1. Packages
  2. Packages
  3. Cisco Catalyst SD-WAN Provider
  4. API Docs
  5. EmbeddedSecurityPolicy
Viewing docs for Cisco Catalyst SD-WAN v0.8.1
published on Tuesday, Apr 7, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-sdwan

sdwan.EmbeddedSecurityPolicy

sdwan logo
Viewing docs for Cisco Catalyst SD-WAN v0.8.1
published on Tuesday, Apr 7, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-sdwan

    This resource can manage a Embedded Security Policy.

    • Minimum SD-WAN Manager version: 20.15.0

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as sdwan from "@pulumi/sdwan";

const example = new sdwan.EmbeddedSecurityPolicy("example", {
    name: "Example",
    description: "My Example",
    featureProfileId: "f6dd22c8-0b4f-496c-9a0b-6813d1f8b8ac",
    assemblies: [{
        ngfwPolicyId: "df8c5043-7438-47e2-97b0-8304d3bf1a82",
        entries: [{
            sourceZone: "untrusted",
            destinationZone: "untrusted",
        }],
    }],
    tcpSynFloodLimit: "432",
    maxIncompleteTcpLimit: "12345",
    maxIncompleteUdpLimit: "12345",
    maxIncompleteIcmpLimit: "12345",
    auditTrail: "on",
    unifiedLogging: "on",
    sessionReclassifyAllow: "on",
    icmpUnreachableAllow: "on",
    failureMode: "close",
    nat: true,
    downloadUrlDatabaseOnDevice: false,
    resourceProfile: "low",
});

    import pulumi
import pulumi_sdwan as sdwan

example = sdwan.EmbeddedSecurityPolicy("example",
    name="Example",
    description="My Example",
    feature_profile_id="f6dd22c8-0b4f-496c-9a0b-6813d1f8b8ac",
    assemblies=[{
        "ngfw_policy_id": "df8c5043-7438-47e2-97b0-8304d3bf1a82",
        "entries": [{
            "source_zone": "untrusted",
            "destination_zone": "untrusted",
        }],
    }],
    tcp_syn_flood_limit="432",
    max_incomplete_tcp_limit="12345",
    max_incomplete_udp_limit="12345",
    max_incomplete_icmp_limit="12345",
    audit_trail="on",
    unified_logging="on",
    session_reclassify_allow="on",
    icmp_unreachable_allow="on",
    failure_mode="close",
    nat=True,
    download_url_database_on_device=False,
    resource_profile="low")

    package main

import (
	"github.com/pulumi/pulumi-sdwan/sdk/go/sdwan"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := sdwan.NewEmbeddedSecurityPolicy(ctx, "example", &sdwan.EmbeddedSecurityPolicyArgs{
			Name:             pulumi.String("Example"),
			Description:      pulumi.String("My Example"),
			FeatureProfileId: pulumi.String("f6dd22c8-0b4f-496c-9a0b-6813d1f8b8ac"),
			Assemblies: sdwan.EmbeddedSecurityPolicyAssemblyArray{
				&sdwan.EmbeddedSecurityPolicyAssemblyArgs{
					NgfwPolicyId: pulumi.String("df8c5043-7438-47e2-97b0-8304d3bf1a82"),
					Entries: sdwan.EmbeddedSecurityPolicyAssemblyEntryArray{
						&sdwan.EmbeddedSecurityPolicyAssemblyEntryArgs{
							SourceZone:      pulumi.String("untrusted"),
							DestinationZone: pulumi.String("untrusted"),
						},
					},
				},
			},
			TcpSynFloodLimit:            pulumi.String("432"),
			MaxIncompleteTcpLimit:       pulumi.String("12345"),
			MaxIncompleteUdpLimit:       pulumi.String("12345"),
			MaxIncompleteIcmpLimit:      pulumi.String("12345"),
			AuditTrail:                  pulumi.String("on"),
			UnifiedLogging:              pulumi.String("on"),
			SessionReclassifyAllow:      pulumi.String("on"),
			IcmpUnreachableAllow:        pulumi.String("on"),
			FailureMode:                 pulumi.String("close"),
			Nat:                         pulumi.Bool(true),
			DownloadUrlDatabaseOnDevice: pulumi.Bool(false),
			ResourceProfile:             pulumi.String("low"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Sdwan = Pulumi.Sdwan;

return await Deployment.RunAsync(() => 
{
    var example = new Sdwan.EmbeddedSecurityPolicy("example", new()
    {
        Name = "Example",
        Description = "My Example",
        FeatureProfileId = "f6dd22c8-0b4f-496c-9a0b-6813d1f8b8ac",
        Assemblies = new[]
        {
            new Sdwan.Inputs.EmbeddedSecurityPolicyAssemblyArgs
            {
                NgfwPolicyId = "df8c5043-7438-47e2-97b0-8304d3bf1a82",
                Entries = new[]
                {
                    new Sdwan.Inputs.EmbeddedSecurityPolicyAssemblyEntryArgs
                    {
                        SourceZone = "untrusted",
                        DestinationZone = "untrusted",
                    },
                },
            },
        },
        TcpSynFloodLimit = "432",
        MaxIncompleteTcpLimit = "12345",
        MaxIncompleteUdpLimit = "12345",
        MaxIncompleteIcmpLimit = "12345",
        AuditTrail = "on",
        UnifiedLogging = "on",
        SessionReclassifyAllow = "on",
        IcmpUnreachableAllow = "on",
        FailureMode = "close",
        Nat = true,
        DownloadUrlDatabaseOnDevice = false,
        ResourceProfile = "low",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.sdwan.EmbeddedSecurityPolicy;
import com.pulumi.sdwan.EmbeddedSecurityPolicyArgs;
import com.pulumi.sdwan.inputs.EmbeddedSecurityPolicyAssemblyArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new EmbeddedSecurityPolicy("example", EmbeddedSecurityPolicyArgs.builder()
            .name("Example")
            .description("My Example")
            .featureProfileId("f6dd22c8-0b4f-496c-9a0b-6813d1f8b8ac")
            .assemblies(EmbeddedSecurityPolicyAssemblyArgs.builder()
                .ngfwPolicyId("df8c5043-7438-47e2-97b0-8304d3bf1a82")
                .entries(EmbeddedSecurityPolicyAssemblyEntryArgs.builder()
                    .sourceZone("untrusted")
                    .destinationZone("untrusted")
                    .build())
                .build())
            .tcpSynFloodLimit("432")
            .maxIncompleteTcpLimit("12345")
            .maxIncompleteUdpLimit("12345")
            .maxIncompleteIcmpLimit("12345")
            .auditTrail("on")
            .unifiedLogging("on")
            .sessionReclassifyAllow("on")
            .icmpUnreachableAllow("on")
            .failureMode("close")
            .nat(true)
            .downloadUrlDatabaseOnDevice(false)
            .resourceProfile("low")
            .build());

    }
}

    resources:
  example:
    type: sdwan:EmbeddedSecurityPolicy
    properties:
      name: Example
      description: My Example
      featureProfileId: f6dd22c8-0b4f-496c-9a0b-6813d1f8b8ac
      assemblies:
        - ngfwPolicyId: df8c5043-7438-47e2-97b0-8304d3bf1a82
          entries:
            - sourceZone: untrusted
              destinationZone: untrusted
      tcpSynFloodLimit: '432'
      maxIncompleteTcpLimit: '12345'
      maxIncompleteUdpLimit: '12345'
      maxIncompleteIcmpLimit: '12345'
      auditTrail: on
      unifiedLogging: on
      sessionReclassifyAllow: on
      icmpUnreachableAllow: on
      failureMode: close
      nat: true
      downloadUrlDatabaseOnDevice: false
      resourceProfile: low

    Create EmbeddedSecurityPolicy Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new EmbeddedSecurityPolicy(name: string, args: EmbeddedSecurityPolicyArgs, opts?: CustomResourceOptions);
    @overload
def EmbeddedSecurityPolicy(resource_name: str,
                           args: EmbeddedSecurityPolicyArgs,
                           opts: Optional[ResourceOptions] = None)

@overload
def EmbeddedSecurityPolicy(resource_name: str,
                           opts: Optional[ResourceOptions] = None,
                           feature_profile_id: Optional[str] = None,
                           max_incomplete_icmp_limit: Optional[str] = None,
                           name: Optional[str] = None,
                           download_url_database_on_device: Optional[bool] = None,
                           download_url_database_on_device_variable: Optional[str] = None,
                           failure_mode: Optional[str] = None,
                           audit_trail: Optional[str] = None,
                           icmp_unreachable_allow: Optional[str] = None,
                           assemblies: Optional[Sequence[EmbeddedSecurityPolicyAssemblyArgs]] = None,
                           description: Optional[str] = None,
                           max_incomplete_tcp_limit: Optional[str] = None,
                           max_incomplete_udp_limit: Optional[str] = None,
                           nat: Optional[bool] = None,
                           nat_variable: Optional[str] = None,
                           resource_profile: Optional[str] = None,
                           resource_profile_variable: Optional[str] = None,
                           session_reclassify_allow: Optional[str] = None,
                           tcp_syn_flood_limit: Optional[str] = None,
                           unified_logging: Optional[str] = None)
    func NewEmbeddedSecurityPolicy(ctx *Context, name string, args EmbeddedSecurityPolicyArgs, opts ...ResourceOption) (*EmbeddedSecurityPolicy, error)
    public EmbeddedSecurityPolicy(string name, EmbeddedSecurityPolicyArgs args, CustomResourceOptions? opts = null)
    public EmbeddedSecurityPolicy(String name, EmbeddedSecurityPolicyArgs args)
public EmbeddedSecurityPolicy(String name, EmbeddedSecurityPolicyArgs args, CustomResourceOptions options)

    type: sdwan:EmbeddedSecurityPolicy
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args EmbeddedSecurityPolicyArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args EmbeddedSecurityPolicyArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args EmbeddedSecurityPolicyArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args EmbeddedSecurityPolicyArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args EmbeddedSecurityPolicyArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var embeddedSecurityPolicyResource = new Sdwan.EmbeddedSecurityPolicy("embeddedSecurityPolicyResource", new()
{
    FeatureProfileId = "string",
    MaxIncompleteIcmpLimit = "string",
    Name = "string",
    DownloadUrlDatabaseOnDevice = false,
    DownloadUrlDatabaseOnDeviceVariable = "string",
    FailureMode = "string",
    AuditTrail = "string",
    IcmpUnreachableAllow = "string",
    Assemblies = new[]
    {
        new Sdwan.Inputs.EmbeddedSecurityPolicyAssemblyArgs
        {
            AdvancedInspectionProfilePolicyId = "string",
            Entries = new[]
            {
                new Sdwan.Inputs.EmbeddedSecurityPolicyAssemblyEntryArgs
                {
                    DestinationZone = "string",
                    DestinationZoneListId = "string",
                    SourceZone = "string",
                    SourceZoneListId = "string",
                },
            },
            NgfwPolicyId = "string",
            SslDecryptionProfileId = "string",
        },
    },
    Description = "string",
    MaxIncompleteTcpLimit = "string",
    MaxIncompleteUdpLimit = "string",
    Nat = false,
    NatVariable = "string",
    ResourceProfile = "string",
    ResourceProfileVariable = "string",
    SessionReclassifyAllow = "string",
    TcpSynFloodLimit = "string",
    UnifiedLogging = "string",
});

    example, err := sdwan.NewEmbeddedSecurityPolicy(ctx, "embeddedSecurityPolicyResource", &sdwan.EmbeddedSecurityPolicyArgs{
	FeatureProfileId:                    pulumi.String("string"),
	MaxIncompleteIcmpLimit:              pulumi.String("string"),
	Name:                                pulumi.String("string"),
	DownloadUrlDatabaseOnDevice:         pulumi.Bool(false),
	DownloadUrlDatabaseOnDeviceVariable: pulumi.String("string"),
	FailureMode:                         pulumi.String("string"),
	AuditTrail:                          pulumi.String("string"),
	IcmpUnreachableAllow:                pulumi.String("string"),
	Assemblies: sdwan.EmbeddedSecurityPolicyAssemblyArray{
		&sdwan.EmbeddedSecurityPolicyAssemblyArgs{
			AdvancedInspectionProfilePolicyId: pulumi.String("string"),
			Entries: sdwan.EmbeddedSecurityPolicyAssemblyEntryArray{
				&sdwan.EmbeddedSecurityPolicyAssemblyEntryArgs{
					DestinationZone:       pulumi.String("string"),
					DestinationZoneListId: pulumi.String("string"),
					SourceZone:            pulumi.String("string"),
					SourceZoneListId:      pulumi.String("string"),
				},
			},
			NgfwPolicyId:           pulumi.String("string"),
			SslDecryptionProfileId: pulumi.String("string"),
		},
	},
	Description:             pulumi.String("string"),
	MaxIncompleteTcpLimit:   pulumi.String("string"),
	MaxIncompleteUdpLimit:   pulumi.String("string"),
	Nat:                     pulumi.Bool(false),
	NatVariable:             pulumi.String("string"),
	ResourceProfile:         pulumi.String("string"),
	ResourceProfileVariable: pulumi.String("string"),
	SessionReclassifyAllow:  pulumi.String("string"),
	TcpSynFloodLimit:        pulumi.String("string"),
	UnifiedLogging:          pulumi.String("string"),
})

    var embeddedSecurityPolicyResource = new EmbeddedSecurityPolicy("embeddedSecurityPolicyResource", EmbeddedSecurityPolicyArgs.builder()
    .featureProfileId("string")
    .maxIncompleteIcmpLimit("string")
    .name("string")
    .downloadUrlDatabaseOnDevice(false)
    .downloadUrlDatabaseOnDeviceVariable("string")
    .failureMode("string")
    .auditTrail("string")
    .icmpUnreachableAllow("string")
    .assemblies(EmbeddedSecurityPolicyAssemblyArgs.builder()
        .advancedInspectionProfilePolicyId("string")
        .entries(EmbeddedSecurityPolicyAssemblyEntryArgs.builder()
            .destinationZone("string")
            .destinationZoneListId("string")
            .sourceZone("string")
            .sourceZoneListId("string")
            .build())
        .ngfwPolicyId("string")
        .sslDecryptionProfileId("string")
        .build())
    .description("string")
    .maxIncompleteTcpLimit("string")
    .maxIncompleteUdpLimit("string")
    .nat(false)
    .natVariable("string")
    .resourceProfile("string")
    .resourceProfileVariable("string")
    .sessionReclassifyAllow("string")
    .tcpSynFloodLimit("string")
    .unifiedLogging("string")
    .build());

    embedded_security_policy_resource = sdwan.EmbeddedSecurityPolicy("embeddedSecurityPolicyResource",
    feature_profile_id="string",
    max_incomplete_icmp_limit="string",
    name="string",
    download_url_database_on_device=False,
    download_url_database_on_device_variable="string",
    failure_mode="string",
    audit_trail="string",
    icmp_unreachable_allow="string",
    assemblies=[{
        "advanced_inspection_profile_policy_id": "string",
        "entries": [{
            "destination_zone": "string",
            "destination_zone_list_id": "string",
            "source_zone": "string",
            "source_zone_list_id": "string",
        }],
        "ngfw_policy_id": "string",
        "ssl_decryption_profile_id": "string",
    }],
    description="string",
    max_incomplete_tcp_limit="string",
    max_incomplete_udp_limit="string",
    nat=False,
    nat_variable="string",
    resource_profile="string",
    resource_profile_variable="string",
    session_reclassify_allow="string",
    tcp_syn_flood_limit="string",
    unified_logging="string")

    const embeddedSecurityPolicyResource = new sdwan.EmbeddedSecurityPolicy("embeddedSecurityPolicyResource", {
    featureProfileId: "string",
    maxIncompleteIcmpLimit: "string",
    name: "string",
    downloadUrlDatabaseOnDevice: false,
    downloadUrlDatabaseOnDeviceVariable: "string",
    failureMode: "string",
    auditTrail: "string",
    icmpUnreachableAllow: "string",
    assemblies: [{
        advancedInspectionProfilePolicyId: "string",
        entries: [{
            destinationZone: "string",
            destinationZoneListId: "string",
            sourceZone: "string",
            sourceZoneListId: "string",
        }],
        ngfwPolicyId: "string",
        sslDecryptionProfileId: "string",
    }],
    description: "string",
    maxIncompleteTcpLimit: "string",
    maxIncompleteUdpLimit: "string",
    nat: false,
    natVariable: "string",
    resourceProfile: "string",
    resourceProfileVariable: "string",
    sessionReclassifyAllow: "string",
    tcpSynFloodLimit: "string",
    unifiedLogging: "string",
});

    type: sdwan:EmbeddedSecurityPolicy
properties:
    assemblies:
        - advancedInspectionProfilePolicyId: string
          entries:
            - destinationZone: string
              destinationZoneListId: string
              sourceZone: string
              sourceZoneListId: string
          ngfwPolicyId: string
          sslDecryptionProfileId: string
    auditTrail: string
    description: string
    downloadUrlDatabaseOnDevice: false
    downloadUrlDatabaseOnDeviceVariable: string
    failureMode: string
    featureProfileId: string
    icmpUnreachableAllow: string
    maxIncompleteIcmpLimit: string
    maxIncompleteTcpLimit: string
    maxIncompleteUdpLimit: string
    name: string
    nat: false
    natVariable: string
    resourceProfile: string
    resourceProfileVariable: string
    sessionReclassifyAllow: string
    tcpSynFloodLimit: string
    unifiedLogging: string

    EmbeddedSecurityPolicy Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The EmbeddedSecurityPolicy resource accepts the following input properties:

    FeatureProfileId string
    Feature Profile ID
    Assemblies List<EmbeddedSecurityPolicyAssembly>
    AuditTrail string
    Setting can be string 'on' or missing for off

    • Choices: on
    Description string
    The description of the Policy
    DownloadUrlDatabaseOnDevice bool
    DownloadUrlDatabaseOnDeviceVariable string
    Variable name
    FailureMode string
    • Choices: close, open
    IcmpUnreachableAllow string
    Setting can be string 'on' or missing for off

    • Choices: on
    MaxIncompleteIcmpLimit string
    MaxIncompleteTcpLimit string
    MaxIncompleteUdpLimit string
    Name string
    The name of the Policy
    Nat bool
    NatVariable string
    Variable name
    ResourceProfile string
    • Choices: low, medium, high
    ResourceProfileVariable string
    Variable name
    SessionReclassifyAllow string
    Setting can be string 'on' or missing for off

    • Choices: on
    TcpSynFloodLimit string
    UnifiedLogging string
    Setting can be string 'on' or missing for off

    • Choices: on
    FeatureProfileId string
    Feature Profile ID
    Assemblies []EmbeddedSecurityPolicyAssemblyArgs
    AuditTrail string
    Setting can be string 'on' or missing for off

    • Choices: on
    Description string
    The description of the Policy
    DownloadUrlDatabaseOnDevice bool
    DownloadUrlDatabaseOnDeviceVariable string
    Variable name
    FailureMode string
    • Choices: close, open
    IcmpUnreachableAllow string
    Setting can be string 'on' or missing for off

    • Choices: on
    MaxIncompleteIcmpLimit string
    MaxIncompleteTcpLimit string
    MaxIncompleteUdpLimit string
    Name string
    The name of the Policy
    Nat bool
    NatVariable string
    Variable name
    ResourceProfile string
    • Choices: low, medium, high
    ResourceProfileVariable string
    Variable name
    SessionReclassifyAllow string
    Setting can be string 'on' or missing for off

    • Choices: on
    TcpSynFloodLimit string
    UnifiedLogging string
    Setting can be string 'on' or missing for off

    • Choices: on
    featureProfileId String
    Feature Profile ID
    assemblies List<EmbeddedSecurityPolicyAssembly>
    auditTrail String
    Setting can be string 'on' or missing for off

    • Choices: on
    description String
    The description of the Policy
    downloadUrlDatabaseOnDevice Boolean
    downloadUrlDatabaseOnDeviceVariable String
    Variable name
    failureMode String
    • Choices: close, open
    icmpUnreachableAllow String
    Setting can be string 'on' or missing for off

    • Choices: on
    maxIncompleteIcmpLimit String
    maxIncompleteTcpLimit String
    maxIncompleteUdpLimit String
    name String
    The name of the Policy
    nat Boolean
    natVariable String
    Variable name
    resourceProfile String
    • Choices: low, medium, high
    resourceProfileVariable String
    Variable name
    sessionReclassifyAllow String
    Setting can be string 'on' or missing for off

    • Choices: on
    tcpSynFloodLimit String
    unifiedLogging String
    Setting can be string 'on' or missing for off

    • Choices: on
    featureProfileId string
    Feature Profile ID
    assemblies EmbeddedSecurityPolicyAssembly[]
    auditTrail string
    Setting can be string 'on' or missing for off

    • Choices: on
    description string
    The description of the Policy
    downloadUrlDatabaseOnDevice boolean
    downloadUrlDatabaseOnDeviceVariable string
    Variable name
    failureMode string
    • Choices: close, open
    icmpUnreachableAllow string
    Setting can be string 'on' or missing for off

    • Choices: on
    maxIncompleteIcmpLimit string
    maxIncompleteTcpLimit string
    maxIncompleteUdpLimit string
    name string
    The name of the Policy
    nat boolean
    natVariable string
    Variable name
    resourceProfile string
    • Choices: low, medium, high
    resourceProfileVariable string
    Variable name
    sessionReclassifyAllow string
    Setting can be string 'on' or missing for off

    • Choices: on
    tcpSynFloodLimit string
    unifiedLogging string
    Setting can be string 'on' or missing for off

    • Choices: on
    feature_profile_id str
    Feature Profile ID
    assemblies Sequence[EmbeddedSecurityPolicyAssemblyArgs]
    audit_trail str
    Setting can be string 'on' or missing for off

    • Choices: on
    description str
    The description of the Policy
    download_url_database_on_device bool
    download_url_database_on_device_variable str
    Variable name
    failure_mode str
    • Choices: close, open
    icmp_unreachable_allow str
    Setting can be string 'on' or missing for off

    • Choices: on
    max_incomplete_icmp_limit str
    max_incomplete_tcp_limit str
    max_incomplete_udp_limit str
    name str
    The name of the Policy
    nat bool
    nat_variable str
    Variable name
    resource_profile str
    • Choices: low, medium, high
    resource_profile_variable str
    Variable name
    session_reclassify_allow str
    Setting can be string 'on' or missing for off

    • Choices: on
    tcp_syn_flood_limit str
    unified_logging str
    Setting can be string 'on' or missing for off

    • Choices: on
    featureProfileId String
    Feature Profile ID
    assemblies List<Property Map>
    auditTrail String
    Setting can be string 'on' or missing for off

    • Choices: on
    description String
    The description of the Policy
    downloadUrlDatabaseOnDevice Boolean
    downloadUrlDatabaseOnDeviceVariable String
    Variable name
    failureMode String
    • Choices: close, open
    icmpUnreachableAllow String
    Setting can be string 'on' or missing for off

    • Choices: on
    maxIncompleteIcmpLimit String
    maxIncompleteTcpLimit String
    maxIncompleteUdpLimit String
    name String
    The name of the Policy
    nat Boolean
    natVariable String
    Variable name
    resourceProfile String
    • Choices: low, medium, high
    resourceProfileVariable String
    Variable name
    sessionReclassifyAllow String
    Setting can be string 'on' or missing for off

    • Choices: on
    tcpSynFloodLimit String
    unifiedLogging String
    Setting can be string 'on' or missing for off

    • Choices: on

    Outputs

    All input properties are implicitly available as output properties. Additionally, the EmbeddedSecurityPolicy resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Version int
    The version of the Policy
    Id string
    The provider-assigned unique ID for this managed resource.
    Version int
    The version of the Policy
    id String
    The provider-assigned unique ID for this managed resource.
    version Integer
    The version of the Policy
    id string
    The provider-assigned unique ID for this managed resource.
    version number
    The version of the Policy
    id str
    The provider-assigned unique ID for this managed resource.
    version int
    The version of the Policy
    id String
    The provider-assigned unique ID for this managed resource.
    version Number
    The version of the Policy

    Look up Existing EmbeddedSecurityPolicy Resource

    Get an existing EmbeddedSecurityPolicy resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: EmbeddedSecurityPolicyState, opts?: CustomResourceOptions): EmbeddedSecurityPolicy
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        assemblies: Optional[Sequence[EmbeddedSecurityPolicyAssemblyArgs]] = None,
        audit_trail: Optional[str] = None,
        description: Optional[str] = None,
        download_url_database_on_device: Optional[bool] = None,
        download_url_database_on_device_variable: Optional[str] = None,
        failure_mode: Optional[str] = None,
        feature_profile_id: Optional[str] = None,
        icmp_unreachable_allow: Optional[str] = None,
        max_incomplete_icmp_limit: Optional[str] = None,
        max_incomplete_tcp_limit: Optional[str] = None,
        max_incomplete_udp_limit: Optional[str] = None,
        name: Optional[str] = None,
        nat: Optional[bool] = None,
        nat_variable: Optional[str] = None,
        resource_profile: Optional[str] = None,
        resource_profile_variable: Optional[str] = None,
        session_reclassify_allow: Optional[str] = None,
        tcp_syn_flood_limit: Optional[str] = None,
        unified_logging: Optional[str] = None,
        version: Optional[int] = None) -> EmbeddedSecurityPolicy
    func GetEmbeddedSecurityPolicy(ctx *Context, name string, id IDInput, state *EmbeddedSecurityPolicyState, opts ...ResourceOption) (*EmbeddedSecurityPolicy, error)
    public static EmbeddedSecurityPolicy Get(string name, Input<string> id, EmbeddedSecurityPolicyState? state, CustomResourceOptions? opts = null)
    public static EmbeddedSecurityPolicy get(String name, Output<String> id, EmbeddedSecurityPolicyState state, CustomResourceOptions options)
    resources:  _:    type: sdwan:EmbeddedSecurityPolicy    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Assemblies List<EmbeddedSecurityPolicyAssembly>
    AuditTrail string
    Setting can be string 'on' or missing for off

    • Choices: on
    Description string
    The description of the Policy
    DownloadUrlDatabaseOnDevice bool
    DownloadUrlDatabaseOnDeviceVariable string
    Variable name
    FailureMode string
    • Choices: close, open
    FeatureProfileId string
    Feature Profile ID
    IcmpUnreachableAllow string
    Setting can be string 'on' or missing for off

    • Choices: on
    MaxIncompleteIcmpLimit string
    MaxIncompleteTcpLimit string
    MaxIncompleteUdpLimit string
    Name string
    The name of the Policy
    Nat bool
    NatVariable string
    Variable name
    ResourceProfile string
    • Choices: low, medium, high
    ResourceProfileVariable string
    Variable name
    SessionReclassifyAllow string
    Setting can be string 'on' or missing for off

    • Choices: on
    TcpSynFloodLimit string
    UnifiedLogging string
    Setting can be string 'on' or missing for off

    • Choices: on
    Version int
    The version of the Policy
    Assemblies []EmbeddedSecurityPolicyAssemblyArgs
    AuditTrail string
    Setting can be string 'on' or missing for off

    • Choices: on
    Description string
    The description of the Policy
    DownloadUrlDatabaseOnDevice bool
    DownloadUrlDatabaseOnDeviceVariable string
    Variable name
    FailureMode string
    • Choices: close, open
    FeatureProfileId string
    Feature Profile ID
    IcmpUnreachableAllow string
    Setting can be string 'on' or missing for off

    • Choices: on
    MaxIncompleteIcmpLimit string
    MaxIncompleteTcpLimit string
    MaxIncompleteUdpLimit string
    Name string
    The name of the Policy
    Nat bool
    NatVariable string
    Variable name
    ResourceProfile string
    • Choices: low, medium, high
    ResourceProfileVariable string
    Variable name
    SessionReclassifyAllow string
    Setting can be string 'on' or missing for off

    • Choices: on
    TcpSynFloodLimit string
    UnifiedLogging string
    Setting can be string 'on' or missing for off

    • Choices: on
    Version int
    The version of the Policy
    assemblies List<EmbeddedSecurityPolicyAssembly>
    auditTrail String
    Setting can be string 'on' or missing for off

    • Choices: on
    description String
    The description of the Policy
    downloadUrlDatabaseOnDevice Boolean
    downloadUrlDatabaseOnDeviceVariable String
    Variable name
    failureMode String
    • Choices: close, open
    featureProfileId String
    Feature Profile ID
    icmpUnreachableAllow String
    Setting can be string 'on' or missing for off

    • Choices: on
    maxIncompleteIcmpLimit String
    maxIncompleteTcpLimit String
    maxIncompleteUdpLimit String
    name String
    The name of the Policy
    nat Boolean
    natVariable String
    Variable name
    resourceProfile String
    • Choices: low, medium, high
    resourceProfileVariable String
    Variable name
    sessionReclassifyAllow String
    Setting can be string 'on' or missing for off

    • Choices: on
    tcpSynFloodLimit String
    unifiedLogging String
    Setting can be string 'on' or missing for off

    • Choices: on
    version Integer
    The version of the Policy
    assemblies EmbeddedSecurityPolicyAssembly[]
    auditTrail string
    Setting can be string 'on' or missing for off

    • Choices: on
    description string
    The description of the Policy
    downloadUrlDatabaseOnDevice boolean
    downloadUrlDatabaseOnDeviceVariable string
    Variable name
    failureMode string
    • Choices: close, open
    featureProfileId string
    Feature Profile ID
    icmpUnreachableAllow string
    Setting can be string 'on' or missing for off

    • Choices: on
    maxIncompleteIcmpLimit string
    maxIncompleteTcpLimit string
    maxIncompleteUdpLimit string
    name string
    The name of the Policy
    nat boolean
    natVariable string
    Variable name
    resourceProfile string
    • Choices: low, medium, high
    resourceProfileVariable string
    Variable name
    sessionReclassifyAllow string
    Setting can be string 'on' or missing for off

    • Choices: on
    tcpSynFloodLimit string
    unifiedLogging string
    Setting can be string 'on' or missing for off

    • Choices: on
    version number
    The version of the Policy
    assemblies Sequence[EmbeddedSecurityPolicyAssemblyArgs]
    audit_trail str
    Setting can be string 'on' or missing for off

    • Choices: on
    description str
    The description of the Policy
    download_url_database_on_device bool
    download_url_database_on_device_variable str
    Variable name
    failure_mode str
    • Choices: close, open
    feature_profile_id str
    Feature Profile ID
    icmp_unreachable_allow str
    Setting can be string 'on' or missing for off

    • Choices: on
    max_incomplete_icmp_limit str
    max_incomplete_tcp_limit str
    max_incomplete_udp_limit str
    name str
    The name of the Policy
    nat bool
    nat_variable str
    Variable name
    resource_profile str
    • Choices: low, medium, high
    resource_profile_variable str
    Variable name
    session_reclassify_allow str
    Setting can be string 'on' or missing for off

    • Choices: on
    tcp_syn_flood_limit str
    unified_logging str
    Setting can be string 'on' or missing for off

    • Choices: on
    version int
    The version of the Policy
    assemblies List<Property Map>
    auditTrail String
    Setting can be string 'on' or missing for off

    • Choices: on
    description String
    The description of the Policy
    downloadUrlDatabaseOnDevice Boolean
    downloadUrlDatabaseOnDeviceVariable String
    Variable name
    failureMode String
    • Choices: close, open
    featureProfileId String
    Feature Profile ID
    icmpUnreachableAllow String
    Setting can be string 'on' or missing for off

    • Choices: on
    maxIncompleteIcmpLimit String
    maxIncompleteTcpLimit String
    maxIncompleteUdpLimit String
    name String
    The name of the Policy
    nat Boolean
    natVariable String
    Variable name
    resourceProfile String
    • Choices: low, medium, high
    resourceProfileVariable String
    Variable name
    sessionReclassifyAllow String
    Setting can be string 'on' or missing for off

    • Choices: on
    tcpSynFloodLimit String
    unifiedLogging String
    Setting can be string 'on' or missing for off

    • Choices: on
    version Number
    The version of the Policy

    Supporting Types

    EmbeddedSecurityPolicyAssembly, EmbeddedSecurityPolicyAssemblyArgs

    EmbeddedSecurityPolicyAssemblyEntry, EmbeddedSecurityPolicyAssemblyEntryArgs

    DestinationZone string
    • Choices: self, default, untrusted
    DestinationZoneListId string
    SourceZone string
    • Choices: self, default, untrusted
    SourceZoneListId string
    DestinationZone string
    • Choices: self, default, untrusted
    DestinationZoneListId string
    SourceZone string
    • Choices: self, default, untrusted
    SourceZoneListId string
    destinationZone String
    • Choices: self, default, untrusted
    destinationZoneListId String
    sourceZone String
    • Choices: self, default, untrusted
    sourceZoneListId String
    destinationZone string
    • Choices: self, default, untrusted
    destinationZoneListId string
    sourceZone string
    • Choices: self, default, untrusted
    sourceZoneListId string
    destination_zone str
    • Choices: self, default, untrusted
    destination_zone_list_id str
    source_zone str
    • Choices: self, default, untrusted
    source_zone_list_id str
    destinationZone String
    • Choices: self, default, untrusted
    destinationZoneListId String
    sourceZone String
    • Choices: self, default, untrusted
    sourceZoneListId String

    Import

    The pulumi import command can be used, for example:

    Expected import identifier with the format: “embedded_security_policy_id,feature_profile_id”

    $ pulumi import sdwan:index/embeddedSecurityPolicy:EmbeddedSecurityPolicy example "f6b2c44c-693c-4763-b010-895aa3d236bd,f6dd22c8-0b4f-496c-9a0b-6813d1f8b8ac"

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    sdwan pulumi/pulumi-sdwan
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the sdwan Terraform Provider.
    sdwan logo
    Viewing docs for Cisco Catalyst SD-WAN v0.8.1
    published on Tuesday, Apr 7, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-sdwan
      Try Pulumi Cloud free. Your team will thank you.