1. Packages
  2. Packages
  3. Cisco Catalyst SD-WAN Provider
  4. API Docs
  5. EmbeddedSecurityNgfwPolicy
Viewing docs for Cisco Catalyst SD-WAN v0.8.1
published on Tuesday, Apr 7, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-sdwan

sdwan.EmbeddedSecurityNgfwPolicy

sdwan logo
Viewing docs for Cisco Catalyst SD-WAN v0.8.1
published on Tuesday, Apr 7, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-sdwan

    This resource can manage a Embedded Security NGFW Policy.

    • Minimum SD-WAN Manager version: 20.15.0

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as sdwan from "@pulumi/sdwan";

const example = new sdwan.EmbeddedSecurityNgfwPolicy("example", {
    name: "Example",
    description: "My Example",
    featureProfileId: "f6dd22c8-0b4f-496c-9a0b-6813d1f8b8ac",
    defaultAction: "pass",
    sequences: [{
        sequenceId: "1",
        sequenceName: "security",
        baseAction: "drop",
        sequenceType: "ngfirewall",
        disableSequence: false,
        matchEntries: [{
            sourcePorts: ["123"],
        }],
        actions: [{
            type: "log",
            parameter: "true",
        }],
    }],
});

    import pulumi
import pulumi_sdwan as sdwan

example = sdwan.EmbeddedSecurityNgfwPolicy("example",
    name="Example",
    description="My Example",
    feature_profile_id="f6dd22c8-0b4f-496c-9a0b-6813d1f8b8ac",
    default_action="pass",
    sequences=[{
        "sequence_id": "1",
        "sequence_name": "security",
        "base_action": "drop",
        "sequence_type": "ngfirewall",
        "disable_sequence": False,
        "match_entries": [{
            "source_ports": ["123"],
        }],
        "actions": [{
            "type": "log",
            "parameter": "true",
        }],
    }])

    package main

import (
	"github.com/pulumi/pulumi-sdwan/sdk/go/sdwan"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := sdwan.NewEmbeddedSecurityNgfwPolicy(ctx, "example", &sdwan.EmbeddedSecurityNgfwPolicyArgs{
			Name:             pulumi.String("Example"),
			Description:      pulumi.String("My Example"),
			FeatureProfileId: pulumi.String("f6dd22c8-0b4f-496c-9a0b-6813d1f8b8ac"),
			DefaultAction:    pulumi.String("pass"),
			Sequences: sdwan.EmbeddedSecurityNgfwPolicySequenceArray{
				&sdwan.EmbeddedSecurityNgfwPolicySequenceArgs{
					SequenceId:      pulumi.String("1"),
					SequenceName:    pulumi.String("security"),
					BaseAction:      pulumi.String("drop"),
					SequenceType:    pulumi.String("ngfirewall"),
					DisableSequence: pulumi.Bool(false),
					MatchEntries: sdwan.EmbeddedSecurityNgfwPolicySequenceMatchEntryArray{
						&sdwan.EmbeddedSecurityNgfwPolicySequenceMatchEntryArgs{
							SourcePorts: pulumi.StringArray{
								pulumi.String("123"),
							},
						},
					},
					Actions: sdwan.EmbeddedSecurityNgfwPolicySequenceActionArray{
						&sdwan.EmbeddedSecurityNgfwPolicySequenceActionArgs{
							Type:      pulumi.String("log"),
							Parameter: pulumi.String("true"),
						},
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Sdwan = Pulumi.Sdwan;

return await Deployment.RunAsync(() => 
{
    var example = new Sdwan.EmbeddedSecurityNgfwPolicy("example", new()
    {
        Name = "Example",
        Description = "My Example",
        FeatureProfileId = "f6dd22c8-0b4f-496c-9a0b-6813d1f8b8ac",
        DefaultAction = "pass",
        Sequences = new[]
        {
            new Sdwan.Inputs.EmbeddedSecurityNgfwPolicySequenceArgs
            {
                SequenceId = "1",
                SequenceName = "security",
                BaseAction = "drop",
                SequenceType = "ngfirewall",
                DisableSequence = false,
                MatchEntries = new[]
                {
                    new Sdwan.Inputs.EmbeddedSecurityNgfwPolicySequenceMatchEntryArgs
                    {
                        SourcePorts = new[]
                        {
                            "123",
                        },
                    },
                },
                Actions = new[]
                {
                    new Sdwan.Inputs.EmbeddedSecurityNgfwPolicySequenceActionArgs
                    {
                        Type = "log",
                        Parameter = "true",
                    },
                },
            },
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.sdwan.EmbeddedSecurityNgfwPolicy;
import com.pulumi.sdwan.EmbeddedSecurityNgfwPolicyArgs;
import com.pulumi.sdwan.inputs.EmbeddedSecurityNgfwPolicySequenceArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new EmbeddedSecurityNgfwPolicy("example", EmbeddedSecurityNgfwPolicyArgs.builder()
            .name("Example")
            .description("My Example")
            .featureProfileId("f6dd22c8-0b4f-496c-9a0b-6813d1f8b8ac")
            .defaultAction("pass")
            .sequences(EmbeddedSecurityNgfwPolicySequenceArgs.builder()
                .sequenceId("1")
                .sequenceName("security")
                .baseAction("drop")
                .sequenceType("ngfirewall")
                .disableSequence(false)
                .matchEntries(EmbeddedSecurityNgfwPolicySequenceMatchEntryArgs.builder()
                    .sourcePorts("123")
                    .build())
                .actions(EmbeddedSecurityNgfwPolicySequenceActionArgs.builder()
                    .type("log")
                    .parameter("true")
                    .build())
                .build())
            .build());

    }
}

    resources:
  example:
    type: sdwan:EmbeddedSecurityNgfwPolicy
    properties:
      name: Example
      description: My Example
      featureProfileId: f6dd22c8-0b4f-496c-9a0b-6813d1f8b8ac
      defaultAction: pass
      sequences:
        - sequenceId: '1'
          sequenceName: security
          baseAction: drop
          sequenceType: ngfirewall
          disableSequence: false
          matchEntries:
            - sourcePorts:
                - '123'
          actions:
            - type: log
              parameter: 'true'

    Example coming soon!

    Create EmbeddedSecurityNgfwPolicy Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new EmbeddedSecurityNgfwPolicy(name: string, args: EmbeddedSecurityNgfwPolicyArgs, opts?: CustomResourceOptions);
    @overload
def EmbeddedSecurityNgfwPolicy(resource_name: str,
                               args: EmbeddedSecurityNgfwPolicyArgs,
                               opts: Optional[ResourceOptions] = None)

@overload
def EmbeddedSecurityNgfwPolicy(resource_name: str,
                               opts: Optional[ResourceOptions] = None,
                               default_action: Optional[str] = None,
                               feature_profile_id: Optional[str] = None,
                               description: Optional[str] = None,
                               name: Optional[str] = None,
                               sequences: Optional[Sequence[EmbeddedSecurityNgfwPolicySequenceArgs]] = None)
    func NewEmbeddedSecurityNgfwPolicy(ctx *Context, name string, args EmbeddedSecurityNgfwPolicyArgs, opts ...ResourceOption) (*EmbeddedSecurityNgfwPolicy, error)
    public EmbeddedSecurityNgfwPolicy(string name, EmbeddedSecurityNgfwPolicyArgs args, CustomResourceOptions? opts = null)
    public EmbeddedSecurityNgfwPolicy(String name, EmbeddedSecurityNgfwPolicyArgs args)
public EmbeddedSecurityNgfwPolicy(String name, EmbeddedSecurityNgfwPolicyArgs args, CustomResourceOptions options)

    type: sdwan:EmbeddedSecurityNgfwPolicy
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "sdwan_embeddedsecurityngfwpolicy" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args EmbeddedSecurityNgfwPolicyArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args EmbeddedSecurityNgfwPolicyArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args EmbeddedSecurityNgfwPolicyArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args EmbeddedSecurityNgfwPolicyArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args EmbeddedSecurityNgfwPolicyArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var embeddedSecurityNgfwPolicyResource = new Sdwan.EmbeddedSecurityNgfwPolicy("embeddedSecurityNgfwPolicyResource", new()
{
    DefaultAction = "string",
    FeatureProfileId = "string",
    Description = "string",
    Name = "string",
    Sequences = new[]
    {
        new Sdwan.Inputs.EmbeddedSecurityNgfwPolicySequenceArgs
        {
            Actions = new[]
            {
                new Sdwan.Inputs.EmbeddedSecurityNgfwPolicySequenceActionArgs
                {
                    Parameter = "string",
                    ParameterId = "string",
                    Type = "string",
                },
            },
            BaseAction = "string",
            DisableSequence = false,
            MatchEntries = new[]
            {
                new Sdwan.Inputs.EmbeddedSecurityNgfwPolicySequenceMatchEntryArgs
                {
                    AppListIds = new[]
                    {
                        "string",
                    },
                    ApplicationFamilies = new[]
                    {
                        "string",
                    },
                    Applications = new[]
                    {
                        "string",
                    },
                    DestinationDataPrefixListIds = new[]
                    {
                        "string",
                    },
                    DestinationDataPrefixes = new[]
                    {
                        "string",
                    },
                    DestinationDataPrefixesVariable = "string",
                    DestinationFqdnListIds = new[]
                    {
                        "string",
                    },
                    DestinationFqdns = new[]
                    {
                        "string",
                    },
                    DestinationFqdnsVariable = "string",
                    DestinationGeoLocationListIds = new[]
                    {
                        "string",
                    },
                    DestinationGeoLocations = new[]
                    {
                        "string",
                    },
                    DestinationGeoLocationsVariable = "string",
                    DestinationPortListIds = new[]
                    {
                        "string",
                    },
                    DestinationPorts = new[]
                    {
                        "string",
                    },
                    DestinationPortsVariable = "string",
                    DestinationScalableGroupTagListIds = new[]
                    {
                        "string",
                    },
                    DestinationSecurityGroupListIds = new[]
                    {
                        "string",
                    },
                    FlatAppListIds = new[]
                    {
                        "string",
                    },
                    ProtocolNameListIds = new[]
                    {
                        "string",
                    },
                    ProtocolNames = new[]
                    {
                        "string",
                    },
                    Protocols = new[]
                    {
                        "string",
                    },
                    SourceDataPrefixListIds = new[]
                    {
                        "string",
                    },
                    SourceDataPrefixes = new[]
                    {
                        "string",
                    },
                    SourceDataPrefixesVariable = "string",
                    SourceGeoLocationListIds = new[]
                    {
                        "string",
                    },
                    SourceGeoLocations = new[]
                    {
                        "string",
                    },
                    SourceGeoLocationsVariable = "string",
                    SourceIdentityListIds = new[]
                    {
                        "string",
                    },
                    SourceIdentityUsergroups = new[]
                    {
                        "string",
                    },
                    SourceIdentityUsers = new[]
                    {
                        "string",
                    },
                    SourcePortListIds = new[]
                    {
                        "string",
                    },
                    SourcePorts = new[]
                    {
                        "string",
                    },
                    SourcePortsVariable = "string",
                    SourceScalableGroupTagListIds = new[]
                    {
                        "string",
                    },
                    SourceSecurityGroupListIds = new[]
                    {
                        "string",
                    },
                },
            },
            SequenceId = "string",
            SequenceName = "string",
            SequenceType = "string",
        },
    },
});

    example, err := sdwan.NewEmbeddedSecurityNgfwPolicy(ctx, "embeddedSecurityNgfwPolicyResource", &sdwan.EmbeddedSecurityNgfwPolicyArgs{
	DefaultAction:    pulumi.String("string"),
	FeatureProfileId: pulumi.String("string"),
	Description:      pulumi.String("string"),
	Name:             pulumi.String("string"),
	Sequences: sdwan.EmbeddedSecurityNgfwPolicySequenceArray{
		&sdwan.EmbeddedSecurityNgfwPolicySequenceArgs{
			Actions: sdwan.EmbeddedSecurityNgfwPolicySequenceActionArray{
				&sdwan.EmbeddedSecurityNgfwPolicySequenceActionArgs{
					Parameter:   pulumi.String("string"),
					ParameterId: pulumi.String("string"),
					Type:        pulumi.String("string"),
				},
			},
			BaseAction:      pulumi.String("string"),
			DisableSequence: pulumi.Bool(false),
			MatchEntries: sdwan.EmbeddedSecurityNgfwPolicySequenceMatchEntryArray{
				&sdwan.EmbeddedSecurityNgfwPolicySequenceMatchEntryArgs{
					AppListIds: pulumi.StringArray{
						pulumi.String("string"),
					},
					ApplicationFamilies: pulumi.StringArray{
						pulumi.String("string"),
					},
					Applications: pulumi.StringArray{
						pulumi.String("string"),
					},
					DestinationDataPrefixListIds: pulumi.StringArray{
						pulumi.String("string"),
					},
					DestinationDataPrefixes: pulumi.StringArray{
						pulumi.String("string"),
					},
					DestinationDataPrefixesVariable: pulumi.String("string"),
					DestinationFqdnListIds: pulumi.StringArray{
						pulumi.String("string"),
					},
					DestinationFqdns: pulumi.StringArray{
						pulumi.String("string"),
					},
					DestinationFqdnsVariable: pulumi.String("string"),
					DestinationGeoLocationListIds: pulumi.StringArray{
						pulumi.String("string"),
					},
					DestinationGeoLocations: pulumi.StringArray{
						pulumi.String("string"),
					},
					DestinationGeoLocationsVariable: pulumi.String("string"),
					DestinationPortListIds: pulumi.StringArray{
						pulumi.String("string"),
					},
					DestinationPorts: pulumi.StringArray{
						pulumi.String("string"),
					},
					DestinationPortsVariable: pulumi.String("string"),
					DestinationScalableGroupTagListIds: pulumi.StringArray{
						pulumi.String("string"),
					},
					DestinationSecurityGroupListIds: pulumi.StringArray{
						pulumi.String("string"),
					},
					FlatAppListIds: pulumi.StringArray{
						pulumi.String("string"),
					},
					ProtocolNameListIds: pulumi.StringArray{
						pulumi.String("string"),
					},
					ProtocolNames: pulumi.StringArray{
						pulumi.String("string"),
					},
					Protocols: pulumi.StringArray{
						pulumi.String("string"),
					},
					SourceDataPrefixListIds: pulumi.StringArray{
						pulumi.String("string"),
					},
					SourceDataPrefixes: pulumi.StringArray{
						pulumi.String("string"),
					},
					SourceDataPrefixesVariable: pulumi.String("string"),
					SourceGeoLocationListIds: pulumi.StringArray{
						pulumi.String("string"),
					},
					SourceGeoLocations: pulumi.StringArray{
						pulumi.String("string"),
					},
					SourceGeoLocationsVariable: pulumi.String("string"),
					SourceIdentityListIds: pulumi.StringArray{
						pulumi.String("string"),
					},
					SourceIdentityUsergroups: pulumi.StringArray{
						pulumi.String("string"),
					},
					SourceIdentityUsers: pulumi.StringArray{
						pulumi.String("string"),
					},
					SourcePortListIds: pulumi.StringArray{
						pulumi.String("string"),
					},
					SourcePorts: pulumi.StringArray{
						pulumi.String("string"),
					},
					SourcePortsVariable: pulumi.String("string"),
					SourceScalableGroupTagListIds: pulumi.StringArray{
						pulumi.String("string"),
					},
					SourceSecurityGroupListIds: pulumi.StringArray{
						pulumi.String("string"),
					},
				},
			},
			SequenceId:   pulumi.String("string"),
			SequenceName: pulumi.String("string"),
			SequenceType: pulumi.String("string"),
		},
	},
})

    resource "sdwan_embeddedsecurityngfwpolicy" "embeddedSecurityNgfwPolicyResource" {
  default_action     = "string"
  feature_profile_id = "string"
  description        = "string"
  name               = "string"
  sequences {
    actions {
      parameter    = "string"
      parameter_id = "string"
      type         = "string"
    }
    base_action      = "string"
    disable_sequence = false
    match_entries {
      app_list_ids                            = ["string"]
      application_families                    = ["string"]
      applications                            = ["string"]
      destination_data_prefix_list_ids        = ["string"]
      destination_data_prefixes               = ["string"]
      destination_data_prefixes_variable      = "string"
      destination_fqdn_list_ids               = ["string"]
      destination_fqdns                       = ["string"]
      destination_fqdns_variable              = "string"
      destination_geo_location_list_ids       = ["string"]
      destination_geo_locations               = ["string"]
      destination_geo_locations_variable      = "string"
      destination_port_list_ids               = ["string"]
      destination_ports                       = ["string"]
      destination_ports_variable              = "string"
      destination_scalable_group_tag_list_ids = ["string"]
      destination_security_group_list_ids     = ["string"]
      flat_app_list_ids                       = ["string"]
      protocol_name_list_ids                  = ["string"]
      protocol_names                          = ["string"]
      protocols                               = ["string"]
      source_data_prefix_list_ids             = ["string"]
      source_data_prefixes                    = ["string"]
      source_data_prefixes_variable           = "string"
      source_geo_location_list_ids            = ["string"]
      source_geo_locations                    = ["string"]
      source_geo_locations_variable           = "string"
      source_identity_list_ids                = ["string"]
      source_identity_usergroups              = ["string"]
      source_identity_users                   = ["string"]
      source_port_list_ids                    = ["string"]
      source_ports                            = ["string"]
      source_ports_variable                   = "string"
      source_scalable_group_tag_list_ids      = ["string"]
      source_security_group_list_ids          = ["string"]
    }
    sequence_id   = "string"
    sequence_name = "string"
    sequence_type = "string"
  }
}

    var embeddedSecurityNgfwPolicyResource = new EmbeddedSecurityNgfwPolicy("embeddedSecurityNgfwPolicyResource", EmbeddedSecurityNgfwPolicyArgs.builder()
    .defaultAction("string")
    .featureProfileId("string")
    .description("string")
    .name("string")
    .sequences(EmbeddedSecurityNgfwPolicySequenceArgs.builder()
        .actions(EmbeddedSecurityNgfwPolicySequenceActionArgs.builder()
            .parameter("string")
            .parameterId("string")
            .type("string")
            .build())
        .baseAction("string")
        .disableSequence(false)
        .matchEntries(EmbeddedSecurityNgfwPolicySequenceMatchEntryArgs.builder()
            .appListIds("string")
            .applicationFamilies("string")
            .applications("string")
            .destinationDataPrefixListIds("string")
            .destinationDataPrefixes("string")
            .destinationDataPrefixesVariable("string")
            .destinationFqdnListIds("string")
            .destinationFqdns("string")
            .destinationFqdnsVariable("string")
            .destinationGeoLocationListIds("string")
            .destinationGeoLocations("string")
            .destinationGeoLocationsVariable("string")
            .destinationPortListIds("string")
            .destinationPorts("string")
            .destinationPortsVariable("string")
            .destinationScalableGroupTagListIds("string")
            .destinationSecurityGroupListIds("string")
            .flatAppListIds("string")
            .protocolNameListIds("string")
            .protocolNames("string")
            .protocols("string")
            .sourceDataPrefixListIds("string")
            .sourceDataPrefixes("string")
            .sourceDataPrefixesVariable("string")
            .sourceGeoLocationListIds("string")
            .sourceGeoLocations("string")
            .sourceGeoLocationsVariable("string")
            .sourceIdentityListIds("string")
            .sourceIdentityUsergroups("string")
            .sourceIdentityUsers("string")
            .sourcePortListIds("string")
            .sourcePorts("string")
            .sourcePortsVariable("string")
            .sourceScalableGroupTagListIds("string")
            .sourceSecurityGroupListIds("string")
            .build())
        .sequenceId("string")
        .sequenceName("string")
        .sequenceType("string")
        .build())
    .build());

    embedded_security_ngfw_policy_resource = sdwan.EmbeddedSecurityNgfwPolicy("embeddedSecurityNgfwPolicyResource",
    default_action="string",
    feature_profile_id="string",
    description="string",
    name="string",
    sequences=[{
        "actions": [{
            "parameter": "string",
            "parameter_id": "string",
            "type": "string",
        }],
        "base_action": "string",
        "disable_sequence": False,
        "match_entries": [{
            "app_list_ids": ["string"],
            "application_families": ["string"],
            "applications": ["string"],
            "destination_data_prefix_list_ids": ["string"],
            "destination_data_prefixes": ["string"],
            "destination_data_prefixes_variable": "string",
            "destination_fqdn_list_ids": ["string"],
            "destination_fqdns": ["string"],
            "destination_fqdns_variable": "string",
            "destination_geo_location_list_ids": ["string"],
            "destination_geo_locations": ["string"],
            "destination_geo_locations_variable": "string",
            "destination_port_list_ids": ["string"],
            "destination_ports": ["string"],
            "destination_ports_variable": "string",
            "destination_scalable_group_tag_list_ids": ["string"],
            "destination_security_group_list_ids": ["string"],
            "flat_app_list_ids": ["string"],
            "protocol_name_list_ids": ["string"],
            "protocol_names": ["string"],
            "protocols": ["string"],
            "source_data_prefix_list_ids": ["string"],
            "source_data_prefixes": ["string"],
            "source_data_prefixes_variable": "string",
            "source_geo_location_list_ids": ["string"],
            "source_geo_locations": ["string"],
            "source_geo_locations_variable": "string",
            "source_identity_list_ids": ["string"],
            "source_identity_usergroups": ["string"],
            "source_identity_users": ["string"],
            "source_port_list_ids": ["string"],
            "source_ports": ["string"],
            "source_ports_variable": "string",
            "source_scalable_group_tag_list_ids": ["string"],
            "source_security_group_list_ids": ["string"],
        }],
        "sequence_id": "string",
        "sequence_name": "string",
        "sequence_type": "string",
    }])

    const embeddedSecurityNgfwPolicyResource = new sdwan.EmbeddedSecurityNgfwPolicy("embeddedSecurityNgfwPolicyResource", {
    defaultAction: "string",
    featureProfileId: "string",
    description: "string",
    name: "string",
    sequences: [{
        actions: [{
            parameter: "string",
            parameterId: "string",
            type: "string",
        }],
        baseAction: "string",
        disableSequence: false,
        matchEntries: [{
            appListIds: ["string"],
            applicationFamilies: ["string"],
            applications: ["string"],
            destinationDataPrefixListIds: ["string"],
            destinationDataPrefixes: ["string"],
            destinationDataPrefixesVariable: "string",
            destinationFqdnListIds: ["string"],
            destinationFqdns: ["string"],
            destinationFqdnsVariable: "string",
            destinationGeoLocationListIds: ["string"],
            destinationGeoLocations: ["string"],
            destinationGeoLocationsVariable: "string",
            destinationPortListIds: ["string"],
            destinationPorts: ["string"],
            destinationPortsVariable: "string",
            destinationScalableGroupTagListIds: ["string"],
            destinationSecurityGroupListIds: ["string"],
            flatAppListIds: ["string"],
            protocolNameListIds: ["string"],
            protocolNames: ["string"],
            protocols: ["string"],
            sourceDataPrefixListIds: ["string"],
            sourceDataPrefixes: ["string"],
            sourceDataPrefixesVariable: "string",
            sourceGeoLocationListIds: ["string"],
            sourceGeoLocations: ["string"],
            sourceGeoLocationsVariable: "string",
            sourceIdentityListIds: ["string"],
            sourceIdentityUsergroups: ["string"],
            sourceIdentityUsers: ["string"],
            sourcePortListIds: ["string"],
            sourcePorts: ["string"],
            sourcePortsVariable: "string",
            sourceScalableGroupTagListIds: ["string"],
            sourceSecurityGroupListIds: ["string"],
        }],
        sequenceId: "string",
        sequenceName: "string",
        sequenceType: "string",
    }],
});

    type: sdwan:EmbeddedSecurityNgfwPolicy
properties:
    defaultAction: string
    description: string
    featureProfileId: string
    name: string
    sequences:
        - actions:
            - parameter: string
              parameterId: string
              type: string
          baseAction: string
          disableSequence: false
          matchEntries:
            - appListIds:
                - string
              applicationFamilies:
                - string
              applications:
                - string
              destinationDataPrefixListIds:
                - string
              destinationDataPrefixes:
                - string
              destinationDataPrefixesVariable: string
              destinationFqdnListIds:
                - string
              destinationFqdns:
                - string
              destinationFqdnsVariable: string
              destinationGeoLocationListIds:
                - string
              destinationGeoLocations:
                - string
              destinationGeoLocationsVariable: string
              destinationPortListIds:
                - string
              destinationPorts:
                - string
              destinationPortsVariable: string
              destinationScalableGroupTagListIds:
                - string
              destinationSecurityGroupListIds:
                - string
              flatAppListIds:
                - string
              protocolNameListIds:
                - string
              protocolNames:
                - string
              protocols:
                - string
              sourceDataPrefixListIds:
                - string
              sourceDataPrefixes:
                - string
              sourceDataPrefixesVariable: string
              sourceGeoLocationListIds:
                - string
              sourceGeoLocations:
                - string
              sourceGeoLocationsVariable: string
              sourceIdentityListIds:
                - string
              sourceIdentityUsergroups:
                - string
              sourceIdentityUsers:
                - string
              sourcePortListIds:
                - string
              sourcePorts:
                - string
              sourcePortsVariable: string
              sourceScalableGroupTagListIds:
                - string
              sourceSecurityGroupListIds:
                - string
          sequenceId: string
          sequenceName: string
          sequenceType: string

    EmbeddedSecurityNgfwPolicy Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The EmbeddedSecurityNgfwPolicy resource accepts the following input properties:

    DefaultAction string
    • Choices: pass, drop
    FeatureProfileId string
    Feature Profile ID
    Description string
    The description of the Policy
    Name string
    The name of the Policy
    Sequences List<EmbeddedSecurityNgfwPolicySequence>
    DefaultAction string
    • Choices: pass, drop
    FeatureProfileId string
    Feature Profile ID
    Description string
    The description of the Policy
    Name string
    The name of the Policy
    Sequences []EmbeddedSecurityNgfwPolicySequenceArgs
    default_action string
    • Choices: pass, drop
    feature_profile_id string
    Feature Profile ID
    description string
    The description of the Policy
    name string
    The name of the Policy
    sequences list(object)
    defaultAction String
    • Choices: pass, drop
    featureProfileId String
    Feature Profile ID
    description String
    The description of the Policy
    name String
    The name of the Policy
    sequences List<EmbeddedSecurityNgfwPolicySequence>
    defaultAction string
    • Choices: pass, drop
    featureProfileId string
    Feature Profile ID
    description string
    The description of the Policy
    name string
    The name of the Policy
    sequences EmbeddedSecurityNgfwPolicySequence[]
    default_action str
    • Choices: pass, drop
    feature_profile_id str
    Feature Profile ID
    description str
    The description of the Policy
    name str
    The name of the Policy
    sequences Sequence[EmbeddedSecurityNgfwPolicySequenceArgs]
    defaultAction String
    • Choices: pass, drop
    featureProfileId String
    Feature Profile ID
    description String
    The description of the Policy
    name String
    The name of the Policy
    sequences List<Property Map>

    Outputs

    All input properties are implicitly available as output properties. Additionally, the EmbeddedSecurityNgfwPolicy resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Version int
    The version of the Policy
    Id string
    The provider-assigned unique ID for this managed resource.
    Version int
    The version of the Policy
    id string
    The provider-assigned unique ID for this managed resource.
    version number
    The version of the Policy
    id String
    The provider-assigned unique ID for this managed resource.
    version Integer
    The version of the Policy
    id string
    The provider-assigned unique ID for this managed resource.
    version number
    The version of the Policy
    id str
    The provider-assigned unique ID for this managed resource.
    version int
    The version of the Policy
    id String
    The provider-assigned unique ID for this managed resource.
    version Number
    The version of the Policy

    Look up Existing EmbeddedSecurityNgfwPolicy Resource

    Get an existing EmbeddedSecurityNgfwPolicy resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: EmbeddedSecurityNgfwPolicyState, opts?: CustomResourceOptions): EmbeddedSecurityNgfwPolicy
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        default_action: Optional[str] = None,
        description: Optional[str] = None,
        feature_profile_id: Optional[str] = None,
        name: Optional[str] = None,
        sequences: Optional[Sequence[EmbeddedSecurityNgfwPolicySequenceArgs]] = None,
        version: Optional[int] = None) -> EmbeddedSecurityNgfwPolicy
    func GetEmbeddedSecurityNgfwPolicy(ctx *Context, name string, id IDInput, state *EmbeddedSecurityNgfwPolicyState, opts ...ResourceOption) (*EmbeddedSecurityNgfwPolicy, error)
    public static EmbeddedSecurityNgfwPolicy Get(string name, Input<string> id, EmbeddedSecurityNgfwPolicyState? state, CustomResourceOptions? opts = null)
    public static EmbeddedSecurityNgfwPolicy get(String name, Output<String> id, EmbeddedSecurityNgfwPolicyState state, CustomResourceOptions options)
    resources:  _:    type: sdwan:EmbeddedSecurityNgfwPolicy    get:      id: ${id}
    import {
  to = sdwan_embeddedsecurityngfwpolicy.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    DefaultAction string
    • Choices: pass, drop
    Description string
    The description of the Policy
    FeatureProfileId string
    Feature Profile ID
    Name string
    The name of the Policy
    Sequences List<EmbeddedSecurityNgfwPolicySequence>
    Version int
    The version of the Policy
    DefaultAction string
    • Choices: pass, drop
    Description string
    The description of the Policy
    FeatureProfileId string
    Feature Profile ID
    Name string
    The name of the Policy
    Sequences []EmbeddedSecurityNgfwPolicySequenceArgs
    Version int
    The version of the Policy
    default_action string
    • Choices: pass, drop
    description string
    The description of the Policy
    feature_profile_id string
    Feature Profile ID
    name string
    The name of the Policy
    sequences list(object)
    version number
    The version of the Policy
    defaultAction String
    • Choices: pass, drop
    description String
    The description of the Policy
    featureProfileId String
    Feature Profile ID
    name String
    The name of the Policy
    sequences List<EmbeddedSecurityNgfwPolicySequence>
    version Integer
    The version of the Policy
    defaultAction string
    • Choices: pass, drop
    description string
    The description of the Policy
    featureProfileId string
    Feature Profile ID
    name string
    The name of the Policy
    sequences EmbeddedSecurityNgfwPolicySequence[]
    version number
    The version of the Policy
    default_action str
    • Choices: pass, drop
    description str
    The description of the Policy
    feature_profile_id str
    Feature Profile ID
    name str
    The name of the Policy
    sequences Sequence[EmbeddedSecurityNgfwPolicySequenceArgs]
    version int
    The version of the Policy
    defaultAction String
    • Choices: pass, drop
    description String
    The description of the Policy
    featureProfileId String
    Feature Profile ID
    name String
    The name of the Policy
    sequences List<Property Map>
    version Number
    The version of the Policy

    Supporting Types

    EmbeddedSecurityNgfwPolicySequence, EmbeddedSecurityNgfwPolicySequenceArgs

    actions list(object)
    can be empty array or with type or parameter
    base_action string
    • Choices: pass, inspect, drop
    disable_sequence bool
    match_entries list(object)
    sequence_id string
    sequence_name string
    sequence_type string
    actions List<Property Map>
    can be empty array or with type or parameter
    baseAction String
    • Choices: pass, inspect, drop
    disableSequence Boolean
    matchEntries List<Property Map>
    sequenceId String
    sequenceName String
    sequenceType String

    EmbeddedSecurityNgfwPolicySequenceAction, EmbeddedSecurityNgfwPolicySequenceActionArgs

    Parameter string
    ParameterId string
    Type string
    • Choices: log, connectionEvents, advancedInspectionProfile, log, connectionEvents
    Parameter string
    ParameterId string
    Type string
    • Choices: log, connectionEvents, advancedInspectionProfile, log, connectionEvents
    parameter string
    parameter_id string
    type string
    • Choices: log, connectionEvents, advancedInspectionProfile, log, connectionEvents
    parameter String
    parameterId String
    type String
    • Choices: log, connectionEvents, advancedInspectionProfile, log, connectionEvents
    parameter string
    parameterId string
    type string
    • Choices: log, connectionEvents, advancedInspectionProfile, log, connectionEvents
    parameter str
    parameter_id str
    type str
    • Choices: log, connectionEvents, advancedInspectionProfile, log, connectionEvents
    parameter String
    parameterId String
    type String
    • Choices: log, connectionEvents, advancedInspectionProfile, log, connectionEvents

    EmbeddedSecurityNgfwPolicySequenceMatchEntry, EmbeddedSecurityNgfwPolicySequenceMatchEntryArgs

    AppListIds List<string>
    ApplicationFamilies List<string>
    Applications List<string>
    DestinationDataPrefixListIds List<string>
    DestinationDataPrefixes List<string>
    DestinationDataPrefixesVariable string
    Variable name
    DestinationFqdnListIds List<string>
    DestinationFqdns List<string>
    DestinationFqdnsVariable string
    Variable name
    DestinationGeoLocationListIds List<string>
    DestinationGeoLocations List<string>
    DestinationGeoLocationsVariable string
    Variable name
    DestinationPortListIds List<string>
    DestinationPorts List<string>
    DestinationPortsVariable string
    Variable name
    DestinationScalableGroupTagListIds List<string>
    DestinationSecurityGroupListIds List<string>
    FlatAppListIds List<string>
    ProtocolNameListIds List<string>
    ProtocolNames List<string>
    Protocols List<string>
    SourceDataPrefixListIds List<string>
    SourceDataPrefixes List<string>
    SourceDataPrefixesVariable string
    Variable name
    SourceGeoLocationListIds List<string>
    SourceGeoLocations List<string>
    SourceGeoLocationsVariable string
    Variable name
    SourceIdentityListIds List<string>
    SourceIdentityUsergroups List<string>
    SourceIdentityUsers List<string>
    SourcePortListIds List<string>
    SourcePorts List<string>
    SourcePortsVariable string
    Variable name
    SourceScalableGroupTagListIds List<string>
    SourceSecurityGroupListIds List<string>
    AppListIds []string
    ApplicationFamilies []string
    Applications []string
    DestinationDataPrefixListIds []string
    DestinationDataPrefixes []string
    DestinationDataPrefixesVariable string
    Variable name
    DestinationFqdnListIds []string
    DestinationFqdns []string
    DestinationFqdnsVariable string
    Variable name
    DestinationGeoLocationListIds []string
    DestinationGeoLocations []string
    DestinationGeoLocationsVariable string
    Variable name
    DestinationPortListIds []string
    DestinationPorts []string
    DestinationPortsVariable string
    Variable name
    DestinationScalableGroupTagListIds []string
    DestinationSecurityGroupListIds []string
    FlatAppListIds []string
    ProtocolNameListIds []string
    ProtocolNames []string
    Protocols []string
    SourceDataPrefixListIds []string
    SourceDataPrefixes []string
    SourceDataPrefixesVariable string
    Variable name
    SourceGeoLocationListIds []string
    SourceGeoLocations []string
    SourceGeoLocationsVariable string
    Variable name
    SourceIdentityListIds []string
    SourceIdentityUsergroups []string
    SourceIdentityUsers []string
    SourcePortListIds []string
    SourcePorts []string
    SourcePortsVariable string
    Variable name
    SourceScalableGroupTagListIds []string
    SourceSecurityGroupListIds []string
    app_list_ids list(string)
    application_families list(string)
    applications list(string)
    destination_data_prefix_list_ids list(string)
    destination_data_prefixes list(string)
    destination_data_prefixes_variable string
    Variable name
    destination_fqdn_list_ids list(string)
    destination_fqdns list(string)
    destination_fqdns_variable string
    Variable name
    destination_geo_location_list_ids list(string)
    destination_geo_locations list(string)
    destination_geo_locations_variable string
    Variable name
    destination_port_list_ids list(string)
    destination_ports list(string)
    destination_ports_variable string
    Variable name
    destination_scalable_group_tag_list_ids list(string)
    destination_security_group_list_ids list(string)
    flat_app_list_ids list(string)
    protocol_name_list_ids list(string)
    protocol_names list(string)
    protocols list(string)
    source_data_prefix_list_ids list(string)
    source_data_prefixes list(string)
    source_data_prefixes_variable string
    Variable name
    source_geo_location_list_ids list(string)
    source_geo_locations list(string)
    source_geo_locations_variable string
    Variable name
    source_identity_list_ids list(string)
    source_identity_usergroups list(string)
    source_identity_users list(string)
    source_port_list_ids list(string)
    source_ports list(string)
    source_ports_variable string
    Variable name
    source_scalable_group_tag_list_ids list(string)
    source_security_group_list_ids list(string)
    appListIds List<String>
    applicationFamilies List<String>
    applications List<String>
    destinationDataPrefixListIds List<String>
    destinationDataPrefixes List<String>
    destinationDataPrefixesVariable String
    Variable name
    destinationFqdnListIds List<String>
    destinationFqdns List<String>
    destinationFqdnsVariable String
    Variable name
    destinationGeoLocationListIds List<String>
    destinationGeoLocations List<String>
    destinationGeoLocationsVariable String
    Variable name
    destinationPortListIds List<String>
    destinationPorts List<String>
    destinationPortsVariable String
    Variable name
    destinationScalableGroupTagListIds List<String>
    destinationSecurityGroupListIds List<String>
    flatAppListIds List<String>
    protocolNameListIds List<String>
    protocolNames List<String>
    protocols List<String>
    sourceDataPrefixListIds List<String>
    sourceDataPrefixes List<String>
    sourceDataPrefixesVariable String
    Variable name
    sourceGeoLocationListIds List<String>
    sourceGeoLocations List<String>
    sourceGeoLocationsVariable String
    Variable name
    sourceIdentityListIds List<String>
    sourceIdentityUsergroups List<String>
    sourceIdentityUsers List<String>
    sourcePortListIds List<String>
    sourcePorts List<String>
    sourcePortsVariable String
    Variable name
    sourceScalableGroupTagListIds List<String>
    sourceSecurityGroupListIds List<String>
    appListIds string[]
    applicationFamilies string[]
    applications string[]
    destinationDataPrefixListIds string[]
    destinationDataPrefixes string[]
    destinationDataPrefixesVariable string
    Variable name
    destinationFqdnListIds string[]
    destinationFqdns string[]
    destinationFqdnsVariable string
    Variable name
    destinationGeoLocationListIds string[]
    destinationGeoLocations string[]
    destinationGeoLocationsVariable string
    Variable name
    destinationPortListIds string[]
    destinationPorts string[]
    destinationPortsVariable string
    Variable name
    destinationScalableGroupTagListIds string[]
    destinationSecurityGroupListIds string[]
    flatAppListIds string[]
    protocolNameListIds string[]
    protocolNames string[]
    protocols string[]
    sourceDataPrefixListIds string[]
    sourceDataPrefixes string[]
    sourceDataPrefixesVariable string
    Variable name
    sourceGeoLocationListIds string[]
    sourceGeoLocations string[]
    sourceGeoLocationsVariable string
    Variable name
    sourceIdentityListIds string[]
    sourceIdentityUsergroups string[]
    sourceIdentityUsers string[]
    sourcePortListIds string[]
    sourcePorts string[]
    sourcePortsVariable string
    Variable name
    sourceScalableGroupTagListIds string[]
    sourceSecurityGroupListIds string[]
    app_list_ids Sequence[str]
    application_families Sequence[str]
    applications Sequence[str]
    destination_data_prefix_list_ids Sequence[str]
    destination_data_prefixes Sequence[str]
    destination_data_prefixes_variable str
    Variable name
    destination_fqdn_list_ids Sequence[str]
    destination_fqdns Sequence[str]
    destination_fqdns_variable str
    Variable name
    destination_geo_location_list_ids Sequence[str]
    destination_geo_locations Sequence[str]
    destination_geo_locations_variable str
    Variable name
    destination_port_list_ids Sequence[str]
    destination_ports Sequence[str]
    destination_ports_variable str
    Variable name
    destination_scalable_group_tag_list_ids Sequence[str]
    destination_security_group_list_ids Sequence[str]
    flat_app_list_ids Sequence[str]
    protocol_name_list_ids Sequence[str]
    protocol_names Sequence[str]
    protocols Sequence[str]
    source_data_prefix_list_ids Sequence[str]
    source_data_prefixes Sequence[str]
    source_data_prefixes_variable str
    Variable name
    source_geo_location_list_ids Sequence[str]
    source_geo_locations Sequence[str]
    source_geo_locations_variable str
    Variable name
    source_identity_list_ids Sequence[str]
    source_identity_usergroups Sequence[str]
    source_identity_users Sequence[str]
    source_port_list_ids Sequence[str]
    source_ports Sequence[str]
    source_ports_variable str
    Variable name
    source_scalable_group_tag_list_ids Sequence[str]
    source_security_group_list_ids Sequence[str]
    appListIds List<String>
    applicationFamilies List<String>
    applications List<String>
    destinationDataPrefixListIds List<String>
    destinationDataPrefixes List<String>
    destinationDataPrefixesVariable String
    Variable name
    destinationFqdnListIds List<String>
    destinationFqdns List<String>
    destinationFqdnsVariable String
    Variable name
    destinationGeoLocationListIds List<String>
    destinationGeoLocations List<String>
    destinationGeoLocationsVariable String
    Variable name
    destinationPortListIds List<String>
    destinationPorts List<String>
    destinationPortsVariable String
    Variable name
    destinationScalableGroupTagListIds List<String>
    destinationSecurityGroupListIds List<String>
    flatAppListIds List<String>
    protocolNameListIds List<String>
    protocolNames List<String>
    protocols List<String>
    sourceDataPrefixListIds List<String>
    sourceDataPrefixes List<String>
    sourceDataPrefixesVariable String
    Variable name
    sourceGeoLocationListIds List<String>
    sourceGeoLocations List<String>
    sourceGeoLocationsVariable String
    Variable name
    sourceIdentityListIds List<String>
    sourceIdentityUsergroups List<String>
    sourceIdentityUsers List<String>
    sourcePortListIds List<String>
    sourcePorts List<String>
    sourcePortsVariable String
    Variable name
    sourceScalableGroupTagListIds List<String>
    sourceSecurityGroupListIds List<String>

    Import

    The pulumi import command can be used, for example:

    Expected import identifier with the format: “embedded_security_ngfw_policy_id,feature_profile_id”

    $ pulumi import sdwan:index/embeddedSecurityNgfwPolicy:EmbeddedSecurityNgfwPolicy example "f6b2c44c-693c-4763-b010-895aa3d236bd,f6dd22c8-0b4f-496c-9a0b-6813d1f8b8ac"

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    sdwan pulumi/pulumi-sdwan
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the sdwan Terraform Provider.
    sdwan logo
    Viewing docs for Cisco Catalyst SD-WAN v0.8.1
    published on Tuesday, Apr 7, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-sdwan
      Try Pulumi Cloud free. Your team will thank you.