    GetPbfPolicyRulesRuleActionForwardMonitor

    DisableIfUnreachable bool
    Disable this rule if nexthop/monitor ip is unreachable
    IpAddress string
    Monitor IP address
    Profile string
    Monitoring profile associated with this rule
    DisableIfUnreachable bool
    Disable this rule if nexthop/monitor ip is unreachable
    IpAddress string
    Monitor IP address
    Profile string
    Monitoring profile associated with this rule
    disableIfUnreachable Boolean
    Disable this rule if nexthop/monitor ip is unreachable
    ipAddress String
    Monitor IP address
    profile String
    Monitoring profile associated with this rule
    disableIfUnreachable boolean
    Disable this rule if nexthop/monitor ip is unreachable
    ipAddress string
    Monitor IP address
    profile string
    Monitoring profile associated with this rule
    disable_if_unreachable bool
    Disable this rule if nexthop/monitor ip is unreachable
    ip_address str
    Monitor IP address
    profile str
    Monitoring profile associated with this rule
    disableIfUnreachable Boolean
    Disable this rule if nexthop/monitor ip is unreachable
    ipAddress String
    Monitor IP address
    profile String
    Monitoring profile associated with this rule

    GetPbfPolicyRulesRuleActionForwardNexthop

    Fqdn string
    nexthop address FQDN name configuration
    IpAddress string
    Next hop IP address
    Fqdn string
    nexthop address FQDN name configuration
    IpAddress string
    Next hop IP address
    fqdn String
    nexthop address FQDN name configuration
    ipAddress String
    Next hop IP address
    fqdn string
    nexthop address FQDN name configuration
    ipAddress string
    Next hop IP address
    fqdn str
    nexthop address FQDN name configuration
    ip_address str
    Next hop IP address
    fqdn String
    nexthop address FQDN name configuration
    ipAddress String
    Next hop IP address

    GetPbfPolicyRulesRuleEnforceSymmetricReturn

    enabled Boolean
    Enable symmetric return
    nexthopAddressLists List<Property Map>

    GetPbfPolicyRulesRuleEnforceSymmetricReturnNexthopAddressList

    Name string
    Name string
    name String
    name string
    name str
    name String

    GetPbfPolicyRulesRuleFrom

    Interfaces List<string>
    Zones List<string>
    Interfaces []string
    Zones []string
    interfaces List<String>
    zones List<String>
    interfaces string[]
    zones string[]
    interfaces Sequence[str]
    zones Sequence[str]
    interfaces List<String>
    zones List<String>

    GetPbfPolicyRulesRuleTarget

    Devices List<GetPbfPolicyRulesRuleTargetDevice>
    Negate bool
    Target to all but these specified devices and tags
    Tags List<string>
    Devices []GetPbfPolicyRulesRuleTargetDevice
    Negate bool
    Target to all but these specified devices and tags
    Tags []string
    devices List<GetPbfPolicyRulesRuleTargetDevice>
    negate Boolean
    Target to all but these specified devices and tags
    tags List<String>
    devices GetPbfPolicyRulesRuleTargetDevice[]
    negate boolean
    Target to all but these specified devices and tags
    tags string[]
    devices Sequence[GetPbfPolicyRulesRuleTargetDevice]
    negate bool
    Target to all but these specified devices and tags
    tags Sequence[str]
    devices List<Property Map>
    negate Boolean
    Target to all but these specified devices and tags
    tags List<String>

    GetPbfPolicyRulesRuleTargetDevice

    GetPbfPolicyRulesRuleTargetDeviceVsy

    Name string
    Name string
    name String
    name string
    name str
    name String

    Package Details

    Repository
    panos paloaltonetworks/terraform-provider-panos
    License
    Notes
    This Pulumi package is based on the panos Terraform Provider.
    Viewing docs for panos 2.0.11
    published on Tuesday, Apr 28, 2026 by paloaltonetworks
    Schema (JSON)
    paloaltonetworks/terraform-provider-panos
      Try Pulumi Cloud free. Your team will thank you.