NatPolicyRules

panos 2.0.11, Apr 28 26

Viewing docs for panos 2.0.11
published on Tuesday, Apr 28, 2026 by paloaltonetworks

paloaltonetworks/terraform-provider-panos

Viewing docs for panos 2.0.11
published on Tuesday, Apr 28, 2026 by paloaltonetworks

paloaltonetworks/terraform-provider-panos

Create NatPolicyRules Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new NatPolicyRules(name: string, args: NatPolicyRulesArgs, opts?: CustomResourceOptions);

@overload
def NatPolicyRules(resource_name: str,
                   args: NatPolicyRulesArgs,
                   opts: Optional[ResourceOptions] = None)

@overload
def NatPolicyRules(resource_name: str,
                   opts: Optional[ResourceOptions] = None,
                   location: Optional[NatPolicyRulesLocationArgs] = None,
                   position: Optional[NatPolicyRulesPositionArgs] = None,
                   rules: Optional[Sequence[NatPolicyRulesRuleArgs]] = None)

func NewNatPolicyRules(ctx *Context, name string, args NatPolicyRulesArgs, opts ...ResourceOption) (*NatPolicyRules, error)

public NatPolicyRules(string name, NatPolicyRulesArgs args, CustomResourceOptions? opts = null)

public NatPolicyRules(String name, NatPolicyRulesArgs args)
public NatPolicyRules(String name, NatPolicyRulesArgs args, CustomResourceOptions options)

type: panos:NatPolicyRules
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name string: The unique name of the resource.
args NatPolicyRulesArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

resource_name str: The unique name of the resource.
args NatPolicyRulesArgs: The arguments to resource properties.
opts ResourceOptions: Bag of options to control resource's behavior.

ctx Context: Context object for the current deployment.
name string: The unique name of the resource.
args NatPolicyRulesArgs: The arguments to resource properties.
opts ResourceOption: Bag of options to control resource's behavior.

name string: The unique name of the resource.
args NatPolicyRulesArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

name String: The unique name of the resource.
args NatPolicyRulesArgs: The arguments to resource properties.
options CustomResourceOptions: Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var natPolicyRulesResource = new Panos.NatPolicyRules("natPolicyRulesResource", new()
{
    Location = new Panos.Inputs.NatPolicyRulesLocationArgs
    {
        DeviceGroup = new Panos.Inputs.NatPolicyRulesLocationDeviceGroupArgs
        {
            Name = "string",
            PanoramaDevice = "string",
            Rulebase = "string",
        },
        Shared = new Panos.Inputs.NatPolicyRulesLocationSharedArgs
        {
            Rulebase = "string",
        },
        Vsys = new Panos.Inputs.NatPolicyRulesLocationVsysArgs
        {
            Name = "string",
            NgfwDevice = "string",
        },
    },
    Position = new Panos.Inputs.NatPolicyRulesPositionArgs
    {
        Where = "string",
        Directly = false,
        Pivot = "string",
    },
    Rules = new[]
    {
        new Panos.Inputs.NatPolicyRulesRuleArgs
        {
            Name = "string",
            DynamicDestinationTranslation = new Panos.Inputs.NatPolicyRulesRuleDynamicDestinationTranslationArgs
            {
                Distribution = "string",
                TranslatedAddress = "string",
                TranslatedPort = 0,
            },
            NatType = "string",
            Description = "string",
            DestinationAddresses = new[]
            {
                "string",
            },
            DestinationTranslation = new Panos.Inputs.NatPolicyRulesRuleDestinationTranslationArgs
            {
                DnsRewrite = new Panos.Inputs.NatPolicyRulesRuleDestinationTranslationDnsRewriteArgs
                {
                    Direction = "string",
                },
                TranslatedAddress = "string",
                TranslatedPort = 0,
            },
            DestinationZones = new[]
            {
                "string",
            },
            Disabled = false,
            ActiveActiveDeviceBinding = "string",
            AuditCommentWo = "string",
            GroupTag = "string",
            AuditCommentVersion = "string",
            Service = "string",
            SourceAddresses = new[]
            {
                "string",
            },
            SourceTranslation = new Panos.Inputs.NatPolicyRulesRuleSourceTranslationArgs
            {
                DynamicIp = new Panos.Inputs.NatPolicyRulesRuleSourceTranslationDynamicIpArgs
                {
                    Fallback = new Panos.Inputs.NatPolicyRulesRuleSourceTranslationDynamicIpFallbackArgs
                    {
                        InterfaceAddress = new Panos.Inputs.NatPolicyRulesRuleSourceTranslationDynamicIpFallbackInterfaceAddressArgs
                        {
                            FloatingIp = "string",
                            Interface = "string",
                            Ip = "string",
                        },
                        TranslatedAddresses = new[]
                        {
                            "string",
                        },
                    },
                    TranslatedAddresses = new[]
                    {
                        "string",
                    },
                },
                DynamicIpAndPort = new Panos.Inputs.NatPolicyRulesRuleSourceTranslationDynamicIpAndPortArgs
                {
                    InterfaceAddress = new Panos.Inputs.NatPolicyRulesRuleSourceTranslationDynamicIpAndPortInterfaceAddressArgs
                    {
                        FloatingIp = "string",
                        Interface = "string",
                        Ip = "string",
                    },
                    TranslatedAddresses = new[]
                    {
                        "string",
                    },
                },
                StaticIp = new Panos.Inputs.NatPolicyRulesRuleSourceTranslationStaticIpArgs
                {
                    BiDirectional = "string",
                    TranslatedAddress = "string",
                },
            },
            SourceZones = new[]
            {
                "string",
            },
            Tags = new[]
            {
                "string",
            },
            Target = new Panos.Inputs.NatPolicyRulesRuleTargetArgs
            {
                Devices = new[]
                {
                    new Panos.Inputs.NatPolicyRulesRuleTargetDeviceArgs
                    {
                        Name = "string",
                        Vsys = new[]
                        {
                            new Panos.Inputs.NatPolicyRulesRuleTargetDeviceVsyArgs
                            {
                                Name = "string",
                            },
                        },
                    },
                },
                Negate = false,
                Tags = new[]
                {
                    "string",
                },
            },
            ToInterface = "string",
        },
    },
});

example, err := panos.NewNatPolicyRules(ctx, "natPolicyRulesResource", &panos.NatPolicyRulesArgs{
	Location: &panos.NatPolicyRulesLocationArgs{
		DeviceGroup: &panos.NatPolicyRulesLocationDeviceGroupArgs{
			Name:           pulumi.String("string"),
			PanoramaDevice: pulumi.String("string"),
			Rulebase:       pulumi.String("string"),
		},
		Shared: &panos.NatPolicyRulesLocationSharedArgs{
			Rulebase: pulumi.String("string"),
		},
		Vsys: &panos.NatPolicyRulesLocationVsysArgs{
			Name:       pulumi.String("string"),
			NgfwDevice: pulumi.String("string"),
		},
	},
	Position: &panos.NatPolicyRulesPositionArgs{
		Where:    pulumi.String("string"),
		Directly: pulumi.Bool(false),
		Pivot:    pulumi.String("string"),
	},
	Rules: panos.NatPolicyRulesRuleArray{
		&panos.NatPolicyRulesRuleArgs{
			Name: pulumi.String("string"),
			DynamicDestinationTranslation: &panos.NatPolicyRulesRuleDynamicDestinationTranslationArgs{
				Distribution:      pulumi.String("string"),
				TranslatedAddress: pulumi.String("string"),
				TranslatedPort:    pulumi.Float64(0),
			},
			NatType:     pulumi.String("string"),
			Description: pulumi.String("string"),
			DestinationAddresses: pulumi.StringArray{
				pulumi.String("string"),
			},
			DestinationTranslation: &panos.NatPolicyRulesRuleDestinationTranslationArgs{
				DnsRewrite: &panos.NatPolicyRulesRuleDestinationTranslationDnsRewriteArgs{
					Direction: pulumi.String("string"),
				},
				TranslatedAddress: pulumi.String("string"),
				TranslatedPort:    pulumi.Float64(0),
			},
			DestinationZones: pulumi.StringArray{
				pulumi.String("string"),
			},
			Disabled:                  pulumi.Bool(false),
			ActiveActiveDeviceBinding: pulumi.String("string"),
			AuditCommentWo:            pulumi.String("string"),
			GroupTag:                  pulumi.String("string"),
			AuditCommentVersion:       pulumi.String("string"),
			Service:                   pulumi.String("string"),
			SourceAddresses: pulumi.StringArray{
				pulumi.String("string"),
			},
			SourceTranslation: &panos.NatPolicyRulesRuleSourceTranslationArgs{
				DynamicIp: &panos.NatPolicyRulesRuleSourceTranslationDynamicIpArgs{
					Fallback: &panos.NatPolicyRulesRuleSourceTranslationDynamicIpFallbackArgs{
						InterfaceAddress: &panos.NatPolicyRulesRuleSourceTranslationDynamicIpFallbackInterfaceAddressArgs{
							FloatingIp: pulumi.String("string"),
							Interface:  pulumi.String("string"),
							Ip:         pulumi.String("string"),
						},
						TranslatedAddresses: pulumi.StringArray{
							pulumi.String("string"),
						},
					},
					TranslatedAddresses: pulumi.StringArray{
						pulumi.String("string"),
					},
				},
				DynamicIpAndPort: &panos.NatPolicyRulesRuleSourceTranslationDynamicIpAndPortArgs{
					InterfaceAddress: &panos.NatPolicyRulesRuleSourceTranslationDynamicIpAndPortInterfaceAddressArgs{
						FloatingIp: pulumi.String("string"),
						Interface:  pulumi.String("string"),
						Ip:         pulumi.String("string"),
					},
					TranslatedAddresses: pulumi.StringArray{
						pulumi.String("string"),
					},
				},
				StaticIp: &panos.NatPolicyRulesRuleSourceTranslationStaticIpArgs{
					BiDirectional:     pulumi.String("string"),
					TranslatedAddress: pulumi.String("string"),
				},
			},
			SourceZones: pulumi.StringArray{
				pulumi.String("string"),
			},
			Tags: pulumi.StringArray{
				pulumi.String("string"),
			},
			Target: &panos.NatPolicyRulesRuleTargetArgs{
				Devices: panos.NatPolicyRulesRuleTargetDeviceArray{
					&panos.NatPolicyRulesRuleTargetDeviceArgs{
						Name: pulumi.String("string"),
						Vsys: panos.NatPolicyRulesRuleTargetDeviceVsyArray{
							&panos.NatPolicyRulesRuleTargetDeviceVsyArgs{
								Name: pulumi.String("string"),
							},
						},
					},
				},
				Negate: pulumi.Bool(false),
				Tags: pulumi.StringArray{
					pulumi.String("string"),
				},
			},
			ToInterface: pulumi.String("string"),
		},
	},
})

var natPolicyRulesResource = new NatPolicyRules("natPolicyRulesResource", NatPolicyRulesArgs.builder()
    .location(NatPolicyRulesLocationArgs.builder()
        .deviceGroup(NatPolicyRulesLocationDeviceGroupArgs.builder()
            .name("string")
            .panoramaDevice("string")
            .rulebase("string")
            .build())
        .shared(NatPolicyRulesLocationSharedArgs.builder()
            .rulebase("string")
            .build())
        .vsys(NatPolicyRulesLocationVsysArgs.builder()
            .name("string")
            .ngfwDevice("string")
            .build())
        .build())
    .position(NatPolicyRulesPositionArgs.builder()
        .where("string")
        .directly(false)
        .pivot("string")
        .build())
    .rules(NatPolicyRulesRuleArgs.builder()
        .name("string")
        .dynamicDestinationTranslation(NatPolicyRulesRuleDynamicDestinationTranslationArgs.builder()
            .distribution("string")
            .translatedAddress("string")
            .translatedPort(0.0)
            .build())
        .natType("string")
        .description("string")
        .destinationAddresses("string")
        .destinationTranslation(NatPolicyRulesRuleDestinationTranslationArgs.builder()
            .dnsRewrite(NatPolicyRulesRuleDestinationTranslationDnsRewriteArgs.builder()
                .direction("string")
                .build())
            .translatedAddress("string")
            .translatedPort(0.0)
            .build())
        .destinationZones("string")
        .disabled(false)
        .activeActiveDeviceBinding("string")
        .auditCommentWo("string")
        .groupTag("string")
        .auditCommentVersion("string")
        .service("string")
        .sourceAddresses("string")
        .sourceTranslation(NatPolicyRulesRuleSourceTranslationArgs.builder()
            .dynamicIp(NatPolicyRulesRuleSourceTranslationDynamicIpArgs.builder()
                .fallback(NatPolicyRulesRuleSourceTranslationDynamicIpFallbackArgs.builder()
                    .interfaceAddress(NatPolicyRulesRuleSourceTranslationDynamicIpFallbackInterfaceAddressArgs.builder()
                        .floatingIp("string")
                        .interface_("string")
                        .ip("string")
                        .build())
                    .translatedAddresses("string")
                    .build())
                .translatedAddresses("string")
                .build())
            .dynamicIpAndPort(NatPolicyRulesRuleSourceTranslationDynamicIpAndPortArgs.builder()
                .interfaceAddress(NatPolicyRulesRuleSourceTranslationDynamicIpAndPortInterfaceAddressArgs.builder()
                    .floatingIp("string")
                    .interface_("string")
                    .ip("string")
                    .build())
                .translatedAddresses("string")
                .build())
            .staticIp(NatPolicyRulesRuleSourceTranslationStaticIpArgs.builder()
                .biDirectional("string")
                .translatedAddress("string")
                .build())
            .build())
        .sourceZones("string")
        .tags("string")
        .target(NatPolicyRulesRuleTargetArgs.builder()
            .devices(NatPolicyRulesRuleTargetDeviceArgs.builder()
                .name("string")
                .vsys(NatPolicyRulesRuleTargetDeviceVsyArgs.builder()
                    .name("string")
                    .build())
                .build())
            .negate(false)
            .tags("string")
            .build())
        .toInterface("string")
        .build())
    .build());

nat_policy_rules_resource = panos.NatPolicyRules("natPolicyRulesResource",
    location={
        "device_group": {
            "name": "string",
            "panorama_device": "string",
            "rulebase": "string",
        },
        "shared": {
            "rulebase": "string",
        },
        "vsys": {
            "name": "string",
            "ngfw_device": "string",
        },
    },
    position={
        "where": "string",
        "directly": False,
        "pivot": "string",
    },
    rules=[{
        "name": "string",
        "dynamic_destination_translation": {
            "distribution": "string",
            "translated_address": "string",
            "translated_port": float(0),
        },
        "nat_type": "string",
        "description": "string",
        "destination_addresses": ["string"],
        "destination_translation": {
            "dns_rewrite": {
                "direction": "string",
            },
            "translated_address": "string",
            "translated_port": float(0),
        },
        "destination_zones": ["string"],
        "disabled": False,
        "active_active_device_binding": "string",
        "audit_comment_wo": "string",
        "group_tag": "string",
        "audit_comment_version": "string",
        "service": "string",
        "source_addresses": ["string"],
        "source_translation": {
            "dynamic_ip": {
                "fallback": {
                    "interface_address": {
                        "floating_ip": "string",
                        "interface": "string",
                        "ip": "string",
                    },
                    "translated_addresses": ["string"],
                },
                "translated_addresses": ["string"],
            },
            "dynamic_ip_and_port": {
                "interface_address": {
                    "floating_ip": "string",
                    "interface": "string",
                    "ip": "string",
                },
                "translated_addresses": ["string"],
            },
            "static_ip": {
                "bi_directional": "string",
                "translated_address": "string",
            },
        },
        "source_zones": ["string"],
        "tags": ["string"],
        "target": {
            "devices": [{
                "name": "string",
                "vsys": [{
                    "name": "string",
                }],
            }],
            "negate": False,
            "tags": ["string"],
        },
        "to_interface": "string",
    }])

const natPolicyRulesResource = new panos.NatPolicyRules("natPolicyRulesResource", {
    location: {
        deviceGroup: {
            name: "string",
            panoramaDevice: "string",
            rulebase: "string",
        },
        shared: {
            rulebase: "string",
        },
        vsys: {
            name: "string",
            ngfwDevice: "string",
        },
    },
    position: {
        where: "string",
        directly: false,
        pivot: "string",
    },
    rules: [{
        name: "string",
        dynamicDestinationTranslation: {
            distribution: "string",
            translatedAddress: "string",
            translatedPort: 0,
        },
        natType: "string",
        description: "string",
        destinationAddresses: ["string"],
        destinationTranslation: {
            dnsRewrite: {
                direction: "string",
            },
            translatedAddress: "string",
            translatedPort: 0,
        },
        destinationZones: ["string"],
        disabled: false,
        activeActiveDeviceBinding: "string",
        auditCommentWo: "string",
        groupTag: "string",
        auditCommentVersion: "string",
        service: "string",
        sourceAddresses: ["string"],
        sourceTranslation: {
            dynamicIp: {
                fallback: {
                    interfaceAddress: {
                        floatingIp: "string",
                        "interface": "string",
                        ip: "string",
                    },
                    translatedAddresses: ["string"],
                },
                translatedAddresses: ["string"],
            },
            dynamicIpAndPort: {
                interfaceAddress: {
                    floatingIp: "string",
                    "interface": "string",
                    ip: "string",
                },
                translatedAddresses: ["string"],
            },
            staticIp: {
                biDirectional: "string",
                translatedAddress: "string",
            },
        },
        sourceZones: ["string"],
        tags: ["string"],
        target: {
            devices: [{
                name: "string",
                vsys: [{
                    name: "string",
                }],
            }],
            negate: false,
            tags: ["string"],
        },
        toInterface: "string",
    }],
});

type: panos:NatPolicyRules
properties:
    location:
        deviceGroup:
            name: string
            panoramaDevice: string
            rulebase: string
        shared:
            rulebase: string
        vsys:
            name: string
            ngfwDevice: string
    position:
        directly: false
        pivot: string
        where: string
    rules:
        - activeActiveDeviceBinding: string
          auditCommentVersion: string
          auditCommentWo: string
          description: string
          destinationAddresses:
            - string
          destinationTranslation:
            dnsRewrite:
                direction: string
            translatedAddress: string
            translatedPort: 0
          destinationZones:
            - string
          disabled: false
          dynamicDestinationTranslation:
            distribution: string
            translatedAddress: string
            translatedPort: 0
          groupTag: string
          name: string
          natType: string
          service: string
          sourceAddresses:
            - string
          sourceTranslation:
            dynamicIp:
                fallback:
                    interfaceAddress:
                        floatingIp: string
                        interface: string
                        ip: string
                    translatedAddresses:
                        - string
                translatedAddresses:
                    - string
            dynamicIpAndPort:
                interfaceAddress:
                    floatingIp: string
                    interface: string
                    ip: string
                translatedAddresses:
                    - string
            staticIp:
                biDirectional: string
                translatedAddress: string
          sourceZones:
            - string
          tags:
            - string
          target:
            devices:
                - name: string
                  vsys:
                    - name: string
            negate: false
            tags:
                - string
          toInterface: string

NatPolicyRules Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The NatPolicyRules resource accepts the following input properties:

Location NatPolicyRulesLocation: The location of this object.
Position NatPolicyRulesPosition
Rules List<NatPolicyRulesRule>

Location NatPolicyRulesLocationArgs: The location of this object.
Position NatPolicyRulesPositionArgs
Rules []NatPolicyRulesRuleArgs

location NatPolicyRulesLocation: The location of this object.
position NatPolicyRulesPosition
rules List<NatPolicyRulesRule>

location NatPolicyRulesLocation: The location of this object.
position NatPolicyRulesPosition
rules NatPolicyRulesRule[]

location NatPolicyRulesLocationArgs: The location of this object.
position NatPolicyRulesPositionArgs
rules Sequence[NatPolicyRulesRuleArgs]

location Property Map: The location of this object.
position Property Map
rules List<Property Map>

Outputs

All input properties are implicitly available as output properties. Additionally, the NatPolicyRules resource produces the following output properties:

Id string: The provider-assigned unique ID for this managed resource.

Id string: The provider-assigned unique ID for this managed resource.

id String: The provider-assigned unique ID for this managed resource.

id string: The provider-assigned unique ID for this managed resource.

id str: The provider-assigned unique ID for this managed resource.

id String: The provider-assigned unique ID for this managed resource.

Look up Existing NatPolicyRules Resource

Get an existing NatPolicyRules resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: NatPolicyRulesState, opts?: CustomResourceOptions): NatPolicyRules

@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        location: Optional[NatPolicyRulesLocationArgs] = None,
        position: Optional[NatPolicyRulesPositionArgs] = None,
        rules: Optional[Sequence[NatPolicyRulesRuleArgs]] = None) -> NatPolicyRules

func GetNatPolicyRules(ctx *Context, name string, id IDInput, state *NatPolicyRulesState, opts ...ResourceOption) (*NatPolicyRules, error)

public static NatPolicyRules Get(string name, Input<string> id, NatPolicyRulesState? state, CustomResourceOptions? opts = null)

public static NatPolicyRules get(String name, Output<String> id, NatPolicyRulesState state, CustomResourceOptions options)

resources:  _:    type: panos:NatPolicyRules    get:      id: ${id}

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

resource_name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

The following state arguments are supported:

Location NatPolicyRulesLocation: The location of this object.
Position NatPolicyRulesPosition
Rules List<NatPolicyRulesRule>

Location NatPolicyRulesLocationArgs: The location of this object.
Position NatPolicyRulesPositionArgs
Rules []NatPolicyRulesRuleArgs

location NatPolicyRulesLocation: The location of this object.
position NatPolicyRulesPosition
rules List<NatPolicyRulesRule>

location NatPolicyRulesLocation: The location of this object.
position NatPolicyRulesPosition
rules NatPolicyRulesRule[]

location NatPolicyRulesLocationArgs: The location of this object.
position NatPolicyRulesPositionArgs
rules Sequence[NatPolicyRulesRuleArgs]

location Property Map: The location of this object.
position Property Map
rules List<Property Map>

Supporting Types

NatPolicyRulesLocation, NatPolicyRulesLocationArgs

DeviceGroup NatPolicyRulesLocationDeviceGroup: Located in a specific device group rulebase
Shared NatPolicyRulesLocationShared: Located in a shared rulebase
Vsys NatPolicyRulesLocationVsys: Located in a specific vsys rulebase

DeviceGroup NatPolicyRulesLocationDeviceGroup: Located in a specific device group rulebase
Shared NatPolicyRulesLocationShared: Located in a shared rulebase
Vsys NatPolicyRulesLocationVsys: Located in a specific vsys rulebase

deviceGroup NatPolicyRulesLocationDeviceGroup: Located in a specific device group rulebase
shared NatPolicyRulesLocationShared: Located in a shared rulebase
vsys NatPolicyRulesLocationVsys: Located in a specific vsys rulebase

deviceGroup NatPolicyRulesLocationDeviceGroup: Located in a specific device group rulebase
shared NatPolicyRulesLocationShared: Located in a shared rulebase
vsys NatPolicyRulesLocationVsys: Located in a specific vsys rulebase

device_group NatPolicyRulesLocationDeviceGroup: Located in a specific device group rulebase
shared NatPolicyRulesLocationShared: Located in a shared rulebase
vsys NatPolicyRulesLocationVsys: Located in a specific vsys rulebase

deviceGroup Property Map: Located in a specific device group rulebase
shared Property Map: Located in a shared rulebase
vsys Property Map: Located in a specific vsys rulebase

NatPolicyRulesLocationDeviceGroup, NatPolicyRulesLocationDeviceGroupArgs

Name string: The device group name
PanoramaDevice string: The panorama device
Rulebase string: The rulebase

Name string: The device group name
PanoramaDevice string: The panorama device
Rulebase string: The rulebase

name String: The device group name
panoramaDevice String: The panorama device
rulebase String: The rulebase

name string: The device group name
panoramaDevice string: The panorama device
rulebase string: The rulebase

name str: The device group name
panorama_device str: The panorama device
rulebase str: The rulebase

name String: The device group name
panoramaDevice String: The panorama device
rulebase String: The rulebase

NatPolicyRulesLocationShared, NatPolicyRulesLocationSharedArgs

Rulebase string: Rulebase name

Rulebase string: Rulebase name

rulebase String: Rulebase name

rulebase string: Rulebase name

rulebase str: Rulebase name

rulebase String: Rulebase name

NatPolicyRulesLocationVsys, NatPolicyRulesLocationVsysArgs

Name string: The vsys name
NgfwDevice string: The NGFW device

Name string: The vsys name
NgfwDevice string: The NGFW device

name String: The vsys name
ngfwDevice String: The NGFW device

name string: The vsys name
ngfwDevice string: The NGFW device

name str: The vsys name
ngfw_device str: The NGFW device

name String: The vsys name
ngfwDevice String: The NGFW device

NatPolicyRulesPosition, NatPolicyRulesPositionArgs

Where string
Directly bool
Pivot string

Where string
Directly bool
Pivot string

where String
directly Boolean
pivot String

where string
directly boolean
pivot string

where str
directly bool
pivot str

where String
directly Boolean
pivot String

NatPolicyRulesRule, NatPolicyRulesRuleArgs

Name string
ActiveActiveDeviceBinding string: Device binding configuration in HA Active-Active mode
AuditCommentVersion string: Version trigger for audit comments. Change this value to send the auditcommentwo to PAN-OS. This attribute is not sent to PAN-OS itself, but serves as a trigger to detect when the audit comment should be updated.
AuditCommentWo string: Write-only audit comment for this rule. This value is sent to PAN-OS but not read back. Changes are only sent when auditcommentversion is modified. Each time auditcommentversion changes, this comment is added to the audit history with a timestamp.
Description string
DestinationAddresses List<string>
DestinationTranslation NatPolicyRulesRuleDestinationTranslation
DestinationZones List<string>
Disabled bool: Disable the rule
DynamicDestinationTranslation NatPolicyRulesRuleDynamicDestinationTranslation
GroupTag string
NatType string: type of nat
Service string
SourceAddresses List<string>
SourceTranslation NatPolicyRulesRuleSourceTranslation
SourceZones List<string>
Tags List<string>
Target NatPolicyRulesRuleTarget
ToInterface string: Egress interface from route lookup

Name string
ActiveActiveDeviceBinding string: Device binding configuration in HA Active-Active mode
AuditCommentVersion string: Version trigger for audit comments. Change this value to send the auditcommentwo to PAN-OS. This attribute is not sent to PAN-OS itself, but serves as a trigger to detect when the audit comment should be updated.
AuditCommentWo string: Write-only audit comment for this rule. This value is sent to PAN-OS but not read back. Changes are only sent when auditcommentversion is modified. Each time auditcommentversion changes, this comment is added to the audit history with a timestamp.
Description string
DestinationAddresses []string
DestinationTranslation NatPolicyRulesRuleDestinationTranslation
DestinationZones []string
Disabled bool: Disable the rule
DynamicDestinationTranslation NatPolicyRulesRuleDynamicDestinationTranslation
GroupTag string
NatType string: type of nat
Service string
SourceAddresses []string
SourceTranslation NatPolicyRulesRuleSourceTranslation
SourceZones []string
Tags []string
Target NatPolicyRulesRuleTarget
ToInterface string: Egress interface from route lookup

name String
activeActiveDeviceBinding String: Device binding configuration in HA Active-Active mode
auditCommentVersion String: Version trigger for audit comments. Change this value to send the auditcommentwo to PAN-OS. This attribute is not sent to PAN-OS itself, but serves as a trigger to detect when the audit comment should be updated.
auditCommentWo String: Write-only audit comment for this rule. This value is sent to PAN-OS but not read back. Changes are only sent when auditcommentversion is modified. Each time auditcommentversion changes, this comment is added to the audit history with a timestamp.
description String
destinationAddresses List<String>
destinationTranslation NatPolicyRulesRuleDestinationTranslation
destinationZones List<String>
disabled Boolean: Disable the rule
dynamicDestinationTranslation NatPolicyRulesRuleDynamicDestinationTranslation
groupTag String
natType String: type of nat
service String
sourceAddresses List<String>
sourceTranslation NatPolicyRulesRuleSourceTranslation
sourceZones List<String>
tags List<String>
target NatPolicyRulesRuleTarget
toInterface String: Egress interface from route lookup

name string
activeActiveDeviceBinding string: Device binding configuration in HA Active-Active mode
auditCommentVersion string: Version trigger for audit comments. Change this value to send the auditcommentwo to PAN-OS. This attribute is not sent to PAN-OS itself, but serves as a trigger to detect when the audit comment should be updated.
auditCommentWo string: Write-only audit comment for this rule. This value is sent to PAN-OS but not read back. Changes are only sent when auditcommentversion is modified. Each time auditcommentversion changes, this comment is added to the audit history with a timestamp.
description string
destinationAddresses string[]
destinationTranslation NatPolicyRulesRuleDestinationTranslation
destinationZones string[]
disabled boolean: Disable the rule
dynamicDestinationTranslation NatPolicyRulesRuleDynamicDestinationTranslation
groupTag string
natType string: type of nat
service string
sourceAddresses string[]
sourceTranslation NatPolicyRulesRuleSourceTranslation
sourceZones string[]
tags string[]
target NatPolicyRulesRuleTarget
toInterface string: Egress interface from route lookup

name str
active_active_device_binding str: Device binding configuration in HA Active-Active mode
audit_comment_version str: Version trigger for audit comments. Change this value to send the auditcommentwo to PAN-OS. This attribute is not sent to PAN-OS itself, but serves as a trigger to detect when the audit comment should be updated.
audit_comment_wo str: Write-only audit comment for this rule. This value is sent to PAN-OS but not read back. Changes are only sent when auditcommentversion is modified. Each time auditcommentversion changes, this comment is added to the audit history with a timestamp.
description str
destination_addresses Sequence[str]
destination_translation NatPolicyRulesRuleDestinationTranslation
destination_zones Sequence[str]
disabled bool: Disable the rule
dynamic_destination_translation NatPolicyRulesRuleDynamicDestinationTranslation
group_tag str
nat_type str: type of nat
service str
source_addresses Sequence[str]
source_translation NatPolicyRulesRuleSourceTranslation
source_zones Sequence[str]
tags Sequence[str]
target NatPolicyRulesRuleTarget
to_interface str: Egress interface from route lookup

name String
activeActiveDeviceBinding String: Device binding configuration in HA Active-Active mode
auditCommentVersion String: Version trigger for audit comments. Change this value to send the auditcommentwo to PAN-OS. This attribute is not sent to PAN-OS itself, but serves as a trigger to detect when the audit comment should be updated.
auditCommentWo String: Write-only audit comment for this rule. This value is sent to PAN-OS but not read back. Changes are only sent when auditcommentversion is modified. Each time auditcommentversion changes, this comment is added to the audit history with a timestamp.
description String
destinationAddresses List<String>
destinationTranslation Property Map
destinationZones List<String>
disabled Boolean: Disable the rule
dynamicDestinationTranslation Property Map
groupTag String
natType String: type of nat
service String
sourceAddresses List<String>
sourceTranslation Property Map
sourceZones List<String>
tags List<String>
target Property Map
toInterface String: Egress interface from route lookup

NatPolicyRulesRuleDestinationTranslation, NatPolicyRulesRuleDestinationTranslationArgs

DnsRewrite NatPolicyRulesRuleDestinationTranslationDnsRewrite
TranslatedAddress string
TranslatedPort double

DnsRewrite NatPolicyRulesRuleDestinationTranslationDnsRewrite
TranslatedAddress string
TranslatedPort float64

dnsRewrite NatPolicyRulesRuleDestinationTranslationDnsRewrite
translatedAddress String
translatedPort Double

dnsRewrite NatPolicyRulesRuleDestinationTranslationDnsRewrite
translatedAddress string
translatedPort number

dns_rewrite NatPolicyRulesRuleDestinationTranslationDnsRewrite
translated_address str
translated_port float

dnsRewrite Property Map
translatedAddress String
translatedPort Number

NatPolicyRulesRuleDestinationTranslationDnsRewrite, NatPolicyRulesRuleDestinationTranslationDnsRewriteArgs

Direction string: Select direction to apply DNS rewrite

Direction string: Select direction to apply DNS rewrite

direction String: Select direction to apply DNS rewrite

direction string: Select direction to apply DNS rewrite

direction str: Select direction to apply DNS rewrite

direction String: Select direction to apply DNS rewrite

NatPolicyRulesRuleDynamicDestinationTranslation, NatPolicyRulesRuleDynamicDestinationTranslationArgs

Distribution string: Distribution algorithm for destination address pool
TranslatedAddress string
TranslatedPort double

Distribution string: Distribution algorithm for destination address pool
TranslatedAddress string
TranslatedPort float64

distribution String: Distribution algorithm for destination address pool
translatedAddress String
translatedPort Double

distribution string: Distribution algorithm for destination address pool
translatedAddress string
translatedPort number

distribution str: Distribution algorithm for destination address pool
translated_address str
translated_port float

distribution String: Distribution algorithm for destination address pool
translatedAddress String
translatedPort Number

NatPolicyRulesRuleSourceTranslation, NatPolicyRulesRuleSourceTranslationArgs

DynamicIp NatPolicyRulesRuleSourceTranslationDynamicIp
DynamicIpAndPort NatPolicyRulesRuleSourceTranslationDynamicIpAndPort
StaticIp NatPolicyRulesRuleSourceTranslationStaticIp

DynamicIp NatPolicyRulesRuleSourceTranslationDynamicIp
DynamicIpAndPort NatPolicyRulesRuleSourceTranslationDynamicIpAndPort
StaticIp NatPolicyRulesRuleSourceTranslationStaticIp

dynamicIp NatPolicyRulesRuleSourceTranslationDynamicIp
dynamicIpAndPort NatPolicyRulesRuleSourceTranslationDynamicIpAndPort
staticIp NatPolicyRulesRuleSourceTranslationStaticIp

dynamicIp NatPolicyRulesRuleSourceTranslationDynamicIp
dynamicIpAndPort NatPolicyRulesRuleSourceTranslationDynamicIpAndPort
staticIp NatPolicyRulesRuleSourceTranslationStaticIp

dynamic_ip NatPolicyRulesRuleSourceTranslationDynamicIp
dynamic_ip_and_port NatPolicyRulesRuleSourceTranslationDynamicIpAndPort
static_ip NatPolicyRulesRuleSourceTranslationStaticIp

dynamicIp Property Map
dynamicIpAndPort Property Map
staticIp Property Map

NatPolicyRulesRuleSourceTranslationDynamicIp, NatPolicyRulesRuleSourceTranslationDynamicIpArgs

Fallback NatPolicyRulesRuleSourceTranslationDynamicIpFallback
TranslatedAddresses List<string>

Fallback NatPolicyRulesRuleSourceTranslationDynamicIpFallback
TranslatedAddresses []string

fallback NatPolicyRulesRuleSourceTranslationDynamicIpFallback
translatedAddresses List<String>

fallback NatPolicyRulesRuleSourceTranslationDynamicIpFallback
translatedAddresses string[]

fallback NatPolicyRulesRuleSourceTranslationDynamicIpFallback
translated_addresses Sequence[str]

fallback Property Map
translatedAddresses List<String>

NatPolicyRulesRuleSourceTranslationDynamicIpAndPort, NatPolicyRulesRuleSourceTranslationDynamicIpAndPortArgs

InterfaceAddress NatPolicyRulesRuleSourceTranslationDynamicIpAndPortInterfaceAddress
TranslatedAddresses List<string>

InterfaceAddress NatPolicyRulesRuleSourceTranslationDynamicIpAndPortInterfaceAddress
TranslatedAddresses []string

interfaceAddress NatPolicyRulesRuleSourceTranslationDynamicIpAndPortInterfaceAddress
translatedAddresses List<String>

interfaceAddress NatPolicyRulesRuleSourceTranslationDynamicIpAndPortInterfaceAddress
translatedAddresses string[]

interface_address NatPolicyRulesRuleSourceTranslationDynamicIpAndPortInterfaceAddress
translated_addresses Sequence[str]

interfaceAddress Property Map
translatedAddresses List<String>

NatPolicyRulesRuleSourceTranslationDynamicIpAndPortInterfaceAddress, NatPolicyRulesRuleSourceTranslationDynamicIpAndPortInterfaceAddressArgs

FloatingIp string: Floating IP address in HA Active-Active configuration
Interface string: Interface name
Ip string: specify exact IP address if interface has multiple addresses

FloatingIp string: Floating IP address in HA Active-Active configuration
Interface string: Interface name
Ip string: specify exact IP address if interface has multiple addresses

floatingIp String: Floating IP address in HA Active-Active configuration
interface_ String: Interface name
ip String: specify exact IP address if interface has multiple addresses

floatingIp string: Floating IP address in HA Active-Active configuration
interface string: Interface name
ip string: specify exact IP address if interface has multiple addresses

floating_ip str: Floating IP address in HA Active-Active configuration
interface str: Interface name
ip str: specify exact IP address if interface has multiple addresses

floatingIp String: Floating IP address in HA Active-Active configuration
interface String: Interface name
ip String: specify exact IP address if interface has multiple addresses

NatPolicyRulesRuleSourceTranslationDynamicIpFallback, NatPolicyRulesRuleSourceTranslationDynamicIpFallbackArgs

InterfaceAddress NatPolicyRulesRuleSourceTranslationDynamicIpFallbackInterfaceAddress
TranslatedAddresses List<string>

InterfaceAddress NatPolicyRulesRuleSourceTranslationDynamicIpFallbackInterfaceAddress
TranslatedAddresses []string

interfaceAddress NatPolicyRulesRuleSourceTranslationDynamicIpFallbackInterfaceAddress
translatedAddresses List<String>

interfaceAddress NatPolicyRulesRuleSourceTranslationDynamicIpFallbackInterfaceAddress
translatedAddresses string[]

interface_address NatPolicyRulesRuleSourceTranslationDynamicIpFallbackInterfaceAddress
translated_addresses Sequence[str]

interfaceAddress Property Map
translatedAddresses List<String>

NatPolicyRulesRuleSourceTranslationDynamicIpFallbackInterfaceAddress, NatPolicyRulesRuleSourceTranslationDynamicIpFallbackInterfaceAddressArgs

FloatingIp string: Floating IP address in HA Active-Active configuration
Interface string: Interface name
Ip string: specify exact IP address if interface has multiple addresses

FloatingIp string: Floating IP address in HA Active-Active configuration
Interface string: Interface name
Ip string: specify exact IP address if interface has multiple addresses

floatingIp String: Floating IP address in HA Active-Active configuration
interface_ String: Interface name
ip String: specify exact IP address if interface has multiple addresses

floatingIp string: Floating IP address in HA Active-Active configuration
interface string: Interface name
ip string: specify exact IP address if interface has multiple addresses

floating_ip str: Floating IP address in HA Active-Active configuration
interface str: Interface name
ip str: specify exact IP address if interface has multiple addresses

floatingIp String: Floating IP address in HA Active-Active configuration
interface String: Interface name
ip String: specify exact IP address if interface has multiple addresses

NatPolicyRulesRuleSourceTranslationStaticIp, NatPolicyRulesRuleSourceTranslationStaticIpArgs

BiDirectional string: allow reverse translation from translated address to original address
TranslatedAddress string

BiDirectional string: allow reverse translation from translated address to original address
TranslatedAddress string

biDirectional String: allow reverse translation from translated address to original address
translatedAddress String

biDirectional string: allow reverse translation from translated address to original address
translatedAddress string

bi_directional str: allow reverse translation from translated address to original address
translated_address str

biDirectional String: allow reverse translation from translated address to original address
translatedAddress String

NatPolicyRulesRuleTarget, NatPolicyRulesRuleTargetArgs

Devices List<NatPolicyRulesRuleTargetDevice>
Negate bool: Target to all but these specified devices and tags
Tags List<string>

Devices []NatPolicyRulesRuleTargetDevice
Negate bool: Target to all but these specified devices and tags
Tags []string

devices List<NatPolicyRulesRuleTargetDevice>
negate Boolean: Target to all but these specified devices and tags
tags List<String>

devices NatPolicyRulesRuleTargetDevice[]
negate boolean: Target to all but these specified devices and tags
tags string[]

devices Sequence[NatPolicyRulesRuleTargetDevice]
negate bool: Target to all but these specified devices and tags
tags Sequence[str]

devices List<Property Map>
negate Boolean: Target to all but these specified devices and tags
tags List<String>

NatPolicyRulesRuleTargetDevice, NatPolicyRulesRuleTargetDeviceArgs

Name string
Vsys List<NatPolicyRulesRuleTargetDeviceVsy>

Name string
Vsys []NatPolicyRulesRuleTargetDeviceVsy

name String
vsys List<NatPolicyRulesRuleTargetDeviceVsy>

name string
vsys NatPolicyRulesRuleTargetDeviceVsy[]

name str
vsys Sequence[NatPolicyRulesRuleTargetDeviceVsy]

name String
vsys List<Property Map>

NatPolicyRulesRuleTargetDeviceVsy, NatPolicyRulesRuleTargetDeviceVsyArgs

Name string

Name string

name String

name string

name str

name String

Package Details

Repository: panos paloaltonetworks/terraform-provider-panos
License
Notes: This Pulumi package is based on the panos Terraform Provider.

Viewing docs for panos 2.0.11
published on Tuesday, Apr 28, 2026 by paloaltonetworks

Schema (JSON)

paloaltonetworks/terraform-provider-panos

panos.NatPolicyRules

On this page

On this page

Create NatPolicyRules Resource

Constructor syntax

Parameters

Constructor example

NatPolicyRules Resource Properties

Inputs

Outputs

Look up Existing NatPolicyRules Resource

Supporting Types

NatPolicyRulesLocation, NatPolicyRulesLocationArgs

NatPolicyRulesLocationDeviceGroup, NatPolicyRulesLocationDeviceGroupArgs

NatPolicyRulesLocationShared, NatPolicyRulesLocationSharedArgs

NatPolicyRulesLocationVsys, NatPolicyRulesLocationVsysArgs

NatPolicyRulesPosition, NatPolicyRulesPositionArgs

NatPolicyRulesRule, NatPolicyRulesRuleArgs

NatPolicyRulesRuleDestinationTranslation, NatPolicyRulesRuleDestinationTranslationArgs

NatPolicyRulesRuleDestinationTranslationDnsRewrite, NatPolicyRulesRuleDestinationTranslationDnsRewriteArgs

NatPolicyRulesRuleDynamicDestinationTranslation, NatPolicyRulesRuleDynamicDestinationTranslationArgs

NatPolicyRulesRuleSourceTranslation, NatPolicyRulesRuleSourceTranslationArgs

NatPolicyRulesRuleSourceTranslationDynamicIp, NatPolicyRulesRuleSourceTranslationDynamicIpArgs

NatPolicyRulesRuleSourceTranslationDynamicIpAndPort, NatPolicyRulesRuleSourceTranslationDynamicIpAndPortArgs

NatPolicyRulesRuleSourceTranslationDynamicIpAndPortInterfaceAddress, NatPolicyRulesRuleSourceTranslationDynamicIpAndPortInterfaceAddressArgs

NatPolicyRulesRuleSourceTranslationDynamicIpFallback, NatPolicyRulesRuleSourceTranslationDynamicIpFallbackArgs

NatPolicyRulesRuleSourceTranslationDynamicIpFallbackInterfaceAddress, NatPolicyRulesRuleSourceTranslationDynamicIpFallbackInterfaceAddressArgs

NatPolicyRulesRuleSourceTranslationStaticIp, NatPolicyRulesRuleSourceTranslationStaticIpArgs

NatPolicyRulesRuleTarget, NatPolicyRulesRuleTargetArgs

NatPolicyRulesRuleTargetDevice, NatPolicyRulesRuleTargetDeviceArgs

NatPolicyRulesRuleTargetDeviceVsy, NatPolicyRulesRuleTargetDeviceVsyArgs

Package Details

On this page

On this page