Sign in Dashboard Get started
  1. Packages
  2. Packages
  3. Cisco Catalyst SD-WAN Provider
  4. API Docs
  5. SseZscalerFeature
Viewing docs for Cisco Catalyst SD-WAN v0.9.1
published on Friday, Jun 26, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-sdwan

sdwan.SseZscalerFeature

sdwan logo
Viewing docs for Cisco Catalyst SD-WAN v0.9.1
published on Friday, Jun 26, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-sdwan

    This resource can manage a SSE Zscaler Feature.

    • Minimum SD-WAN Manager version: 20.15.0

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as sdwan from "@pulumi/sdwan";

const example = new sdwan.SseZscalerFeature("example", {
    name: "Example",
    description: "My Example",
    featureProfileId: "f6dd22c8-0b4f-496c-9a0b-6813d1f8b8ac",
    interfaces: [{
        interfaceName: "ipsec1",
        auto: true,
        tunnelSourceInterface: "GigabitEthernet8",
        tunnelSet: "secure-internet-gateway-zscaler",
        tunnelDcPreference: "primary-dc",
        mtu: 1400,
        ikeVersion: 2,
        preSharedKeyDynamic: true,
    }],
    interfacePairs: [{
        activeInterface: "ipsec1",
        activeInterfaceWeight: 1,
        backupInterface: "None",
        backupInterfaceWeight: 1,
    }],
    refreshTime: 1,
    refreshTimeUnit: "MINUTE",
    subLocations: [{
        name: "zscaler_sub1",
        ofwEnabled: false,
        cautionEnabled: false,
        serviceVpn: ["service_lan_vpn1,service_lan_vpn2"],
        internalIp: [{
            internalIpValue: "172.16.2.1",
        }],
        aupEnabled: false,
        enforceBandwidthControl: "disabled",
    }],
    trackerSourceIp: "1.2.3.4",
    trackers: [{
        name: "tracker1",
        endpointApiUrl: "http://cisco.com",
        threshold: 300,
        interval: 60,
        multiplier: 3,
    }],
});

    import pulumi
import pulumi_sdwan as sdwan

example = sdwan.SseZscalerFeature("example",
    name="Example",
    description="My Example",
    feature_profile_id="f6dd22c8-0b4f-496c-9a0b-6813d1f8b8ac",
    interfaces=[{
        "interface_name": "ipsec1",
        "auto": True,
        "tunnel_source_interface": "GigabitEthernet8",
        "tunnel_set": "secure-internet-gateway-zscaler",
        "tunnel_dc_preference": "primary-dc",
        "mtu": 1400,
        "ike_version": 2,
        "pre_shared_key_dynamic": True,
    }],
    interface_pairs=[{
        "active_interface": "ipsec1",
        "active_interface_weight": 1,
        "backup_interface": "None",
        "backup_interface_weight": 1,
    }],
    refresh_time=1,
    refresh_time_unit="MINUTE",
    sub_locations=[{
        "name": "zscaler_sub1",
        "ofw_enabled": False,
        "caution_enabled": False,
        "service_vpn": ["service_lan_vpn1,service_lan_vpn2"],
        "internal_ip": [{
            "internalIpValue": "172.16.2.1",
        }],
        "aup_enabled": False,
        "enforce_bandwidth_control": "disabled",
    }],
    tracker_source_ip="1.2.3.4",
    trackers=[{
        "name": "tracker1",
        "endpoint_api_url": "http://cisco.com",
        "threshold": 300,
        "interval": 60,
        "multiplier": 3,
    }])

    package main

import (
	"github.com/pulumi/pulumi-sdwan/sdk/go/sdwan"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := sdwan.NewSseZscalerFeature(ctx, "example", &sdwan.SseZscalerFeatureArgs{
			Name:             pulumi.String("Example"),
			Description:      pulumi.String("My Example"),
			FeatureProfileId: pulumi.String("f6dd22c8-0b4f-496c-9a0b-6813d1f8b8ac"),
			Interfaces: sdwan.SseZscalerFeatureInterfaceArray{
				&sdwan.SseZscalerFeatureInterfaceArgs{
					InterfaceName:         pulumi.String("ipsec1"),
					Auto:                  pulumi.Bool(true),
					TunnelSourceInterface: pulumi.String("GigabitEthernet8"),
					TunnelSet:             pulumi.String("secure-internet-gateway-zscaler"),
					TunnelDcPreference:    pulumi.String("primary-dc"),
					Mtu:                   pulumi.Int(1400),
					IkeVersion:            pulumi.Int(2),
					PreSharedKeyDynamic:   pulumi.Bool(true),
				},
			},
			InterfacePairs: sdwan.SseZscalerFeatureInterfacePairArray{
				&sdwan.SseZscalerFeatureInterfacePairArgs{
					ActiveInterface:       pulumi.String("ipsec1"),
					ActiveInterfaceWeight: pulumi.Int(1),
					BackupInterface:       pulumi.String("None"),
					BackupInterfaceWeight: pulumi.Int(1),
				},
			},
			RefreshTime:     pulumi.Int(1),
			RefreshTimeUnit: pulumi.String("MINUTE"),
			SubLocations: sdwan.SseZscalerFeatureSubLocationArray{
				&sdwan.SseZscalerFeatureSubLocationArgs{
					Name:           pulumi.String("zscaler_sub1"),
					OfwEnabled:     pulumi.Bool(false),
					CautionEnabled: pulumi.Bool(false),
					ServiceVpn: []string{
						"service_lan_vpn1,service_lan_vpn2",
					},
					InternalIp: []map[string]interface{}{
						map[string]interface{}{
							"internalIpValue": "172.16.2.1",
						},
					},
					AupEnabled:              pulumi.Bool(false),
					EnforceBandwidthControl: pulumi.String("disabled"),
				},
			},
			TrackerSourceIp: pulumi.String("1.2.3.4"),
			Trackers: sdwan.SseZscalerFeatureTrackerArray{
				&sdwan.SseZscalerFeatureTrackerArgs{
					Name:           pulumi.String("tracker1"),
					EndpointApiUrl: pulumi.String("http://cisco.com"),
					Threshold:      pulumi.Int(300),
					Interval:       pulumi.Int(60),
					Multiplier:     pulumi.Int(3),
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Sdwan = Pulumi.Sdwan;

return await Deployment.RunAsync(() => 
{
    var example = new Sdwan.SseZscalerFeature("example", new()
    {
        Name = "Example",
        Description = "My Example",
        FeatureProfileId = "f6dd22c8-0b4f-496c-9a0b-6813d1f8b8ac",
        Interfaces = new[]
        {
            new Sdwan.Inputs.SseZscalerFeatureInterfaceArgs
            {
                InterfaceName = "ipsec1",
                Auto = true,
                TunnelSourceInterface = "GigabitEthernet8",
                TunnelSet = "secure-internet-gateway-zscaler",
                TunnelDcPreference = "primary-dc",
                Mtu = 1400,
                IkeVersion = 2,
                PreSharedKeyDynamic = true,
            },
        },
        InterfacePairs = new[]
        {
            new Sdwan.Inputs.SseZscalerFeatureInterfacePairArgs
            {
                ActiveInterface = "ipsec1",
                ActiveInterfaceWeight = 1,
                BackupInterface = "None",
                BackupInterfaceWeight = 1,
            },
        },
        RefreshTime = 1,
        RefreshTimeUnit = "MINUTE",
        SubLocations = new[]
        {
            new Sdwan.Inputs.SseZscalerFeatureSubLocationArgs
            {
                Name = "zscaler_sub1",
                OfwEnabled = false,
                CautionEnabled = false,
                ServiceVpn = new[]
                {
                    "service_lan_vpn1,service_lan_vpn2",
                },
                InternalIp = new[]
                {
                    
                    {
                        { "internalIpValue", "172.16.2.1" },
                    },
                },
                AupEnabled = false,
                EnforceBandwidthControl = "disabled",
            },
        },
        TrackerSourceIp = "1.2.3.4",
        Trackers = new[]
        {
            new Sdwan.Inputs.SseZscalerFeatureTrackerArgs
            {
                Name = "tracker1",
                EndpointApiUrl = "http://cisco.com",
                Threshold = 300,
                Interval = 60,
                Multiplier = 3,
            },
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.sdwan.SseZscalerFeature;
import com.pulumi.sdwan.SseZscalerFeatureArgs;
import com.pulumi.sdwan.inputs.SseZscalerFeatureInterfaceArgs;
import com.pulumi.sdwan.inputs.SseZscalerFeatureInterfacePairArgs;
import com.pulumi.sdwan.inputs.SseZscalerFeatureSubLocationArgs;
import com.pulumi.sdwan.inputs.SseZscalerFeatureTrackerArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new SseZscalerFeature("example", SseZscalerFeatureArgs.builder()
            .name("Example")
            .description("My Example")
            .featureProfileId("f6dd22c8-0b4f-496c-9a0b-6813d1f8b8ac")
            .interfaces(SseZscalerFeatureInterfaceArgs.builder()
                .interfaceName("ipsec1")
                .auto(true)
                .tunnelSourceInterface("GigabitEthernet8")
                .tunnelSet("secure-internet-gateway-zscaler")
                .tunnelDcPreference("primary-dc")
                .mtu(1400)
                .ikeVersion(2)
                .preSharedKeyDynamic(true)
                .build())
            .interfacePairs(SseZscalerFeatureInterfacePairArgs.builder()
                .activeInterface("ipsec1")
                .activeInterfaceWeight(1)
                .backupInterface("None")
                .backupInterfaceWeight(1)
                .build())
            .refreshTime(1)
            .refreshTimeUnit("MINUTE")
            .subLocations(SseZscalerFeatureSubLocationArgs.builder()
                .name("zscaler_sub1")
                .ofwEnabled(false)
                .cautionEnabled(false)
                .serviceVpn(Arrays.asList("service_lan_vpn1,service_lan_vpn2"))
                .internalIp(Arrays.asList(Map.of("internalIpValue", "172.16.2.1")))
                .aupEnabled(false)
                .enforceBandwidthControl("disabled")
                .build())
            .trackerSourceIp("1.2.3.4")
            .trackers(SseZscalerFeatureTrackerArgs.builder()
                .name("tracker1")
                .endpointApiUrl("http://cisco.com")
                .threshold(300)
                .interval(60)
                .multiplier(3)
                .build())
            .build());

    }
}

    resources:
  example:
    type: sdwan:SseZscalerFeature
    properties:
      name: Example
      description: My Example
      featureProfileId: f6dd22c8-0b4f-496c-9a0b-6813d1f8b8ac
      interfaces:
        - interfaceName: ipsec1
          auto: true
          tunnelSourceInterface: GigabitEthernet8
          tunnelSet: secure-internet-gateway-zscaler
          tunnelDcPreference: primary-dc
          mtu: 1400
          ikeVersion: 2
          preSharedKeyDynamic: true
      interfacePairs:
        - activeInterface: ipsec1
          activeInterfaceWeight: 1
          backupInterface: None
          backupInterfaceWeight: 1
      refreshTime: 1
      refreshTimeUnit: MINUTE
      subLocations:
        - name: zscaler_sub1
          ofwEnabled: false
          cautionEnabled: false
          serviceVpn:
            - service_lan_vpn1,service_lan_vpn2
          internalIp:
            - internalIpValue: 172.16.2.1
          aupEnabled: false
          enforceBandwidthControl: disabled
      trackerSourceIp: 1.2.3.4
      trackers:
        - name: tracker1
          endpointApiUrl: http://cisco.com
          threshold: 300
          interval: 60
          multiplier: 3

    pulumi {
  required_providers {
    sdwan = {
      source = "pulumi/sdwan"
    }
  }
}

resource "sdwan_ssezscalerfeature" "example" {
  name               = "Example"
  description        = "My Example"
  feature_profile_id = "f6dd22c8-0b4f-496c-9a0b-6813d1f8b8ac"
  interfaces {
    interface_name          = "ipsec1"
    auto                    = true
    tunnel_source_interface = "GigabitEthernet8"
    tunnel_set              = "secure-internet-gateway-zscaler"
    tunnel_dc_preference    = "primary-dc"
    mtu                     = 1400
    ike_version             = 2
    pre_shared_key_dynamic  = true
  }
  interface_pairs {
    active_interface        = "ipsec1"
    active_interface_weight = 1
    backup_interface        = "None"
    backup_interface_weight = 1
  }
  refresh_time      = 1
  refresh_time_unit = "MINUTE"
  sub_locations {
    name            = "zscaler_sub1"
    ofw_enabled     = false
    caution_enabled = false
    service_vpn     = ["service_lan_vpn1,service_lan_vpn2"]
    internal_ip = [{
      "internalIpValue" = "172.16.2.1"
    }]
    aup_enabled               = false
    enforce_bandwidth_control = "disabled"
  }
  tracker_source_ip = "1.2.3.4"
  trackers {
    name             = "tracker1"
    endpoint_api_url = "http://cisco.com"
    threshold        = 300
    interval         = 60
    multiplier       = 3
  }
}

    Create SseZscalerFeature Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new SseZscalerFeature(name: string, args: SseZscalerFeatureArgs, opts?: CustomResourceOptions);
    @overload
def SseZscalerFeature(resource_name: str,
                      args: SseZscalerFeatureArgs,
                      opts: Optional[ResourceOptions] = None)

@overload
def SseZscalerFeature(resource_name: str,
                      opts: Optional[ResourceOptions] = None,
                      feature_profile_id: Optional[str] = None,
                      interface_pairs: Optional[Sequence[SseZscalerFeatureInterfacePairArgs]] = None,
                      interfaces: Optional[Sequence[SseZscalerFeatureInterfaceArgs]] = None,
                      tracker_source_ip: Optional[str] = None,
                      aup_enabled: Optional[bool] = None,
                      aup_enabled_variable: Optional[str] = None,
                      aup_timeout: Optional[int] = None,
                      aup_timeout_variable: Optional[str] = None,
                      auth_required: Optional[bool] = None,
                      auth_required_variable: Optional[str] = None,
                      block_internet_until_accepted: Optional[bool] = None,
                      block_internet_until_accepted_variable: Optional[str] = None,
                      caution_enabled: Optional[bool] = None,
                      caution_enabled_variable: Optional[str] = None,
                      country: Optional[bool] = None,
                      country_variable: Optional[str] = None,
                      description: Optional[str] = None,
                      display_time_unit: Optional[str] = None,
                      display_time_unit_variable: Optional[str] = None,
                      dn_bandwidth: Optional[float] = None,
                      dn_bandwidth_variable: Optional[str] = None,
                      enforce_bandwidth_control: Optional[bool] = None,
                      enforce_bandwidth_control_variable: Optional[str] = None,
                      force_ssl_inspection: Optional[bool] = None,
                      force_ssl_inspection_variable: Optional[str] = None,
                      idle_time: Optional[int] = None,
                      idle_time_variable: Optional[str] = None,
                      ip_enforced_for_known_browsers: Optional[bool] = None,
                      ip_enforced_for_known_browsers_variable: Optional[str] = None,
                      ips_control: Optional[bool] = None,
                      ips_control_variable: Optional[str] = None,
                      location_name: Optional[str] = None,
                      location_name_variable: Optional[str] = None,
                      name: Optional[str] = None,
                      ofw_enabled: Optional[bool] = None,
                      ofw_enabled_variable: Optional[str] = None,
                      primary_data_center: Optional[str] = None,
                      primary_data_center_variable: Optional[str] = None,
                      refresh_time: Optional[int] = None,
                      refresh_time_unit: Optional[str] = None,
                      refresh_time_unit_variable: Optional[str] = None,
                      refresh_time_variable: Optional[str] = None,
                      secondary_data_center: Optional[str] = None,
                      secondary_data_center_variable: Optional[str] = None,
                      src_vpn: Optional[bool] = None,
                      sub_locations: Optional[Sequence[SseZscalerFeatureSubLocationArgs]] = None,
                      surrogate_ip: Optional[bool] = None,
                      surrogate_ip_variable: Optional[str] = None,
                      tracker_source_ip_variable: Optional[str] = None,
                      trackers: Optional[Sequence[SseZscalerFeatureTrackerArgs]] = None,
                      up_bandwidth: Optional[float] = None,
                      up_bandwidth_variable: Optional[str] = None,
                      xff_forward_enabled: Optional[bool] = None,
                      xff_forward_enabled_variable: Optional[str] = None)
    func NewSseZscalerFeature(ctx *Context, name string, args SseZscalerFeatureArgs, opts ...ResourceOption) (*SseZscalerFeature, error)
    public SseZscalerFeature(string name, SseZscalerFeatureArgs args, CustomResourceOptions? opts = null)
    public SseZscalerFeature(String name, SseZscalerFeatureArgs args)
public SseZscalerFeature(String name, SseZscalerFeatureArgs args, CustomResourceOptions options)

    type: sdwan:SseZscalerFeature
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "sdwan_ssezscalerfeature" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args SseZscalerFeatureArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args SseZscalerFeatureArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args SseZscalerFeatureArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args SseZscalerFeatureArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args SseZscalerFeatureArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var sseZscalerFeatureResource = new Sdwan.SseZscalerFeature("sseZscalerFeatureResource", new()
{
    FeatureProfileId = "string",
    InterfacePairs = new[]
    {
        new Sdwan.Inputs.SseZscalerFeatureInterfacePairArgs
        {
            ActiveInterface = "string",
            ActiveInterfaceWeight = 0,
            BackupInterface = "string",
            BackupInterfaceWeight = 0,
        },
    },
    Interfaces = new[]
    {
        new Sdwan.Inputs.SseZscalerFeatureInterfaceArgs
        {
            Auto = false,
            DpdInterval = 0,
            DpdIntervalVariable = "string",
            DpdRetries = 0,
            DpdRetriesVariable = "string",
            IkeCiphersuite = "string",
            IkeCiphersuiteVariable = "string",
            IkeGroup = "string",
            IkeGroupVariable = "string",
            IkeLocalId = "string",
            IkeLocalIdVariable = "string",
            IkeRekeyInterval = 0,
            IkeRekeyIntervalVariable = "string",
            IkeRemoteId = "string",
            IkeRemoteIdVariable = "string",
            IkeVersion = 0,
            IkeVersionVariable = "string",
            InterfaceDescription = "string",
            InterfaceDescriptionVariable = "string",
            InterfaceName = "string",
            IpsecCiphersuite = "string",
            IpsecCiphersuiteVariable = "string",
            IpsecRekeyInterval = 0,
            IpsecRekeyIntervalVariable = "string",
            IpsecReplayWindow = 0,
            IpsecReplayWindowVariable = "string",
            Ipv4Address = "string",
            Ipv4AddressVariable = "string",
            Mtu = 0,
            MtuVariable = "string",
            PerfectForwardSecrecy = "string",
            PerfectForwardSecrecyVariable = "string",
            PreSharedKeyDynamic = false,
            PreSharedSecret = "string",
            PreSharedSecretVariable = "string",
            Shutdown = false,
            TcpMssAdjust = 0,
            TcpMssAdjustVariable = "string",
            TrackEnable = false,
            Tracker = "string",
            TunnelDcPreference = "string",
            TunnelDestination = "string",
            TunnelDestinationVariable = "string",
            TunnelPublicIp = "string",
            TunnelPublicIpVariable = "string",
            TunnelRouteVia = "string",
            TunnelRouteViaVariable = "string",
            TunnelSet = "string",
            TunnelSource = "string",
            TunnelSourceInterface = "string",
            TunnelSourceInterfaceVariable = "string",
            TunnelSourceVariable = "string",
            Unnumbered = false,
        },
    },
    TrackerSourceIp = "string",
    AupEnabled = false,
    AupEnabledVariable = "string",
    AupTimeout = 0,
    AupTimeoutVariable = "string",
    AuthRequired = false,
    AuthRequiredVariable = "string",
    BlockInternetUntilAccepted = false,
    BlockInternetUntilAcceptedVariable = "string",
    CautionEnabled = false,
    CautionEnabledVariable = "string",
    Country = false,
    CountryVariable = "string",
    Description = "string",
    DisplayTimeUnit = "string",
    DisplayTimeUnitVariable = "string",
    DnBandwidth = 0,
    DnBandwidthVariable = "string",
    EnforceBandwidthControl = false,
    EnforceBandwidthControlVariable = "string",
    ForceSslInspection = false,
    ForceSslInspectionVariable = "string",
    IdleTime = 0,
    IdleTimeVariable = "string",
    IpEnforcedForKnownBrowsers = false,
    IpEnforcedForKnownBrowsersVariable = "string",
    IpsControl = false,
    IpsControlVariable = "string",
    LocationName = "string",
    LocationNameVariable = "string",
    Name = "string",
    OfwEnabled = false,
    OfwEnabledVariable = "string",
    PrimaryDataCenter = "string",
    PrimaryDataCenterVariable = "string",
    RefreshTime = 0,
    RefreshTimeUnit = "string",
    RefreshTimeUnitVariable = "string",
    RefreshTimeVariable = "string",
    SecondaryDataCenter = "string",
    SecondaryDataCenterVariable = "string",
    SrcVpn = false,
    SubLocations = new[]
    {
        new Sdwan.Inputs.SseZscalerFeatureSubLocationArgs
        {
            AupEnabled = false,
            AupEnabledVariable = "string",
            AupTimeout = 0,
            AupTimeoutVariable = "string",
            AuthRequired = false,
            AuthRequiredVariable = "string",
            BlockInternetUntilAccepted = false,
            BlockInternetUntilAcceptedVariable = "string",
            CautionEnabled = false,
            CautionEnabledVariable = "string",
            DisplayTimeUnit = "string",
            DisplayTimeUnitVariable = "string",
            DnBandwidth = 0,
            DnBandwidthVariable = "string",
            EnforceBandwidthControl = "string",
            EnforceBandwidthControlVariable = "string",
            ForceSslInspection = false,
            ForceSslInspectionVariable = "string",
            IdleTime = 0,
            IdleTimeVariable = "string",
            InternalIps = new[]
            {
                new Sdwan.Inputs.SseZscalerFeatureSubLocationInternalIpArgs
                {
                    InternalIpValue = "string",
                    InternalIpValueVariable = "string",
                },
            },
            IpEnforcedForKnownBrowsers = false,
            IpEnforcedForKnownBrowsersVariable = "string",
            Name = "string",
            NameVariable = "string",
            OfwEnabled = false,
            OfwEnabledVariable = "string",
            RefreshTime = 0,
            RefreshTimeUnit = "string",
            RefreshTimeUnitVariable = "string",
            RefreshTimeVariable = "string",
            ServiceVpnVariable = "string",
            ServiceVpns = new[]
            {
                "string",
            },
            SurrogateIp = false,
            SurrogateIpVariable = "string",
            UpBandwidth = 0,
            UpBandwidthVariable = "string",
        },
    },
    SurrogateIp = false,
    SurrogateIpVariable = "string",
    TrackerSourceIpVariable = "string",
    Trackers = new[]
    {
        new Sdwan.Inputs.SseZscalerFeatureTrackerArgs
        {
            EndpointApiUrl = "string",
            EndpointApiUrlVariable = "string",
            Interval = 0,
            IntervalVariable = "string",
            Multiplier = 0,
            MultiplierVariable = "string",
            Name = "string",
            Threshold = 0,
            ThresholdVariable = "string",
        },
    },
    UpBandwidth = 0,
    UpBandwidthVariable = "string",
    XffForwardEnabled = false,
    XffForwardEnabledVariable = "string",
});

    example, err := sdwan.NewSseZscalerFeature(ctx, "sseZscalerFeatureResource", &sdwan.SseZscalerFeatureArgs{
	FeatureProfileId: pulumi.String("string"),
	InterfacePairs: sdwan.SseZscalerFeatureInterfacePairArray{
		&sdwan.SseZscalerFeatureInterfacePairArgs{
			ActiveInterface:       pulumi.String("string"),
			ActiveInterfaceWeight: pulumi.Int(0),
			BackupInterface:       pulumi.String("string"),
			BackupInterfaceWeight: pulumi.Int(0),
		},
	},
	Interfaces: sdwan.SseZscalerFeatureInterfaceArray{
		&sdwan.SseZscalerFeatureInterfaceArgs{
			Auto:                          pulumi.Bool(false),
			DpdInterval:                   pulumi.Int(0),
			DpdIntervalVariable:           pulumi.String("string"),
			DpdRetries:                    pulumi.Int(0),
			DpdRetriesVariable:            pulumi.String("string"),
			IkeCiphersuite:                pulumi.String("string"),
			IkeCiphersuiteVariable:        pulumi.String("string"),
			IkeGroup:                      pulumi.String("string"),
			IkeGroupVariable:              pulumi.String("string"),
			IkeLocalId:                    pulumi.String("string"),
			IkeLocalIdVariable:            pulumi.String("string"),
			IkeRekeyInterval:              pulumi.Int(0),
			IkeRekeyIntervalVariable:      pulumi.String("string"),
			IkeRemoteId:                   pulumi.String("string"),
			IkeRemoteIdVariable:           pulumi.String("string"),
			IkeVersion:                    pulumi.Int(0),
			IkeVersionVariable:            pulumi.String("string"),
			InterfaceDescription:          pulumi.String("string"),
			InterfaceDescriptionVariable:  pulumi.String("string"),
			InterfaceName:                 pulumi.String("string"),
			IpsecCiphersuite:              pulumi.String("string"),
			IpsecCiphersuiteVariable:      pulumi.String("string"),
			IpsecRekeyInterval:            pulumi.Int(0),
			IpsecRekeyIntervalVariable:    pulumi.String("string"),
			IpsecReplayWindow:             pulumi.Int(0),
			IpsecReplayWindowVariable:     pulumi.String("string"),
			Ipv4Address:                   pulumi.String("string"),
			Ipv4AddressVariable:           pulumi.String("string"),
			Mtu:                           pulumi.Int(0),
			MtuVariable:                   pulumi.String("string"),
			PerfectForwardSecrecy:         pulumi.String("string"),
			PerfectForwardSecrecyVariable: pulumi.String("string"),
			PreSharedKeyDynamic:           pulumi.Bool(false),
			PreSharedSecret:               pulumi.String("string"),
			PreSharedSecretVariable:       pulumi.String("string"),
			Shutdown:                      pulumi.Bool(false),
			TcpMssAdjust:                  pulumi.Int(0),
			TcpMssAdjustVariable:          pulumi.String("string"),
			TrackEnable:                   pulumi.Bool(false),
			Tracker:                       pulumi.String("string"),
			TunnelDcPreference:            pulumi.String("string"),
			TunnelDestination:             pulumi.String("string"),
			TunnelDestinationVariable:     pulumi.String("string"),
			TunnelPublicIp:                pulumi.String("string"),
			TunnelPublicIpVariable:        pulumi.String("string"),
			TunnelRouteVia:                pulumi.String("string"),
			TunnelRouteViaVariable:        pulumi.String("string"),
			TunnelSet:                     pulumi.String("string"),
			TunnelSource:                  pulumi.String("string"),
			TunnelSourceInterface:         pulumi.String("string"),
			TunnelSourceInterfaceVariable: pulumi.String("string"),
			TunnelSourceVariable:          pulumi.String("string"),
			Unnumbered:                    pulumi.Bool(false),
		},
	},
	TrackerSourceIp:                    pulumi.String("string"),
	AupEnabled:                         pulumi.Bool(false),
	AupEnabledVariable:                 pulumi.String("string"),
	AupTimeout:                         pulumi.Int(0),
	AupTimeoutVariable:                 pulumi.String("string"),
	AuthRequired:                       pulumi.Bool(false),
	AuthRequiredVariable:               pulumi.String("string"),
	BlockInternetUntilAccepted:         pulumi.Bool(false),
	BlockInternetUntilAcceptedVariable: pulumi.String("string"),
	CautionEnabled:                     pulumi.Bool(false),
	CautionEnabledVariable:             pulumi.String("string"),
	Country:                            pulumi.Bool(false),
	CountryVariable:                    pulumi.String("string"),
	Description:                        pulumi.String("string"),
	DisplayTimeUnit:                    pulumi.String("string"),
	DisplayTimeUnitVariable:            pulumi.String("string"),
	DnBandwidth:                        pulumi.Float64(0),
	DnBandwidthVariable:                pulumi.String("string"),
	EnforceBandwidthControl:            pulumi.Bool(false),
	EnforceBandwidthControlVariable:    pulumi.String("string"),
	ForceSslInspection:                 pulumi.Bool(false),
	ForceSslInspectionVariable:         pulumi.String("string"),
	IdleTime:                           pulumi.Int(0),
	IdleTimeVariable:                   pulumi.String("string"),
	IpEnforcedForKnownBrowsers:         pulumi.Bool(false),
	IpEnforcedForKnownBrowsersVariable: pulumi.String("string"),
	IpsControl:                         pulumi.Bool(false),
	IpsControlVariable:                 pulumi.String("string"),
	LocationName:                       pulumi.String("string"),
	LocationNameVariable:               pulumi.String("string"),
	Name:                               pulumi.String("string"),
	OfwEnabled:                         pulumi.Bool(false),
	OfwEnabledVariable:                 pulumi.String("string"),
	PrimaryDataCenter:                  pulumi.String("string"),
	PrimaryDataCenterVariable:          pulumi.String("string"),
	RefreshTime:                        pulumi.Int(0),
	RefreshTimeUnit:                    pulumi.String("string"),
	RefreshTimeUnitVariable:            pulumi.String("string"),
	RefreshTimeVariable:                pulumi.String("string"),
	SecondaryDataCenter:                pulumi.String("string"),
	SecondaryDataCenterVariable:        pulumi.String("string"),
	SrcVpn:                             pulumi.Bool(false),
	SubLocations: sdwan.SseZscalerFeatureSubLocationArray{
		&sdwan.SseZscalerFeatureSubLocationArgs{
			AupEnabled:                         pulumi.Bool(false),
			AupEnabledVariable:                 pulumi.String("string"),
			AupTimeout:                         pulumi.Int(0),
			AupTimeoutVariable:                 pulumi.String("string"),
			AuthRequired:                       pulumi.Bool(false),
			AuthRequiredVariable:               pulumi.String("string"),
			BlockInternetUntilAccepted:         pulumi.Bool(false),
			BlockInternetUntilAcceptedVariable: pulumi.String("string"),
			CautionEnabled:                     pulumi.Bool(false),
			CautionEnabledVariable:             pulumi.String("string"),
			DisplayTimeUnit:                    pulumi.String("string"),
			DisplayTimeUnitVariable:            pulumi.String("string"),
			DnBandwidth:                        pulumi.Float64(0),
			DnBandwidthVariable:                pulumi.String("string"),
			EnforceBandwidthControl:            pulumi.String("string"),
			EnforceBandwidthControlVariable:    pulumi.String("string"),
			ForceSslInspection:                 pulumi.Bool(false),
			ForceSslInspectionVariable:         pulumi.String("string"),
			IdleTime:                           pulumi.Int(0),
			IdleTimeVariable:                   pulumi.String("string"),
			InternalIps: sdwan.SseZscalerFeatureSubLocationInternalIpArray{
				&sdwan.SseZscalerFeatureSubLocationInternalIpArgs{
					InternalIpValue:         pulumi.String("string"),
					InternalIpValueVariable: pulumi.String("string"),
				},
			},
			IpEnforcedForKnownBrowsers:         pulumi.Bool(false),
			IpEnforcedForKnownBrowsersVariable: pulumi.String("string"),
			Name:                               pulumi.String("string"),
			NameVariable:                       pulumi.String("string"),
			OfwEnabled:                         pulumi.Bool(false),
			OfwEnabledVariable:                 pulumi.String("string"),
			RefreshTime:                        pulumi.Int(0),
			RefreshTimeUnit:                    pulumi.String("string"),
			RefreshTimeUnitVariable:            pulumi.String("string"),
			RefreshTimeVariable:                pulumi.String("string"),
			ServiceVpnVariable:                 pulumi.String("string"),
			ServiceVpns: pulumi.StringArray{
				pulumi.String("string"),
			},
			SurrogateIp:         pulumi.Bool(false),
			SurrogateIpVariable: pulumi.String("string"),
			UpBandwidth:         pulumi.Float64(0),
			UpBandwidthVariable: pulumi.String("string"),
		},
	},
	SurrogateIp:             pulumi.Bool(false),
	SurrogateIpVariable:     pulumi.String("string"),
	TrackerSourceIpVariable: pulumi.String("string"),
	Trackers: sdwan.SseZscalerFeatureTrackerArray{
		&sdwan.SseZscalerFeatureTrackerArgs{
			EndpointApiUrl:         pulumi.String("string"),
			EndpointApiUrlVariable: pulumi.String("string"),
			Interval:               pulumi.Int(0),
			IntervalVariable:       pulumi.String("string"),
			Multiplier:             pulumi.Int(0),
			MultiplierVariable:     pulumi.String("string"),
			Name:                   pulumi.String("string"),
			Threshold:              pulumi.Int(0),
			ThresholdVariable:      pulumi.String("string"),
		},
	},
	UpBandwidth:               pulumi.Float64(0),
	UpBandwidthVariable:       pulumi.String("string"),
	XffForwardEnabled:         pulumi.Bool(false),
	XffForwardEnabledVariable: pulumi.String("string"),
})

    resource "sdwan_ssezscalerfeature" "sseZscalerFeatureResource" {
  feature_profile_id = "string"
  interface_pairs {
    active_interface        = "string"
    active_interface_weight = 0
    backup_interface        = "string"
    backup_interface_weight = 0
  }
  interfaces {
    auto                             = false
    dpd_interval                     = 0
    dpd_interval_variable            = "string"
    dpd_retries                      = 0
    dpd_retries_variable             = "string"
    ike_ciphersuite                  = "string"
    ike_ciphersuite_variable         = "string"
    ike_group                        = "string"
    ike_group_variable               = "string"
    ike_local_id                     = "string"
    ike_local_id_variable            = "string"
    ike_rekey_interval               = 0
    ike_rekey_interval_variable      = "string"
    ike_remote_id                    = "string"
    ike_remote_id_variable           = "string"
    ike_version                      = 0
    ike_version_variable             = "string"
    interface_description            = "string"
    interface_description_variable   = "string"
    interface_name                   = "string"
    ipsec_ciphersuite                = "string"
    ipsec_ciphersuite_variable       = "string"
    ipsec_rekey_interval             = 0
    ipsec_rekey_interval_variable    = "string"
    ipsec_replay_window              = 0
    ipsec_replay_window_variable     = "string"
    ipv4_address                     = "string"
    ipv4_address_variable            = "string"
    mtu                              = 0
    mtu_variable                     = "string"
    perfect_forward_secrecy          = "string"
    perfect_forward_secrecy_variable = "string"
    pre_shared_key_dynamic           = false
    pre_shared_secret                = "string"
    pre_shared_secret_variable       = "string"
    shutdown                         = false
    tcp_mss_adjust                   = 0
    tcp_mss_adjust_variable          = "string"
    track_enable                     = false
    tracker                          = "string"
    tunnel_dc_preference             = "string"
    tunnel_destination               = "string"
    tunnel_destination_variable      = "string"
    tunnel_public_ip                 = "string"
    tunnel_public_ip_variable        = "string"
    tunnel_route_via                 = "string"
    tunnel_route_via_variable        = "string"
    tunnel_set                       = "string"
    tunnel_source                    = "string"
    tunnel_source_interface          = "string"
    tunnel_source_interface_variable = "string"
    tunnel_source_variable           = "string"
    unnumbered                       = false
  }
  tracker_source_ip                       = "string"
  aup_enabled                             = false
  aup_enabled_variable                    = "string"
  aup_timeout                             = 0
  aup_timeout_variable                    = "string"
  auth_required                           = false
  auth_required_variable                  = "string"
  block_internet_until_accepted           = false
  block_internet_until_accepted_variable  = "string"
  caution_enabled                         = false
  caution_enabled_variable                = "string"
  country                                 = false
  country_variable                        = "string"
  description                             = "string"
  display_time_unit                       = "string"
  display_time_unit_variable              = "string"
  dn_bandwidth                            = 0
  dn_bandwidth_variable                   = "string"
  enforce_bandwidth_control               = false
  enforce_bandwidth_control_variable      = "string"
  force_ssl_inspection                    = false
  force_ssl_inspection_variable           = "string"
  idle_time                               = 0
  idle_time_variable                      = "string"
  ip_enforced_for_known_browsers          = false
  ip_enforced_for_known_browsers_variable = "string"
  ips_control                             = false
  ips_control_variable                    = "string"
  location_name                           = "string"
  location_name_variable                  = "string"
  name                                    = "string"
  ofw_enabled                             = false
  ofw_enabled_variable                    = "string"
  primary_data_center                     = "string"
  primary_data_center_variable            = "string"
  refresh_time                            = 0
  refresh_time_unit                       = "string"
  refresh_time_unit_variable              = "string"
  refresh_time_variable                   = "string"
  secondary_data_center                   = "string"
  secondary_data_center_variable          = "string"
  src_vpn                                 = false
  sub_locations {
    aup_enabled                            = false
    aup_enabled_variable                   = "string"
    aup_timeout                            = 0
    aup_timeout_variable                   = "string"
    auth_required                          = false
    auth_required_variable                 = "string"
    block_internet_until_accepted          = false
    block_internet_until_accepted_variable = "string"
    caution_enabled                        = false
    caution_enabled_variable               = "string"
    display_time_unit                      = "string"
    display_time_unit_variable             = "string"
    dn_bandwidth                           = 0
    dn_bandwidth_variable                  = "string"
    enforce_bandwidth_control              = "string"
    enforce_bandwidth_control_variable     = "string"
    force_ssl_inspection                   = false
    force_ssl_inspection_variable          = "string"
    idle_time                              = 0
    idle_time_variable                     = "string"
    internal_ips {
      internal_ip_value          = "string"
      internal_ip_value_variable = "string"
    }
    ip_enforced_for_known_browsers          = false
    ip_enforced_for_known_browsers_variable = "string"
    name                                    = "string"
    name_variable                           = "string"
    ofw_enabled                             = false
    ofw_enabled_variable                    = "string"
    refresh_time                            = 0
    refresh_time_unit                       = "string"
    refresh_time_unit_variable              = "string"
    refresh_time_variable                   = "string"
    service_vpn_variable                    = "string"
    service_vpns                            = ["string"]
    surrogate_ip                            = false
    surrogate_ip_variable                   = "string"
    up_bandwidth                            = 0
    up_bandwidth_variable                   = "string"
  }
  surrogate_ip               = false
  surrogate_ip_variable      = "string"
  tracker_source_ip_variable = "string"
  trackers {
    endpoint_api_url          = "string"
    endpoint_api_url_variable = "string"
    interval                  = 0
    interval_variable         = "string"
    multiplier                = 0
    multiplier_variable       = "string"
    name                      = "string"
    threshold                 = 0
    threshold_variable        = "string"
  }
  up_bandwidth                 = 0
  up_bandwidth_variable        = "string"
  xff_forward_enabled          = false
  xff_forward_enabled_variable = "string"
}

    var sseZscalerFeatureResource = new SseZscalerFeature("sseZscalerFeatureResource", SseZscalerFeatureArgs.builder()
    .featureProfileId("string")
    .interfacePairs(SseZscalerFeatureInterfacePairArgs.builder()
        .activeInterface("string")
        .activeInterfaceWeight(0)
        .backupInterface("string")
        .backupInterfaceWeight(0)
        .build())
    .interfaces(SseZscalerFeatureInterfaceArgs.builder()
        .auto(false)
        .dpdInterval(0)
        .dpdIntervalVariable("string")
        .dpdRetries(0)
        .dpdRetriesVariable("string")
        .ikeCiphersuite("string")
        .ikeCiphersuiteVariable("string")
        .ikeGroup("string")
        .ikeGroupVariable("string")
        .ikeLocalId("string")
        .ikeLocalIdVariable("string")
        .ikeRekeyInterval(0)
        .ikeRekeyIntervalVariable("string")
        .ikeRemoteId("string")
        .ikeRemoteIdVariable("string")
        .ikeVersion(0)
        .ikeVersionVariable("string")
        .interfaceDescription("string")
        .interfaceDescriptionVariable("string")
        .interfaceName("string")
        .ipsecCiphersuite("string")
        .ipsecCiphersuiteVariable("string")
        .ipsecRekeyInterval(0)
        .ipsecRekeyIntervalVariable("string")
        .ipsecReplayWindow(0)
        .ipsecReplayWindowVariable("string")
        .ipv4Address("string")
        .ipv4AddressVariable("string")
        .mtu(0)
        .mtuVariable("string")
        .perfectForwardSecrecy("string")
        .perfectForwardSecrecyVariable("string")
        .preSharedKeyDynamic(false)
        .preSharedSecret("string")
        .preSharedSecretVariable("string")
        .shutdown(false)
        .tcpMssAdjust(0)
        .tcpMssAdjustVariable("string")
        .trackEnable(false)
        .tracker("string")
        .tunnelDcPreference("string")
        .tunnelDestination("string")
        .tunnelDestinationVariable("string")
        .tunnelPublicIp("string")
        .tunnelPublicIpVariable("string")
        .tunnelRouteVia("string")
        .tunnelRouteViaVariable("string")
        .tunnelSet("string")
        .tunnelSource("string")
        .tunnelSourceInterface("string")
        .tunnelSourceInterfaceVariable("string")
        .tunnelSourceVariable("string")
        .unnumbered(false)
        .build())
    .trackerSourceIp("string")
    .aupEnabled(false)
    .aupEnabledVariable("string")
    .aupTimeout(0)
    .aupTimeoutVariable("string")
    .authRequired(false)
    .authRequiredVariable("string")
    .blockInternetUntilAccepted(false)
    .blockInternetUntilAcceptedVariable("string")
    .cautionEnabled(false)
    .cautionEnabledVariable("string")
    .country(false)
    .countryVariable("string")
    .description("string")
    .displayTimeUnit("string")
    .displayTimeUnitVariable("string")
    .dnBandwidth(0.0)
    .dnBandwidthVariable("string")
    .enforceBandwidthControl(false)
    .enforceBandwidthControlVariable("string")
    .forceSslInspection(false)
    .forceSslInspectionVariable("string")
    .idleTime(0)
    .idleTimeVariable("string")
    .ipEnforcedForKnownBrowsers(false)
    .ipEnforcedForKnownBrowsersVariable("string")
    .ipsControl(false)
    .ipsControlVariable("string")
    .locationName("string")
    .locationNameVariable("string")
    .name("string")
    .ofwEnabled(false)
    .ofwEnabledVariable("string")
    .primaryDataCenter("string")
    .primaryDataCenterVariable("string")
    .refreshTime(0)
    .refreshTimeUnit("string")
    .refreshTimeUnitVariable("string")
    .refreshTimeVariable("string")
    .secondaryDataCenter("string")
    .secondaryDataCenterVariable("string")
    .srcVpn(false)
    .subLocations(SseZscalerFeatureSubLocationArgs.builder()
        .aupEnabled(false)
        .aupEnabledVariable("string")
        .aupTimeout(0)
        .aupTimeoutVariable("string")
        .authRequired(false)
        .authRequiredVariable("string")
        .blockInternetUntilAccepted(false)
        .blockInternetUntilAcceptedVariable("string")
        .cautionEnabled(false)
        .cautionEnabledVariable("string")
        .displayTimeUnit("string")
        .displayTimeUnitVariable("string")
        .dnBandwidth(0.0)
        .dnBandwidthVariable("string")
        .enforceBandwidthControl("string")
        .enforceBandwidthControlVariable("string")
        .forceSslInspection(false)
        .forceSslInspectionVariable("string")
        .idleTime(0)
        .idleTimeVariable("string")
        .internalIps(SseZscalerFeatureSubLocationInternalIpArgs.builder()
            .internalIpValue("string")
            .internalIpValueVariable("string")
            .build())
        .ipEnforcedForKnownBrowsers(false)
        .ipEnforcedForKnownBrowsersVariable("string")
        .name("string")
        .nameVariable("string")
        .ofwEnabled(false)
        .ofwEnabledVariable("string")
        .refreshTime(0)
        .refreshTimeUnit("string")
        .refreshTimeUnitVariable("string")
        .refreshTimeVariable("string")
        .serviceVpnVariable("string")
        .serviceVpns("string")
        .surrogateIp(false)
        .surrogateIpVariable("string")
        .upBandwidth(0.0)
        .upBandwidthVariable("string")
        .build())
    .surrogateIp(false)
    .surrogateIpVariable("string")
    .trackerSourceIpVariable("string")
    .trackers(SseZscalerFeatureTrackerArgs.builder()
        .endpointApiUrl("string")
        .endpointApiUrlVariable("string")
        .interval(0)
        .intervalVariable("string")
        .multiplier(0)
        .multiplierVariable("string")
        .name("string")
        .threshold(0)
        .thresholdVariable("string")
        .build())
    .upBandwidth(0.0)
    .upBandwidthVariable("string")
    .xffForwardEnabled(false)
    .xffForwardEnabledVariable("string")
    .build());

    sse_zscaler_feature_resource = sdwan.SseZscalerFeature("sseZscalerFeatureResource",
    feature_profile_id="string",
    interface_pairs=[{
        "active_interface": "string",
        "active_interface_weight": 0,
        "backup_interface": "string",
        "backup_interface_weight": 0,
    }],
    interfaces=[{
        "auto": False,
        "dpd_interval": 0,
        "dpd_interval_variable": "string",
        "dpd_retries": 0,
        "dpd_retries_variable": "string",
        "ike_ciphersuite": "string",
        "ike_ciphersuite_variable": "string",
        "ike_group": "string",
        "ike_group_variable": "string",
        "ike_local_id": "string",
        "ike_local_id_variable": "string",
        "ike_rekey_interval": 0,
        "ike_rekey_interval_variable": "string",
        "ike_remote_id": "string",
        "ike_remote_id_variable": "string",
        "ike_version": 0,
        "ike_version_variable": "string",
        "interface_description": "string",
        "interface_description_variable": "string",
        "interface_name": "string",
        "ipsec_ciphersuite": "string",
        "ipsec_ciphersuite_variable": "string",
        "ipsec_rekey_interval": 0,
        "ipsec_rekey_interval_variable": "string",
        "ipsec_replay_window": 0,
        "ipsec_replay_window_variable": "string",
        "ipv4_address": "string",
        "ipv4_address_variable": "string",
        "mtu": 0,
        "mtu_variable": "string",
        "perfect_forward_secrecy": "string",
        "perfect_forward_secrecy_variable": "string",
        "pre_shared_key_dynamic": False,
        "pre_shared_secret": "string",
        "pre_shared_secret_variable": "string",
        "shutdown": False,
        "tcp_mss_adjust": 0,
        "tcp_mss_adjust_variable": "string",
        "track_enable": False,
        "tracker": "string",
        "tunnel_dc_preference": "string",
        "tunnel_destination": "string",
        "tunnel_destination_variable": "string",
        "tunnel_public_ip": "string",
        "tunnel_public_ip_variable": "string",
        "tunnel_route_via": "string",
        "tunnel_route_via_variable": "string",
        "tunnel_set": "string",
        "tunnel_source": "string",
        "tunnel_source_interface": "string",
        "tunnel_source_interface_variable": "string",
        "tunnel_source_variable": "string",
        "unnumbered": False,
    }],
    tracker_source_ip="string",
    aup_enabled=False,
    aup_enabled_variable="string",
    aup_timeout=0,
    aup_timeout_variable="string",
    auth_required=False,
    auth_required_variable="string",
    block_internet_until_accepted=False,
    block_internet_until_accepted_variable="string",
    caution_enabled=False,
    caution_enabled_variable="string",
    country=False,
    country_variable="string",
    description="string",
    display_time_unit="string",
    display_time_unit_variable="string",
    dn_bandwidth=float(0),
    dn_bandwidth_variable="string",
    enforce_bandwidth_control=False,
    enforce_bandwidth_control_variable="string",
    force_ssl_inspection=False,
    force_ssl_inspection_variable="string",
    idle_time=0,
    idle_time_variable="string",
    ip_enforced_for_known_browsers=False,
    ip_enforced_for_known_browsers_variable="string",
    ips_control=False,
    ips_control_variable="string",
    location_name="string",
    location_name_variable="string",
    name="string",
    ofw_enabled=False,
    ofw_enabled_variable="string",
    primary_data_center="string",
    primary_data_center_variable="string",
    refresh_time=0,
    refresh_time_unit="string",
    refresh_time_unit_variable="string",
    refresh_time_variable="string",
    secondary_data_center="string",
    secondary_data_center_variable="string",
    src_vpn=False,
    sub_locations=[{
        "aup_enabled": False,
        "aup_enabled_variable": "string",
        "aup_timeout": 0,
        "aup_timeout_variable": "string",
        "auth_required": False,
        "auth_required_variable": "string",
        "block_internet_until_accepted": False,
        "block_internet_until_accepted_variable": "string",
        "caution_enabled": False,
        "caution_enabled_variable": "string",
        "display_time_unit": "string",
        "display_time_unit_variable": "string",
        "dn_bandwidth": float(0),
        "dn_bandwidth_variable": "string",
        "enforce_bandwidth_control": "string",
        "enforce_bandwidth_control_variable": "string",
        "force_ssl_inspection": False,
        "force_ssl_inspection_variable": "string",
        "idle_time": 0,
        "idle_time_variable": "string",
        "internal_ips": [{
            "internal_ip_value": "string",
            "internal_ip_value_variable": "string",
        }],
        "ip_enforced_for_known_browsers": False,
        "ip_enforced_for_known_browsers_variable": "string",
        "name": "string",
        "name_variable": "string",
        "ofw_enabled": False,
        "ofw_enabled_variable": "string",
        "refresh_time": 0,
        "refresh_time_unit": "string",
        "refresh_time_unit_variable": "string",
        "refresh_time_variable": "string",
        "service_vpn_variable": "string",
        "service_vpns": ["string"],
        "surrogate_ip": False,
        "surrogate_ip_variable": "string",
        "up_bandwidth": float(0),
        "up_bandwidth_variable": "string",
    }],
    surrogate_ip=False,
    surrogate_ip_variable="string",
    tracker_source_ip_variable="string",
    trackers=[{
        "endpoint_api_url": "string",
        "endpoint_api_url_variable": "string",
        "interval": 0,
        "interval_variable": "string",
        "multiplier": 0,
        "multiplier_variable": "string",
        "name": "string",
        "threshold": 0,
        "threshold_variable": "string",
    }],
    up_bandwidth=float(0),
    up_bandwidth_variable="string",
    xff_forward_enabled=False,
    xff_forward_enabled_variable="string")

    const sseZscalerFeatureResource = new sdwan.SseZscalerFeature("sseZscalerFeatureResource", {
    featureProfileId: "string",
    interfacePairs: [{
        activeInterface: "string",
        activeInterfaceWeight: 0,
        backupInterface: "string",
        backupInterfaceWeight: 0,
    }],
    interfaces: [{
        auto: false,
        dpdInterval: 0,
        dpdIntervalVariable: "string",
        dpdRetries: 0,
        dpdRetriesVariable: "string",
        ikeCiphersuite: "string",
        ikeCiphersuiteVariable: "string",
        ikeGroup: "string",
        ikeGroupVariable: "string",
        ikeLocalId: "string",
        ikeLocalIdVariable: "string",
        ikeRekeyInterval: 0,
        ikeRekeyIntervalVariable: "string",
        ikeRemoteId: "string",
        ikeRemoteIdVariable: "string",
        ikeVersion: 0,
        ikeVersionVariable: "string",
        interfaceDescription: "string",
        interfaceDescriptionVariable: "string",
        interfaceName: "string",
        ipsecCiphersuite: "string",
        ipsecCiphersuiteVariable: "string",
        ipsecRekeyInterval: 0,
        ipsecRekeyIntervalVariable: "string",
        ipsecReplayWindow: 0,
        ipsecReplayWindowVariable: "string",
        ipv4Address: "string",
        ipv4AddressVariable: "string",
        mtu: 0,
        mtuVariable: "string",
        perfectForwardSecrecy: "string",
        perfectForwardSecrecyVariable: "string",
        preSharedKeyDynamic: false,
        preSharedSecret: "string",
        preSharedSecretVariable: "string",
        shutdown: false,
        tcpMssAdjust: 0,
        tcpMssAdjustVariable: "string",
        trackEnable: false,
        tracker: "string",
        tunnelDcPreference: "string",
        tunnelDestination: "string",
        tunnelDestinationVariable: "string",
        tunnelPublicIp: "string",
        tunnelPublicIpVariable: "string",
        tunnelRouteVia: "string",
        tunnelRouteViaVariable: "string",
        tunnelSet: "string",
        tunnelSource: "string",
        tunnelSourceInterface: "string",
        tunnelSourceInterfaceVariable: "string",
        tunnelSourceVariable: "string",
        unnumbered: false,
    }],
    trackerSourceIp: "string",
    aupEnabled: false,
    aupEnabledVariable: "string",
    aupTimeout: 0,
    aupTimeoutVariable: "string",
    authRequired: false,
    authRequiredVariable: "string",
    blockInternetUntilAccepted: false,
    blockInternetUntilAcceptedVariable: "string",
    cautionEnabled: false,
    cautionEnabledVariable: "string",
    country: false,
    countryVariable: "string",
    description: "string",
    displayTimeUnit: "string",
    displayTimeUnitVariable: "string",
    dnBandwidth: 0,
    dnBandwidthVariable: "string",
    enforceBandwidthControl: false,
    enforceBandwidthControlVariable: "string",
    forceSslInspection: false,
    forceSslInspectionVariable: "string",
    idleTime: 0,
    idleTimeVariable: "string",
    ipEnforcedForKnownBrowsers: false,
    ipEnforcedForKnownBrowsersVariable: "string",
    ipsControl: false,
    ipsControlVariable: "string",
    locationName: "string",
    locationNameVariable: "string",
    name: "string",
    ofwEnabled: false,
    ofwEnabledVariable: "string",
    primaryDataCenter: "string",
    primaryDataCenterVariable: "string",
    refreshTime: 0,
    refreshTimeUnit: "string",
    refreshTimeUnitVariable: "string",
    refreshTimeVariable: "string",
    secondaryDataCenter: "string",
    secondaryDataCenterVariable: "string",
    srcVpn: false,
    subLocations: [{
        aupEnabled: false,
        aupEnabledVariable: "string",
        aupTimeout: 0,
        aupTimeoutVariable: "string",
        authRequired: false,
        authRequiredVariable: "string",
        blockInternetUntilAccepted: false,
        blockInternetUntilAcceptedVariable: "string",
        cautionEnabled: false,
        cautionEnabledVariable: "string",
        displayTimeUnit: "string",
        displayTimeUnitVariable: "string",
        dnBandwidth: 0,
        dnBandwidthVariable: "string",
        enforceBandwidthControl: "string",
        enforceBandwidthControlVariable: "string",
        forceSslInspection: false,
        forceSslInspectionVariable: "string",
        idleTime: 0,
        idleTimeVariable: "string",
        internalIps: [{
            internalIpValue: "string",
            internalIpValueVariable: "string",
        }],
        ipEnforcedForKnownBrowsers: false,
        ipEnforcedForKnownBrowsersVariable: "string",
        name: "string",
        nameVariable: "string",
        ofwEnabled: false,
        ofwEnabledVariable: "string",
        refreshTime: 0,
        refreshTimeUnit: "string",
        refreshTimeUnitVariable: "string",
        refreshTimeVariable: "string",
        serviceVpnVariable: "string",
        serviceVpns: ["string"],
        surrogateIp: false,
        surrogateIpVariable: "string",
        upBandwidth: 0,
        upBandwidthVariable: "string",
    }],
    surrogateIp: false,
    surrogateIpVariable: "string",
    trackerSourceIpVariable: "string",
    trackers: [{
        endpointApiUrl: "string",
        endpointApiUrlVariable: "string",
        interval: 0,
        intervalVariable: "string",
        multiplier: 0,
        multiplierVariable: "string",
        name: "string",
        threshold: 0,
        thresholdVariable: "string",
    }],
    upBandwidth: 0,
    upBandwidthVariable: "string",
    xffForwardEnabled: false,
    xffForwardEnabledVariable: "string",
});

    type: sdwan:SseZscalerFeature
properties:
    aupEnabled: false
    aupEnabledVariable: string
    aupTimeout: 0
    aupTimeoutVariable: string
    authRequired: false
    authRequiredVariable: string
    blockInternetUntilAccepted: false
    blockInternetUntilAcceptedVariable: string
    cautionEnabled: false
    cautionEnabledVariable: string
    country: false
    countryVariable: string
    description: string
    displayTimeUnit: string
    displayTimeUnitVariable: string
    dnBandwidth: 0
    dnBandwidthVariable: string
    enforceBandwidthControl: false
    enforceBandwidthControlVariable: string
    featureProfileId: string
    forceSslInspection: false
    forceSslInspectionVariable: string
    idleTime: 0
    idleTimeVariable: string
    interfacePairs:
        - activeInterface: string
          activeInterfaceWeight: 0
          backupInterface: string
          backupInterfaceWeight: 0
    interfaces:
        - auto: false
          dpdInterval: 0
          dpdIntervalVariable: string
          dpdRetries: 0
          dpdRetriesVariable: string
          ikeCiphersuite: string
          ikeCiphersuiteVariable: string
          ikeGroup: string
          ikeGroupVariable: string
          ikeLocalId: string
          ikeLocalIdVariable: string
          ikeRekeyInterval: 0
          ikeRekeyIntervalVariable: string
          ikeRemoteId: string
          ikeRemoteIdVariable: string
          ikeVersion: 0
          ikeVersionVariable: string
          interfaceDescription: string
          interfaceDescriptionVariable: string
          interfaceName: string
          ipsecCiphersuite: string
          ipsecCiphersuiteVariable: string
          ipsecRekeyInterval: 0
          ipsecRekeyIntervalVariable: string
          ipsecReplayWindow: 0
          ipsecReplayWindowVariable: string
          ipv4Address: string
          ipv4AddressVariable: string
          mtu: 0
          mtuVariable: string
          perfectForwardSecrecy: string
          perfectForwardSecrecyVariable: string
          preSharedKeyDynamic: false
          preSharedSecret: string
          preSharedSecretVariable: string
          shutdown: false
          tcpMssAdjust: 0
          tcpMssAdjustVariable: string
          trackEnable: false
          tracker: string
          tunnelDcPreference: string
          tunnelDestination: string
          tunnelDestinationVariable: string
          tunnelPublicIp: string
          tunnelPublicIpVariable: string
          tunnelRouteVia: string
          tunnelRouteViaVariable: string
          tunnelSet: string
          tunnelSource: string
          tunnelSourceInterface: string
          tunnelSourceInterfaceVariable: string
          tunnelSourceVariable: string
          unnumbered: false
    ipEnforcedForKnownBrowsers: false
    ipEnforcedForKnownBrowsersVariable: string
    ipsControl: false
    ipsControlVariable: string
    locationName: string
    locationNameVariable: string
    name: string
    ofwEnabled: false
    ofwEnabledVariable: string
    primaryDataCenter: string
    primaryDataCenterVariable: string
    refreshTime: 0
    refreshTimeUnit: string
    refreshTimeUnitVariable: string
    refreshTimeVariable: string
    secondaryDataCenter: string
    secondaryDataCenterVariable: string
    srcVpn: false
    subLocations:
        - aupEnabled: false
          aupEnabledVariable: string
          aupTimeout: 0
          aupTimeoutVariable: string
          authRequired: false
          authRequiredVariable: string
          blockInternetUntilAccepted: false
          blockInternetUntilAcceptedVariable: string
          cautionEnabled: false
          cautionEnabledVariable: string
          displayTimeUnit: string
          displayTimeUnitVariable: string
          dnBandwidth: 0
          dnBandwidthVariable: string
          enforceBandwidthControl: string
          enforceBandwidthControlVariable: string
          forceSslInspection: false
          forceSslInspectionVariable: string
          idleTime: 0
          idleTimeVariable: string
          internalIps:
            - internalIpValue: string
              internalIpValueVariable: string
          ipEnforcedForKnownBrowsers: false
          ipEnforcedForKnownBrowsersVariable: string
          name: string
          nameVariable: string
          ofwEnabled: false
          ofwEnabledVariable: string
          refreshTime: 0
          refreshTimeUnit: string
          refreshTimeUnitVariable: string
          refreshTimeVariable: string
          serviceVpnVariable: string
          serviceVpns:
            - string
          surrogateIp: false
          surrogateIpVariable: string
          upBandwidth: 0
          upBandwidthVariable: string
    surrogateIp: false
    surrogateIpVariable: string
    trackerSourceIp: string
    trackerSourceIpVariable: string
    trackers:
        - endpointApiUrl: string
          endpointApiUrlVariable: string
          interval: 0
          intervalVariable: string
          multiplier: 0
          multiplierVariable: string
          name: string
          threshold: 0
          thresholdVariable: string
    upBandwidth: 0
    upBandwidthVariable: string
    xffForwardEnabled: false
    xffForwardEnabledVariable: string

    SseZscalerFeature Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The SseZscalerFeature resource accepts the following input properties:

    FeatureProfileId string
    Feature Profile ID
    InterfacePairs List<SseZscalerFeatureInterfacePair>
    Interface Pair for active and backup
    Interfaces List<SseZscalerFeatureInterface>
    Interface name: IPsec when present
    TrackerSourceIp string
    Source IP address for Tracker
    AupEnabled bool
    Enable Acceptable User Policy

    • Default value: false
    AupEnabledVariable string
    Variable name
    AupTimeout int
    Custom Acceptable User Policy frequency in days, Attribute conditional on aupEnabled equal to true

    • Range: 1-180
    • Default value: 1
    AupTimeoutVariable string
    Variable name, Attribute conditional on aupEnabled equal to true
    AuthRequired bool
    Enforce Authentication

    • Default value: false
    AuthRequiredVariable string
    Variable name
    BlockInternetUntilAccepted bool
    For first-time Acceptable User Policy behavior, block Internet access, Attribute conditional on aupEnabled equal to true

    • Default value: false
    BlockInternetUntilAcceptedVariable string
    Variable name, Attribute conditional on aupEnabled equal to true
    CautionEnabled bool
    Enable Caution

    • Default value: false
    CautionEnabledVariable string
    Variable name
    Country bool
    • Default value: false
    CountryVariable string
    Variable name
    Description string
    The description of the Feature
    DisplayTimeUnit string
    Display time unit, Attribute conditional on surrogateIp equal to true

    • Choices: MINUTE, HOUR, DAY
    • Default value: MINUTE
    DisplayTimeUnitVariable string
    Variable name, Attribute conditional on surrogateIp equal to true
    DnBandwidth double
    , Attribute conditional on enforceBandwidthControl equal to true

    • Range: 0.1-99999
    DnBandwidthVariable string
    Variable name, Attribute conditional on enforceBandwidthControl equal to true
    EnforceBandwidthControl bool
    • Default value: false
    EnforceBandwidthControlVariable string
    Variable name
    ForceSslInspection bool
    For first-time Acceptable User Policy behavior, force SSL inspection, Attribute conditional on aupEnabled equal to true

    • Default value: false
    ForceSslInspectionVariable string
    Variable name, Attribute conditional on aupEnabled equal to true
    IdleTime int
    Idle time to disassociation, Attribute conditional on surrogateIp equal to true

    • At Least: 1
    • Default value: 1
    IdleTimeVariable string
    Variable name, Attribute conditional on surrogateIp equal to true
    IpEnforcedForKnownBrowsers bool
    Enforce Surrogate IP for known browsers

    • Default value: false
    IpEnforcedForKnownBrowsersVariable string
    Variable name
    IpsControl bool
    Enable IPS Control

    • Default value: false
    IpsControlVariable string
    Variable name
    LocationName string
    Zscaler location name (optional)

    • Default value: Auto
    LocationNameVariable string
    Variable name
    Name string
    The name of the Feature
    OfwEnabled bool
    Firewall enabled

    • Default value: false
    OfwEnabledVariable string
    Variable name
    PrimaryDataCenter string
    Custom Primary Datacenter

    • Default value: Auto
    PrimaryDataCenterVariable string
    Variable name
    RefreshTime int
    Refresh time for re-validation of surrogacy in minutes

    • At Least: 1
    • Default value: 1
    RefreshTimeUnit string
    Refresh Time unit

    • Choices: MINUTE, HOUR, DAY
    • Default value: MINUTE
    RefreshTimeUnitVariable string
    Variable name
    RefreshTimeVariable string
    Variable name
    SecondaryDataCenter string
    Custom Secondary Datacenter

    • Default value: Auto
    SecondaryDataCenterVariable string
    Variable name
    SrcVpn bool
    Share Source VPN

    • Default value: false
    SubLocations List<SseZscalerFeatureSubLocation>
    SurrogateIp bool
    Enable Surrogate IP, Attribute conditional on authRequired equal to true

    • Default value: false
    SurrogateIpVariable string
    Variable name, Attribute conditional on authRequired equal to true
    TrackerSourceIpVariable string
    Variable name
    Trackers List<SseZscalerFeatureTracker>
    Tracker configuration
    UpBandwidth double
    , Attribute conditional on enforceBandwidthControl equal to true

    • Range: 0.1-99999
    UpBandwidthVariable string
    Variable name, Attribute conditional on enforceBandwidthControl equal to true
    XffForwardEnabled bool
    XFF forwarding enabled

    • Default value: false
    XffForwardEnabledVariable string
    Variable name
    FeatureProfileId string
    Feature Profile ID
    InterfacePairs []SseZscalerFeatureInterfacePairArgs
    Interface Pair for active and backup
    Interfaces []SseZscalerFeatureInterfaceArgs
    Interface name: IPsec when present
    TrackerSourceIp string
    Source IP address for Tracker
    AupEnabled bool
    Enable Acceptable User Policy

    • Default value: false
    AupEnabledVariable string
    Variable name
    AupTimeout int
    Custom Acceptable User Policy frequency in days, Attribute conditional on aupEnabled equal to true

    • Range: 1-180
    • Default value: 1
    AupTimeoutVariable string
    Variable name, Attribute conditional on aupEnabled equal to true
    AuthRequired bool
    Enforce Authentication

    • Default value: false
    AuthRequiredVariable string
    Variable name
    BlockInternetUntilAccepted bool
    For first-time Acceptable User Policy behavior, block Internet access, Attribute conditional on aupEnabled equal to true

    • Default value: false
    BlockInternetUntilAcceptedVariable string
    Variable name, Attribute conditional on aupEnabled equal to true
    CautionEnabled bool
    Enable Caution

    • Default value: false
    CautionEnabledVariable string
    Variable name
    Country bool
    • Default value: false
    CountryVariable string
    Variable name
    Description string
    The description of the Feature
    DisplayTimeUnit string
    Display time unit, Attribute conditional on surrogateIp equal to true

    • Choices: MINUTE, HOUR, DAY
    • Default value: MINUTE
    DisplayTimeUnitVariable string
    Variable name, Attribute conditional on surrogateIp equal to true
    DnBandwidth float64
    , Attribute conditional on enforceBandwidthControl equal to true

    • Range: 0.1-99999
    DnBandwidthVariable string
    Variable name, Attribute conditional on enforceBandwidthControl equal to true
    EnforceBandwidthControl bool
    • Default value: false
    EnforceBandwidthControlVariable string
    Variable name
    ForceSslInspection bool
    For first-time Acceptable User Policy behavior, force SSL inspection, Attribute conditional on aupEnabled equal to true

    • Default value: false
    ForceSslInspectionVariable string
    Variable name, Attribute conditional on aupEnabled equal to true
    IdleTime int
    Idle time to disassociation, Attribute conditional on surrogateIp equal to true

    • At Least: 1
    • Default value: 1
    IdleTimeVariable string
    Variable name, Attribute conditional on surrogateIp equal to true
    IpEnforcedForKnownBrowsers bool
    Enforce Surrogate IP for known browsers

    • Default value: false
    IpEnforcedForKnownBrowsersVariable string
    Variable name
    IpsControl bool
    Enable IPS Control

    • Default value: false
    IpsControlVariable string
    Variable name
    LocationName string
    Zscaler location name (optional)

    • Default value: Auto
    LocationNameVariable string
    Variable name
    Name string
    The name of the Feature
    OfwEnabled bool
    Firewall enabled

    • Default value: false
    OfwEnabledVariable string
    Variable name
    PrimaryDataCenter string
    Custom Primary Datacenter

    • Default value: Auto
    PrimaryDataCenterVariable string
    Variable name
    RefreshTime int
    Refresh time for re-validation of surrogacy in minutes

    • At Least: 1
    • Default value: 1
    RefreshTimeUnit string
    Refresh Time unit

    • Choices: MINUTE, HOUR, DAY
    • Default value: MINUTE
    RefreshTimeUnitVariable string
    Variable name
    RefreshTimeVariable string
    Variable name
    SecondaryDataCenter string
    Custom Secondary Datacenter

    • Default value: Auto
    SecondaryDataCenterVariable string
    Variable name
    SrcVpn bool
    Share Source VPN

    • Default value: false
    SubLocations []SseZscalerFeatureSubLocationArgs
    SurrogateIp bool
    Enable Surrogate IP, Attribute conditional on authRequired equal to true

    • Default value: false
    SurrogateIpVariable string
    Variable name, Attribute conditional on authRequired equal to true
    TrackerSourceIpVariable string
    Variable name
    Trackers []SseZscalerFeatureTrackerArgs
    Tracker configuration
    UpBandwidth float64
    , Attribute conditional on enforceBandwidthControl equal to true

    • Range: 0.1-99999
    UpBandwidthVariable string
    Variable name, Attribute conditional on enforceBandwidthControl equal to true
    XffForwardEnabled bool
    XFF forwarding enabled

    • Default value: false
    XffForwardEnabledVariable string
    Variable name
    feature_profile_id string
    Feature Profile ID
    interface_pairs list(object)
    Interface Pair for active and backup
    interfaces list(object)
    Interface name: IPsec when present
    tracker_source_ip string
    Source IP address for Tracker
    aup_enabled bool
    Enable Acceptable User Policy

    • Default value: false
    aup_enabled_variable string
    Variable name
    aup_timeout number
    Custom Acceptable User Policy frequency in days, Attribute conditional on aupEnabled equal to true

    • Range: 1-180
    • Default value: 1
    aup_timeout_variable string
    Variable name, Attribute conditional on aupEnabled equal to true
    auth_required bool
    Enforce Authentication

    • Default value: false
    auth_required_variable string
    Variable name
    block_internet_until_accepted bool
    For first-time Acceptable User Policy behavior, block Internet access, Attribute conditional on aupEnabled equal to true

    • Default value: false
    block_internet_until_accepted_variable string
    Variable name, Attribute conditional on aupEnabled equal to true
    caution_enabled bool
    Enable Caution

    • Default value: false
    caution_enabled_variable string
    Variable name
    country bool
    • Default value: false
    country_variable string
    Variable name
    description string
    The description of the Feature
    display_time_unit string
    Display time unit, Attribute conditional on surrogateIp equal to true

    • Choices: MINUTE, HOUR, DAY
    • Default value: MINUTE
    display_time_unit_variable string
    Variable name, Attribute conditional on surrogateIp equal to true
    dn_bandwidth number
    , Attribute conditional on enforceBandwidthControl equal to true

    • Range: 0.1-99999
    dn_bandwidth_variable string
    Variable name, Attribute conditional on enforceBandwidthControl equal to true
    enforce_bandwidth_control bool
    • Default value: false
    enforce_bandwidth_control_variable string
    Variable name
    force_ssl_inspection bool
    For first-time Acceptable User Policy behavior, force SSL inspection, Attribute conditional on aupEnabled equal to true

    • Default value: false
    force_ssl_inspection_variable string
    Variable name, Attribute conditional on aupEnabled equal to true
    idle_time number
    Idle time to disassociation, Attribute conditional on surrogateIp equal to true

    • At Least: 1
    • Default value: 1
    idle_time_variable string
    Variable name, Attribute conditional on surrogateIp equal to true
    ip_enforced_for_known_browsers bool
    Enforce Surrogate IP for known browsers

    • Default value: false
    ip_enforced_for_known_browsers_variable string
    Variable name
    ips_control bool
    Enable IPS Control

    • Default value: false
    ips_control_variable string
    Variable name
    location_name string
    Zscaler location name (optional)

    • Default value: Auto
    location_name_variable string
    Variable name
    name string
    The name of the Feature
    ofw_enabled bool
    Firewall enabled

    • Default value: false
    ofw_enabled_variable string
    Variable name
    primary_data_center string
    Custom Primary Datacenter

    • Default value: Auto
    primary_data_center_variable string
    Variable name
    refresh_time number
    Refresh time for re-validation of surrogacy in minutes

    • At Least: 1
    • Default value: 1
    refresh_time_unit string
    Refresh Time unit

    • Choices: MINUTE, HOUR, DAY
    • Default value: MINUTE
    refresh_time_unit_variable string
    Variable name
    refresh_time_variable string
    Variable name
    secondary_data_center string
    Custom Secondary Datacenter

    • Default value: Auto
    secondary_data_center_variable string
    Variable name
    src_vpn bool
    Share Source VPN

    • Default value: false
    sub_locations list(object)
    surrogate_ip bool
    Enable Surrogate IP, Attribute conditional on authRequired equal to true

    • Default value: false
    surrogate_ip_variable string
    Variable name, Attribute conditional on authRequired equal to true
    tracker_source_ip_variable string
    Variable name
    trackers list(object)
    Tracker configuration
    up_bandwidth number
    , Attribute conditional on enforceBandwidthControl equal to true

    • Range: 0.1-99999
    up_bandwidth_variable string
    Variable name, Attribute conditional on enforceBandwidthControl equal to true
    xff_forward_enabled bool
    XFF forwarding enabled

    • Default value: false
    xff_forward_enabled_variable string
    Variable name
    featureProfileId String
    Feature Profile ID
    interfacePairs List<SseZscalerFeatureInterfacePair>
    Interface Pair for active and backup
    interfaces List<SseZscalerFeatureInterface>
    Interface name: IPsec when present
    trackerSourceIp String
    Source IP address for Tracker
    aupEnabled Boolean
    Enable Acceptable User Policy

    • Default value: false
    aupEnabledVariable String
    Variable name
    aupTimeout Integer
    Custom Acceptable User Policy frequency in days, Attribute conditional on aupEnabled equal to true

    • Range: 1-180
    • Default value: 1
    aupTimeoutVariable String
    Variable name, Attribute conditional on aupEnabled equal to true
    authRequired Boolean
    Enforce Authentication

    • Default value: false
    authRequiredVariable String
    Variable name
    blockInternetUntilAccepted Boolean
    For first-time Acceptable User Policy behavior, block Internet access, Attribute conditional on aupEnabled equal to true

    • Default value: false
    blockInternetUntilAcceptedVariable String
    Variable name, Attribute conditional on aupEnabled equal to true
    cautionEnabled Boolean
    Enable Caution

    • Default value: false
    cautionEnabledVariable String
    Variable name
    country Boolean
    • Default value: false
    countryVariable String
    Variable name
    description String
    The description of the Feature
    displayTimeUnit String
    Display time unit, Attribute conditional on surrogateIp equal to true

    • Choices: MINUTE, HOUR, DAY
    • Default value: MINUTE
    displayTimeUnitVariable String
    Variable name, Attribute conditional on surrogateIp equal to true
    dnBandwidth Double
    , Attribute conditional on enforceBandwidthControl equal to true

    • Range: 0.1-99999
    dnBandwidthVariable String
    Variable name, Attribute conditional on enforceBandwidthControl equal to true
    enforceBandwidthControl Boolean
    • Default value: false
    enforceBandwidthControlVariable String
    Variable name
    forceSslInspection Boolean
    For first-time Acceptable User Policy behavior, force SSL inspection, Attribute conditional on aupEnabled equal to true

    • Default value: false
    forceSslInspectionVariable String
    Variable name, Attribute conditional on aupEnabled equal to true
    idleTime Integer
    Idle time to disassociation, Attribute conditional on surrogateIp equal to true

    • At Least: 1
    • Default value: 1
    idleTimeVariable String
    Variable name, Attribute conditional on surrogateIp equal to true
    ipEnforcedForKnownBrowsers Boolean
    Enforce Surrogate IP for known browsers

    • Default value: false
    ipEnforcedForKnownBrowsersVariable String
    Variable name
    ipsControl Boolean
    Enable IPS Control

    • Default value: false
    ipsControlVariable String
    Variable name
    locationName String
    Zscaler location name (optional)

    • Default value: Auto
    locationNameVariable String
    Variable name
    name String
    The name of the Feature
    ofwEnabled Boolean
    Firewall enabled

    • Default value: false
    ofwEnabledVariable String
    Variable name
    primaryDataCenter String
    Custom Primary Datacenter

    • Default value: Auto
    primaryDataCenterVariable String
    Variable name
    refreshTime Integer
    Refresh time for re-validation of surrogacy in minutes

    • At Least: 1
    • Default value: 1
    refreshTimeUnit String
    Refresh Time unit

    • Choices: MINUTE, HOUR, DAY
    • Default value: MINUTE
    refreshTimeUnitVariable String
    Variable name
    refreshTimeVariable String
    Variable name
    secondaryDataCenter String
    Custom Secondary Datacenter

    • Default value: Auto
    secondaryDataCenterVariable String
    Variable name
    srcVpn Boolean
    Share Source VPN

    • Default value: false
    subLocations List<SseZscalerFeatureSubLocation>
    surrogateIp Boolean
    Enable Surrogate IP, Attribute conditional on authRequired equal to true

    • Default value: false
    surrogateIpVariable String
    Variable name, Attribute conditional on authRequired equal to true
    trackerSourceIpVariable String
    Variable name
    trackers List<SseZscalerFeatureTracker>
    Tracker configuration
    upBandwidth Double
    , Attribute conditional on enforceBandwidthControl equal to true

    • Range: 0.1-99999
    upBandwidthVariable String
    Variable name, Attribute conditional on enforceBandwidthControl equal to true
    xffForwardEnabled Boolean
    XFF forwarding enabled

    • Default value: false
    xffForwardEnabledVariable String
    Variable name
    featureProfileId string
    Feature Profile ID
    interfacePairs SseZscalerFeatureInterfacePair[]
    Interface Pair for active and backup
    interfaces SseZscalerFeatureInterface[]
    Interface name: IPsec when present
    trackerSourceIp string
    Source IP address for Tracker
    aupEnabled boolean
    Enable Acceptable User Policy

    • Default value: false
    aupEnabledVariable string
    Variable name
    aupTimeout number
    Custom Acceptable User Policy frequency in days, Attribute conditional on aupEnabled equal to true

    • Range: 1-180
    • Default value: 1
    aupTimeoutVariable string
    Variable name, Attribute conditional on aupEnabled equal to true
    authRequired boolean
    Enforce Authentication

    • Default value: false
    authRequiredVariable string
    Variable name
    blockInternetUntilAccepted boolean
    For first-time Acceptable User Policy behavior, block Internet access, Attribute conditional on aupEnabled equal to true

    • Default value: false
    blockInternetUntilAcceptedVariable string
    Variable name, Attribute conditional on aupEnabled equal to true
    cautionEnabled boolean
    Enable Caution

    • Default value: false
    cautionEnabledVariable string
    Variable name
    country boolean
    • Default value: false
    countryVariable string
    Variable name
    description string
    The description of the Feature
    displayTimeUnit string
    Display time unit, Attribute conditional on surrogateIp equal to true

    • Choices: MINUTE, HOUR, DAY
    • Default value: MINUTE
    displayTimeUnitVariable string
    Variable name, Attribute conditional on surrogateIp equal to true
    dnBandwidth number
    , Attribute conditional on enforceBandwidthControl equal to true

    • Range: 0.1-99999
    dnBandwidthVariable string
    Variable name, Attribute conditional on enforceBandwidthControl equal to true
    enforceBandwidthControl boolean
    • Default value: false
    enforceBandwidthControlVariable string
    Variable name
    forceSslInspection boolean
    For first-time Acceptable User Policy behavior, force SSL inspection, Attribute conditional on aupEnabled equal to true

    • Default value: false
    forceSslInspectionVariable string
    Variable name, Attribute conditional on aupEnabled equal to true
    idleTime number
    Idle time to disassociation, Attribute conditional on surrogateIp equal to true

    • At Least: 1
    • Default value: 1
    idleTimeVariable string
    Variable name, Attribute conditional on surrogateIp equal to true
    ipEnforcedForKnownBrowsers boolean
    Enforce Surrogate IP for known browsers

    • Default value: false
    ipEnforcedForKnownBrowsersVariable string
    Variable name
    ipsControl boolean
    Enable IPS Control

    • Default value: false
    ipsControlVariable string
    Variable name
    locationName string
    Zscaler location name (optional)

    • Default value: Auto
    locationNameVariable string
    Variable name
    name string
    The name of the Feature
    ofwEnabled boolean
    Firewall enabled

    • Default value: false
    ofwEnabledVariable string
    Variable name
    primaryDataCenter string
    Custom Primary Datacenter

    • Default value: Auto
    primaryDataCenterVariable string
    Variable name
    refreshTime number
    Refresh time for re-validation of surrogacy in minutes

    • At Least: 1
    • Default value: 1
    refreshTimeUnit string
    Refresh Time unit

    • Choices: MINUTE, HOUR, DAY
    • Default value: MINUTE
    refreshTimeUnitVariable string
    Variable name
    refreshTimeVariable string
    Variable name
    secondaryDataCenter string
    Custom Secondary Datacenter

    • Default value: Auto
    secondaryDataCenterVariable string
    Variable name
    srcVpn boolean
    Share Source VPN

    • Default value: false
    subLocations SseZscalerFeatureSubLocation[]
    surrogateIp boolean
    Enable Surrogate IP, Attribute conditional on authRequired equal to true

    • Default value: false
    surrogateIpVariable string
    Variable name, Attribute conditional on authRequired equal to true
    trackerSourceIpVariable string
    Variable name
    trackers SseZscalerFeatureTracker[]
    Tracker configuration
    upBandwidth number
    , Attribute conditional on enforceBandwidthControl equal to true

    • Range: 0.1-99999
    upBandwidthVariable string
    Variable name, Attribute conditional on enforceBandwidthControl equal to true
    xffForwardEnabled boolean
    XFF forwarding enabled

    • Default value: false
    xffForwardEnabledVariable string
    Variable name
    feature_profile_id str
    Feature Profile ID
    interface_pairs Sequence[SseZscalerFeatureInterfacePairArgs]
    Interface Pair for active and backup
    interfaces Sequence[SseZscalerFeatureInterfaceArgs]
    Interface name: IPsec when present
    tracker_source_ip str
    Source IP address for Tracker
    aup_enabled bool
    Enable Acceptable User Policy

    • Default value: false
    aup_enabled_variable str
    Variable name
    aup_timeout int
    Custom Acceptable User Policy frequency in days, Attribute conditional on aupEnabled equal to true

    • Range: 1-180
    • Default value: 1
    aup_timeout_variable str
    Variable name, Attribute conditional on aupEnabled equal to true
    auth_required bool
    Enforce Authentication

    • Default value: false
    auth_required_variable str
    Variable name
    block_internet_until_accepted bool
    For first-time Acceptable User Policy behavior, block Internet access, Attribute conditional on aupEnabled equal to true

    • Default value: false
    block_internet_until_accepted_variable str
    Variable name, Attribute conditional on aupEnabled equal to true
    caution_enabled bool
    Enable Caution

    • Default value: false
    caution_enabled_variable str
    Variable name
    country bool
    • Default value: false
    country_variable str
    Variable name
    description str
    The description of the Feature
    display_time_unit str
    Display time unit, Attribute conditional on surrogateIp equal to true

    • Choices: MINUTE, HOUR, DAY
    • Default value: MINUTE
    display_time_unit_variable str
    Variable name, Attribute conditional on surrogateIp equal to true
    dn_bandwidth float
    , Attribute conditional on enforceBandwidthControl equal to true

    • Range: 0.1-99999
    dn_bandwidth_variable str
    Variable name, Attribute conditional on enforceBandwidthControl equal to true
    enforce_bandwidth_control bool
    • Default value: false
    enforce_bandwidth_control_variable str
    Variable name
    force_ssl_inspection bool
    For first-time Acceptable User Policy behavior, force SSL inspection, Attribute conditional on aupEnabled equal to true

    • Default value: false
    force_ssl_inspection_variable str
    Variable name, Attribute conditional on aupEnabled equal to true
    idle_time int
    Idle time to disassociation, Attribute conditional on surrogateIp equal to true

    • At Least: 1
    • Default value: 1
    idle_time_variable str
    Variable name, Attribute conditional on surrogateIp equal to true
    ip_enforced_for_known_browsers bool
    Enforce Surrogate IP for known browsers

    • Default value: false
    ip_enforced_for_known_browsers_variable str
    Variable name
    ips_control bool
    Enable IPS Control

    • Default value: false
    ips_control_variable str
    Variable name
    location_name str
    Zscaler location name (optional)

    • Default value: Auto
    location_name_variable str
    Variable name
    name str
    The name of the Feature
    ofw_enabled bool
    Firewall enabled

    • Default value: false
    ofw_enabled_variable str
    Variable name
    primary_data_center str
    Custom Primary Datacenter

    • Default value: Auto
    primary_data_center_variable str
    Variable name
    refresh_time int
    Refresh time for re-validation of surrogacy in minutes

    • At Least: 1
    • Default value: 1
    refresh_time_unit str
    Refresh Time unit

    • Choices: MINUTE, HOUR, DAY
    • Default value: MINUTE
    refresh_time_unit_variable str
    Variable name
    refresh_time_variable str
    Variable name
    secondary_data_center str
    Custom Secondary Datacenter

    • Default value: Auto
    secondary_data_center_variable str
    Variable name
    src_vpn bool
    Share Source VPN

    • Default value: false
    sub_locations Sequence[SseZscalerFeatureSubLocationArgs]
    surrogate_ip bool
    Enable Surrogate IP, Attribute conditional on authRequired equal to true

    • Default value: false
    surrogate_ip_variable str
    Variable name, Attribute conditional on authRequired equal to true
    tracker_source_ip_variable str
    Variable name
    trackers Sequence[SseZscalerFeatureTrackerArgs]
    Tracker configuration
    up_bandwidth float
    , Attribute conditional on enforceBandwidthControl equal to true

    • Range: 0.1-99999
    up_bandwidth_variable str
    Variable name, Attribute conditional on enforceBandwidthControl equal to true
    xff_forward_enabled bool
    XFF forwarding enabled

    • Default value: false
    xff_forward_enabled_variable str
    Variable name
    featureProfileId String
    Feature Profile ID
    interfacePairs List<Property Map>
    Interface Pair for active and backup
    interfaces List<Property Map>
    Interface name: IPsec when present
    trackerSourceIp String
    Source IP address for Tracker
    aupEnabled Boolean
    Enable Acceptable User Policy

    • Default value: false
    aupEnabledVariable String
    Variable name
    aupTimeout Number
    Custom Acceptable User Policy frequency in days, Attribute conditional on aupEnabled equal to true

    • Range: 1-180
    • Default value: 1
    aupTimeoutVariable String
    Variable name, Attribute conditional on aupEnabled equal to true
    authRequired Boolean
    Enforce Authentication

    • Default value: false
    authRequiredVariable String
    Variable name
    blockInternetUntilAccepted Boolean
    For first-time Acceptable User Policy behavior, block Internet access, Attribute conditional on aupEnabled equal to true

    • Default value: false
    blockInternetUntilAcceptedVariable String
    Variable name, Attribute conditional on aupEnabled equal to true
    cautionEnabled Boolean
    Enable Caution

    • Default value: false
    cautionEnabledVariable String
    Variable name
    country Boolean
    • Default value: false
    countryVariable String
    Variable name
    description String
    The description of the Feature
    displayTimeUnit String
    Display time unit, Attribute conditional on surrogateIp equal to true

    • Choices: MINUTE, HOUR, DAY
    • Default value: MINUTE
    displayTimeUnitVariable String
    Variable name, Attribute conditional on surrogateIp equal to true
    dnBandwidth Number
    , Attribute conditional on enforceBandwidthControl equal to true

    • Range: 0.1-99999
    dnBandwidthVariable String
    Variable name, Attribute conditional on enforceBandwidthControl equal to true
    enforceBandwidthControl Boolean
    • Default value: false
    enforceBandwidthControlVariable String
    Variable name
    forceSslInspection Boolean
    For first-time Acceptable User Policy behavior, force SSL inspection, Attribute conditional on aupEnabled equal to true

    • Default value: false
    forceSslInspectionVariable String
    Variable name, Attribute conditional on aupEnabled equal to true
    idleTime Number
    Idle time to disassociation, Attribute conditional on surrogateIp equal to true

    • At Least: 1
    • Default value: 1
    idleTimeVariable String
    Variable name, Attribute conditional on surrogateIp equal to true
    ipEnforcedForKnownBrowsers Boolean
    Enforce Surrogate IP for known browsers

    • Default value: false
    ipEnforcedForKnownBrowsersVariable String
    Variable name
    ipsControl Boolean
    Enable IPS Control

    • Default value: false
    ipsControlVariable String
    Variable name
    locationName String
    Zscaler location name (optional)

    • Default value: Auto
    locationNameVariable String
    Variable name
    name String
    The name of the Feature
    ofwEnabled Boolean
    Firewall enabled

    • Default value: false
    ofwEnabledVariable String
    Variable name
    primaryDataCenter String
    Custom Primary Datacenter

    • Default value: Auto
    primaryDataCenterVariable String
    Variable name
    refreshTime Number
    Refresh time for re-validation of surrogacy in minutes

    • At Least: 1
    • Default value: 1
    refreshTimeUnit String
    Refresh Time unit

    • Choices: MINUTE, HOUR, DAY
    • Default value: MINUTE
    refreshTimeUnitVariable String
    Variable name
    refreshTimeVariable String
    Variable name
    secondaryDataCenter String
    Custom Secondary Datacenter

    • Default value: Auto
    secondaryDataCenterVariable String
    Variable name
    srcVpn Boolean
    Share Source VPN

    • Default value: false
    subLocations List<Property Map>
    surrogateIp Boolean
    Enable Surrogate IP, Attribute conditional on authRequired equal to true

    • Default value: false
    surrogateIpVariable String
    Variable name, Attribute conditional on authRequired equal to true
    trackerSourceIpVariable String
    Variable name
    trackers List<Property Map>
    Tracker configuration
    upBandwidth Number
    , Attribute conditional on enforceBandwidthControl equal to true

    • Range: 0.1-99999
    upBandwidthVariable String
    Variable name, Attribute conditional on enforceBandwidthControl equal to true
    xffForwardEnabled Boolean
    XFF forwarding enabled

    • Default value: false
    xffForwardEnabledVariable String
    Variable name

    Outputs

    All input properties are implicitly available as output properties. Additionally, the SseZscalerFeature resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Version int
    The version of the Feature
    Id string
    The provider-assigned unique ID for this managed resource.
    Version int
    The version of the Feature
    id string
    The provider-assigned unique ID for this managed resource.
    version number
    The version of the Feature
    id String
    The provider-assigned unique ID for this managed resource.
    version Integer
    The version of the Feature
    id string
    The provider-assigned unique ID for this managed resource.
    version number
    The version of the Feature
    id str
    The provider-assigned unique ID for this managed resource.
    version int
    The version of the Feature
    id String
    The provider-assigned unique ID for this managed resource.
    version Number
    The version of the Feature

    Look up Existing SseZscalerFeature Resource

    Get an existing SseZscalerFeature resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: SseZscalerFeatureState, opts?: CustomResourceOptions): SseZscalerFeature
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        aup_enabled: Optional[bool] = None,
        aup_enabled_variable: Optional[str] = None,
        aup_timeout: Optional[int] = None,
        aup_timeout_variable: Optional[str] = None,
        auth_required: Optional[bool] = None,
        auth_required_variable: Optional[str] = None,
        block_internet_until_accepted: Optional[bool] = None,
        block_internet_until_accepted_variable: Optional[str] = None,
        caution_enabled: Optional[bool] = None,
        caution_enabled_variable: Optional[str] = None,
        country: Optional[bool] = None,
        country_variable: Optional[str] = None,
        description: Optional[str] = None,
        display_time_unit: Optional[str] = None,
        display_time_unit_variable: Optional[str] = None,
        dn_bandwidth: Optional[float] = None,
        dn_bandwidth_variable: Optional[str] = None,
        enforce_bandwidth_control: Optional[bool] = None,
        enforce_bandwidth_control_variable: Optional[str] = None,
        feature_profile_id: Optional[str] = None,
        force_ssl_inspection: Optional[bool] = None,
        force_ssl_inspection_variable: Optional[str] = None,
        idle_time: Optional[int] = None,
        idle_time_variable: Optional[str] = None,
        interface_pairs: Optional[Sequence[SseZscalerFeatureInterfacePairArgs]] = None,
        interfaces: Optional[Sequence[SseZscalerFeatureInterfaceArgs]] = None,
        ip_enforced_for_known_browsers: Optional[bool] = None,
        ip_enforced_for_known_browsers_variable: Optional[str] = None,
        ips_control: Optional[bool] = None,
        ips_control_variable: Optional[str] = None,
        location_name: Optional[str] = None,
        location_name_variable: Optional[str] = None,
        name: Optional[str] = None,
        ofw_enabled: Optional[bool] = None,
        ofw_enabled_variable: Optional[str] = None,
        primary_data_center: Optional[str] = None,
        primary_data_center_variable: Optional[str] = None,
        refresh_time: Optional[int] = None,
        refresh_time_unit: Optional[str] = None,
        refresh_time_unit_variable: Optional[str] = None,
        refresh_time_variable: Optional[str] = None,
        secondary_data_center: Optional[str] = None,
        secondary_data_center_variable: Optional[str] = None,
        src_vpn: Optional[bool] = None,
        sub_locations: Optional[Sequence[SseZscalerFeatureSubLocationArgs]] = None,
        surrogate_ip: Optional[bool] = None,
        surrogate_ip_variable: Optional[str] = None,
        tracker_source_ip: Optional[str] = None,
        tracker_source_ip_variable: Optional[str] = None,
        trackers: Optional[Sequence[SseZscalerFeatureTrackerArgs]] = None,
        up_bandwidth: Optional[float] = None,
        up_bandwidth_variable: Optional[str] = None,
        version: Optional[int] = None,
        xff_forward_enabled: Optional[bool] = None,
        xff_forward_enabled_variable: Optional[str] = None) -> SseZscalerFeature
    func GetSseZscalerFeature(ctx *Context, name string, id IDInput, state *SseZscalerFeatureState, opts ...ResourceOption) (*SseZscalerFeature, error)
    public static SseZscalerFeature Get(string name, Input<string> id, SseZscalerFeatureState? state, CustomResourceOptions? opts = null)
    public static SseZscalerFeature get(String name, Output<String> id, SseZscalerFeatureState state, CustomResourceOptions options)
    resources:  _:    type: sdwan:SseZscalerFeature    get:      id: ${id}
    import {
  to = sdwan_ssezscalerfeature.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AupEnabled bool
    Enable Acceptable User Policy

    • Default value: false
    AupEnabledVariable string
    Variable name
    AupTimeout int
    Custom Acceptable User Policy frequency in days, Attribute conditional on aupEnabled equal to true

    • Range: 1-180
    • Default value: 1
    AupTimeoutVariable string
    Variable name, Attribute conditional on aupEnabled equal to true
    AuthRequired bool
    Enforce Authentication

    • Default value: false
    AuthRequiredVariable string
    Variable name
    BlockInternetUntilAccepted bool
    For first-time Acceptable User Policy behavior, block Internet access, Attribute conditional on aupEnabled equal to true

    • Default value: false
    BlockInternetUntilAcceptedVariable string
    Variable name, Attribute conditional on aupEnabled equal to true
    CautionEnabled bool
    Enable Caution

    • Default value: false
    CautionEnabledVariable string
    Variable name
    Country bool
    • Default value: false
    CountryVariable string
    Variable name
    Description string
    The description of the Feature
    DisplayTimeUnit string
    Display time unit, Attribute conditional on surrogateIp equal to true

    • Choices: MINUTE, HOUR, DAY
    • Default value: MINUTE
    DisplayTimeUnitVariable string
    Variable name, Attribute conditional on surrogateIp equal to true
    DnBandwidth double
    , Attribute conditional on enforceBandwidthControl equal to true

    • Range: 0.1-99999
    DnBandwidthVariable string
    Variable name, Attribute conditional on enforceBandwidthControl equal to true
    EnforceBandwidthControl bool
    • Default value: false
    EnforceBandwidthControlVariable string
    Variable name
    FeatureProfileId string
    Feature Profile ID
    ForceSslInspection bool
    For first-time Acceptable User Policy behavior, force SSL inspection, Attribute conditional on aupEnabled equal to true

    • Default value: false
    ForceSslInspectionVariable string
    Variable name, Attribute conditional on aupEnabled equal to true
    IdleTime int
    Idle time to disassociation, Attribute conditional on surrogateIp equal to true

    • At Least: 1
    • Default value: 1
    IdleTimeVariable string
    Variable name, Attribute conditional on surrogateIp equal to true
    InterfacePairs List<SseZscalerFeatureInterfacePair>
    Interface Pair for active and backup
    Interfaces List<SseZscalerFeatureInterface>
    Interface name: IPsec when present
    IpEnforcedForKnownBrowsers bool
    Enforce Surrogate IP for known browsers

    • Default value: false
    IpEnforcedForKnownBrowsersVariable string
    Variable name
    IpsControl bool
    Enable IPS Control

    • Default value: false
    IpsControlVariable string
    Variable name
    LocationName string
    Zscaler location name (optional)

    • Default value: Auto
    LocationNameVariable string
    Variable name
    Name string
    The name of the Feature
    OfwEnabled bool
    Firewall enabled

    • Default value: false
    OfwEnabledVariable string
    Variable name
    PrimaryDataCenter string
    Custom Primary Datacenter

    • Default value: Auto
    PrimaryDataCenterVariable string
    Variable name
    RefreshTime int
    Refresh time for re-validation of surrogacy in minutes

    • At Least: 1
    • Default value: 1
    RefreshTimeUnit string
    Refresh Time unit

    • Choices: MINUTE, HOUR, DAY
    • Default value: MINUTE
    RefreshTimeUnitVariable string
    Variable name
    RefreshTimeVariable string
    Variable name
    SecondaryDataCenter string
    Custom Secondary Datacenter

    • Default value: Auto
    SecondaryDataCenterVariable string
    Variable name
    SrcVpn bool
    Share Source VPN

    • Default value: false
    SubLocations List<SseZscalerFeatureSubLocation>
    SurrogateIp bool
    Enable Surrogate IP, Attribute conditional on authRequired equal to true

    • Default value: false
    SurrogateIpVariable string
    Variable name, Attribute conditional on authRequired equal to true
    TrackerSourceIp string
    Source IP address for Tracker
    TrackerSourceIpVariable string
    Variable name
    Trackers List<SseZscalerFeatureTracker>
    Tracker configuration
    UpBandwidth double
    , Attribute conditional on enforceBandwidthControl equal to true

    • Range: 0.1-99999
    UpBandwidthVariable string
    Variable name, Attribute conditional on enforceBandwidthControl equal to true
    Version int
    The version of the Feature
    XffForwardEnabled bool
    XFF forwarding enabled

    • Default value: false
    XffForwardEnabledVariable string
    Variable name
    AupEnabled bool
    Enable Acceptable User Policy

    • Default value: false
    AupEnabledVariable string
    Variable name
    AupTimeout int
    Custom Acceptable User Policy frequency in days, Attribute conditional on aupEnabled equal to true

    • Range: 1-180
    • Default value: 1
    AupTimeoutVariable string
    Variable name, Attribute conditional on aupEnabled equal to true
    AuthRequired bool
    Enforce Authentication

    • Default value: false
    AuthRequiredVariable string
    Variable name
    BlockInternetUntilAccepted bool
    For first-time Acceptable User Policy behavior, block Internet access, Attribute conditional on aupEnabled equal to true

    • Default value: false
    BlockInternetUntilAcceptedVariable string
    Variable name, Attribute conditional on aupEnabled equal to true
    CautionEnabled bool
    Enable Caution

    • Default value: false
    CautionEnabledVariable string
    Variable name
    Country bool
    • Default value: false
    CountryVariable string
    Variable name
    Description string
    The description of the Feature
    DisplayTimeUnit string
    Display time unit, Attribute conditional on surrogateIp equal to true

    • Choices: MINUTE, HOUR, DAY
    • Default value: MINUTE
    DisplayTimeUnitVariable string
    Variable name, Attribute conditional on surrogateIp equal to true
    DnBandwidth float64
    , Attribute conditional on enforceBandwidthControl equal to true

    • Range: 0.1-99999
    DnBandwidthVariable string
    Variable name, Attribute conditional on enforceBandwidthControl equal to true
    EnforceBandwidthControl bool
    • Default value: false
    EnforceBandwidthControlVariable string
    Variable name
    FeatureProfileId string
    Feature Profile ID
    ForceSslInspection bool
    For first-time Acceptable User Policy behavior, force SSL inspection, Attribute conditional on aupEnabled equal to true

    • Default value: false
    ForceSslInspectionVariable string
    Variable name, Attribute conditional on aupEnabled equal to true
    IdleTime int
    Idle time to disassociation, Attribute conditional on surrogateIp equal to true

    • At Least: 1
    • Default value: 1
    IdleTimeVariable string
    Variable name, Attribute conditional on surrogateIp equal to true
    InterfacePairs []SseZscalerFeatureInterfacePairArgs
    Interface Pair for active and backup
    Interfaces []SseZscalerFeatureInterfaceArgs
    Interface name: IPsec when present
    IpEnforcedForKnownBrowsers bool
    Enforce Surrogate IP for known browsers

    • Default value: false
    IpEnforcedForKnownBrowsersVariable string
    Variable name
    IpsControl bool
    Enable IPS Control

    • Default value: false
    IpsControlVariable string
    Variable name
    LocationName string
    Zscaler location name (optional)

    • Default value: Auto
    LocationNameVariable string
    Variable name
    Name string
    The name of the Feature
    OfwEnabled bool
    Firewall enabled

    • Default value: false
    OfwEnabledVariable string
    Variable name
    PrimaryDataCenter string
    Custom Primary Datacenter

    • Default value: Auto
    PrimaryDataCenterVariable string
    Variable name
    RefreshTime int
    Refresh time for re-validation of surrogacy in minutes

    • At Least: 1
    • Default value: 1
    RefreshTimeUnit string
    Refresh Time unit

    • Choices: MINUTE, HOUR, DAY
    • Default value: MINUTE
    RefreshTimeUnitVariable string
    Variable name
    RefreshTimeVariable string
    Variable name
    SecondaryDataCenter string
    Custom Secondary Datacenter

    • Default value: Auto
    SecondaryDataCenterVariable string
    Variable name
    SrcVpn bool
    Share Source VPN

    • Default value: false
    SubLocations []SseZscalerFeatureSubLocationArgs
    SurrogateIp bool
    Enable Surrogate IP, Attribute conditional on authRequired equal to true

    • Default value: false
    SurrogateIpVariable string
    Variable name, Attribute conditional on authRequired equal to true
    TrackerSourceIp string
    Source IP address for Tracker
    TrackerSourceIpVariable string
    Variable name
    Trackers []SseZscalerFeatureTrackerArgs
    Tracker configuration
    UpBandwidth float64
    , Attribute conditional on enforceBandwidthControl equal to true

    • Range: 0.1-99999
    UpBandwidthVariable string
    Variable name, Attribute conditional on enforceBandwidthControl equal to true
    Version int
    The version of the Feature
    XffForwardEnabled bool
    XFF forwarding enabled

    • Default value: false
    XffForwardEnabledVariable string
    Variable name
    aup_enabled bool
    Enable Acceptable User Policy

    • Default value: false
    aup_enabled_variable string
    Variable name
    aup_timeout number
    Custom Acceptable User Policy frequency in days, Attribute conditional on aupEnabled equal to true

    • Range: 1-180
    • Default value: 1
    aup_timeout_variable string
    Variable name, Attribute conditional on aupEnabled equal to true
    auth_required bool
    Enforce Authentication

    • Default value: false
    auth_required_variable string
    Variable name
    block_internet_until_accepted bool
    For first-time Acceptable User Policy behavior, block Internet access, Attribute conditional on aupEnabled equal to true

    • Default value: false
    block_internet_until_accepted_variable string
    Variable name, Attribute conditional on aupEnabled equal to true
    caution_enabled bool
    Enable Caution

    • Default value: false
    caution_enabled_variable string
    Variable name
    country bool
    • Default value: false
    country_variable string
    Variable name
    description string
    The description of the Feature
    display_time_unit string
    Display time unit, Attribute conditional on surrogateIp equal to true

    • Choices: MINUTE, HOUR, DAY
    • Default value: MINUTE
    display_time_unit_variable string
    Variable name, Attribute conditional on surrogateIp equal to true
    dn_bandwidth number
    , Attribute conditional on enforceBandwidthControl equal to true

    • Range: 0.1-99999
    dn_bandwidth_variable string
    Variable name, Attribute conditional on enforceBandwidthControl equal to true
    enforce_bandwidth_control bool
    • Default value: false
    enforce_bandwidth_control_variable string
    Variable name
    feature_profile_id string
    Feature Profile ID
    force_ssl_inspection bool
    For first-time Acceptable User Policy behavior, force SSL inspection, Attribute conditional on aupEnabled equal to true

    • Default value: false
    force_ssl_inspection_variable string
    Variable name, Attribute conditional on aupEnabled equal to true
    idle_time number
    Idle time to disassociation, Attribute conditional on surrogateIp equal to true

    • At Least: 1
    • Default value: 1
    idle_time_variable string
    Variable name, Attribute conditional on surrogateIp equal to true
    interface_pairs list(object)
    Interface Pair for active and backup
    interfaces list(object)
    Interface name: IPsec when present
    ip_enforced_for_known_browsers bool
    Enforce Surrogate IP for known browsers

    • Default value: false
    ip_enforced_for_known_browsers_variable string
    Variable name
    ips_control bool
    Enable IPS Control

    • Default value: false
    ips_control_variable string
    Variable name
    location_name string
    Zscaler location name (optional)

    • Default value: Auto
    location_name_variable string
    Variable name
    name string
    The name of the Feature
    ofw_enabled bool
    Firewall enabled

    • Default value: false
    ofw_enabled_variable string
    Variable name
    primary_data_center string
    Custom Primary Datacenter

    • Default value: Auto
    primary_data_center_variable string
    Variable name
    refresh_time number
    Refresh time for re-validation of surrogacy in minutes

    • At Least: 1
    • Default value: 1
    refresh_time_unit string
    Refresh Time unit

    • Choices: MINUTE, HOUR, DAY
    • Default value: MINUTE
    refresh_time_unit_variable string
    Variable name
    refresh_time_variable string
    Variable name
    secondary_data_center string
    Custom Secondary Datacenter

    • Default value: Auto
    secondary_data_center_variable string
    Variable name
    src_vpn bool
    Share Source VPN

    • Default value: false
    sub_locations list(object)
    surrogate_ip bool
    Enable Surrogate IP, Attribute conditional on authRequired equal to true

    • Default value: false
    surrogate_ip_variable string
    Variable name, Attribute conditional on authRequired equal to true
    tracker_source_ip string
    Source IP address for Tracker
    tracker_source_ip_variable string
    Variable name
    trackers list(object)
    Tracker configuration
    up_bandwidth number
    , Attribute conditional on enforceBandwidthControl equal to true

    • Range: 0.1-99999
    up_bandwidth_variable string
    Variable name, Attribute conditional on enforceBandwidthControl equal to true
    version number
    The version of the Feature
    xff_forward_enabled bool
    XFF forwarding enabled

    • Default value: false
    xff_forward_enabled_variable string
    Variable name
    aupEnabled Boolean
    Enable Acceptable User Policy

    • Default value: false
    aupEnabledVariable String
    Variable name
    aupTimeout Integer
    Custom Acceptable User Policy frequency in days, Attribute conditional on aupEnabled equal to true

    • Range: 1-180
    • Default value: 1
    aupTimeoutVariable String
    Variable name, Attribute conditional on aupEnabled equal to true
    authRequired Boolean
    Enforce Authentication

    • Default value: false
    authRequiredVariable String
    Variable name
    blockInternetUntilAccepted Boolean
    For first-time Acceptable User Policy behavior, block Internet access, Attribute conditional on aupEnabled equal to true

    • Default value: false
    blockInternetUntilAcceptedVariable String
    Variable name, Attribute conditional on aupEnabled equal to true
    cautionEnabled Boolean
    Enable Caution

    • Default value: false
    cautionEnabledVariable String
    Variable name
    country Boolean
    • Default value: false
    countryVariable String
    Variable name
    description String
    The description of the Feature
    displayTimeUnit String
    Display time unit, Attribute conditional on surrogateIp equal to true

    • Choices: MINUTE, HOUR, DAY
    • Default value: MINUTE
    displayTimeUnitVariable String
    Variable name, Attribute conditional on surrogateIp equal to true
    dnBandwidth Double
    , Attribute conditional on enforceBandwidthControl equal to true

    • Range: 0.1-99999
    dnBandwidthVariable String
    Variable name, Attribute conditional on enforceBandwidthControl equal to true
    enforceBandwidthControl Boolean
    • Default value: false
    enforceBandwidthControlVariable String
    Variable name
    featureProfileId String
    Feature Profile ID
    forceSslInspection Boolean
    For first-time Acceptable User Policy behavior, force SSL inspection, Attribute conditional on aupEnabled equal to true

    • Default value: false
    forceSslInspectionVariable String
    Variable name, Attribute conditional on aupEnabled equal to true
    idleTime Integer
    Idle time to disassociation, Attribute conditional on surrogateIp equal to true

    • At Least: 1
    • Default value: 1
    idleTimeVariable String
    Variable name, Attribute conditional on surrogateIp equal to true
    interfacePairs List<SseZscalerFeatureInterfacePair>
    Interface Pair for active and backup
    interfaces List<SseZscalerFeatureInterface>
    Interface name: IPsec when present
    ipEnforcedForKnownBrowsers Boolean
    Enforce Surrogate IP for known browsers

    • Default value: false
    ipEnforcedForKnownBrowsersVariable String
    Variable name
    ipsControl Boolean
    Enable IPS Control

    • Default value: false
    ipsControlVariable String
    Variable name
    locationName String
    Zscaler location name (optional)

    • Default value: Auto
    locationNameVariable String
    Variable name
    name String
    The name of the Feature
    ofwEnabled Boolean
    Firewall enabled

    • Default value: false
    ofwEnabledVariable String
    Variable name
    primaryDataCenter String
    Custom Primary Datacenter

    • Default value: Auto
    primaryDataCenterVariable String
    Variable name
    refreshTime Integer
    Refresh time for re-validation of surrogacy in minutes

    • At Least: 1
    • Default value: 1
    refreshTimeUnit String
    Refresh Time unit

    • Choices: MINUTE, HOUR, DAY
    • Default value: MINUTE
    refreshTimeUnitVariable String
    Variable name
    refreshTimeVariable String
    Variable name
    secondaryDataCenter String
    Custom Secondary Datacenter

    • Default value: Auto
    secondaryDataCenterVariable String
    Variable name
    srcVpn Boolean
    Share Source VPN

    • Default value: false
    subLocations List<SseZscalerFeatureSubLocation>
    surrogateIp Boolean
    Enable Surrogate IP, Attribute conditional on authRequired equal to true

    • Default value: false
    surrogateIpVariable String
    Variable name, Attribute conditional on authRequired equal to true
    trackerSourceIp String
    Source IP address for Tracker
    trackerSourceIpVariable String
    Variable name
    trackers List<SseZscalerFeatureTracker>
    Tracker configuration
    upBandwidth Double
    , Attribute conditional on enforceBandwidthControl equal to true

    • Range: 0.1-99999
    upBandwidthVariable String
    Variable name, Attribute conditional on enforceBandwidthControl equal to true
    version Integer
    The version of the Feature
    xffForwardEnabled Boolean
    XFF forwarding enabled

    • Default value: false
    xffForwardEnabledVariable String
    Variable name
    aupEnabled boolean
    Enable Acceptable User Policy

    • Default value: false
    aupEnabledVariable string
    Variable name
    aupTimeout number
    Custom Acceptable User Policy frequency in days, Attribute conditional on aupEnabled equal to true

    • Range: 1-180
    • Default value: 1
    aupTimeoutVariable string
    Variable name, Attribute conditional on aupEnabled equal to true
    authRequired boolean
    Enforce Authentication

    • Default value: false
    authRequiredVariable string
    Variable name
    blockInternetUntilAccepted boolean
    For first-time Acceptable User Policy behavior, block Internet access, Attribute conditional on aupEnabled equal to true

    • Default value: false
    blockInternetUntilAcceptedVariable string
    Variable name, Attribute conditional on aupEnabled equal to true
    cautionEnabled boolean
    Enable Caution

    • Default value: false
    cautionEnabledVariable string
    Variable name
    country boolean
    • Default value: false
    countryVariable string
    Variable name
    description string
    The description of the Feature
    displayTimeUnit string
    Display time unit, Attribute conditional on surrogateIp equal to true

    • Choices: MINUTE, HOUR, DAY
    • Default value: MINUTE
    displayTimeUnitVariable string
    Variable name, Attribute conditional on surrogateIp equal to true
    dnBandwidth number
    , Attribute conditional on enforceBandwidthControl equal to true

    • Range: 0.1-99999
    dnBandwidthVariable string
    Variable name, Attribute conditional on enforceBandwidthControl equal to true
    enforceBandwidthControl boolean
    • Default value: false
    enforceBandwidthControlVariable string
    Variable name
    featureProfileId string
    Feature Profile ID
    forceSslInspection boolean
    For first-time Acceptable User Policy behavior, force SSL inspection, Attribute conditional on aupEnabled equal to true

    • Default value: false
    forceSslInspectionVariable string
    Variable name, Attribute conditional on aupEnabled equal to true
    idleTime number
    Idle time to disassociation, Attribute conditional on surrogateIp equal to true

    • At Least: 1
    • Default value: 1
    idleTimeVariable string
    Variable name, Attribute conditional on surrogateIp equal to true
    interfacePairs SseZscalerFeatureInterfacePair[]
    Interface Pair for active and backup
    interfaces SseZscalerFeatureInterface[]
    Interface name: IPsec when present
    ipEnforcedForKnownBrowsers boolean
    Enforce Surrogate IP for known browsers

    • Default value: false
    ipEnforcedForKnownBrowsersVariable string
    Variable name
    ipsControl boolean
    Enable IPS Control

    • Default value: false
    ipsControlVariable string
    Variable name
    locationName string
    Zscaler location name (optional)

    • Default value: Auto
    locationNameVariable string
    Variable name
    name string
    The name of the Feature
    ofwEnabled boolean
    Firewall enabled

    • Default value: false
    ofwEnabledVariable string
    Variable name
    primaryDataCenter string
    Custom Primary Datacenter

    • Default value: Auto
    primaryDataCenterVariable string
    Variable name
    refreshTime number
    Refresh time for re-validation of surrogacy in minutes

    • At Least: 1
    • Default value: 1
    refreshTimeUnit string
    Refresh Time unit

    • Choices: MINUTE, HOUR, DAY
    • Default value: MINUTE
    refreshTimeUnitVariable string
    Variable name
    refreshTimeVariable string
    Variable name
    secondaryDataCenter string
    Custom Secondary Datacenter

    • Default value: Auto
    secondaryDataCenterVariable string
    Variable name
    srcVpn boolean
    Share Source VPN

    • Default value: false
    subLocations SseZscalerFeatureSubLocation[]
    surrogateIp boolean
    Enable Surrogate IP, Attribute conditional on authRequired equal to true

    • Default value: false
    surrogateIpVariable string
    Variable name, Attribute conditional on authRequired equal to true
    trackerSourceIp string
    Source IP address for Tracker
    trackerSourceIpVariable string
    Variable name
    trackers SseZscalerFeatureTracker[]
    Tracker configuration
    upBandwidth number
    , Attribute conditional on enforceBandwidthControl equal to true

    • Range: 0.1-99999
    upBandwidthVariable string
    Variable name, Attribute conditional on enforceBandwidthControl equal to true
    version number
    The version of the Feature
    xffForwardEnabled boolean
    XFF forwarding enabled

    • Default value: false
    xffForwardEnabledVariable string
    Variable name
    aup_enabled bool
    Enable Acceptable User Policy

    • Default value: false
    aup_enabled_variable str
    Variable name
    aup_timeout int
    Custom Acceptable User Policy frequency in days, Attribute conditional on aupEnabled equal to true

    • Range: 1-180
    • Default value: 1
    aup_timeout_variable str
    Variable name, Attribute conditional on aupEnabled equal to true
    auth_required bool
    Enforce Authentication

    • Default value: false
    auth_required_variable str
    Variable name
    block_internet_until_accepted bool
    For first-time Acceptable User Policy behavior, block Internet access, Attribute conditional on aupEnabled equal to true

    • Default value: false
    block_internet_until_accepted_variable str
    Variable name, Attribute conditional on aupEnabled equal to true
    caution_enabled bool
    Enable Caution

    • Default value: false
    caution_enabled_variable str
    Variable name
    country bool
    • Default value: false
    country_variable str
    Variable name
    description str
    The description of the Feature
    display_time_unit str
    Display time unit, Attribute conditional on surrogateIp equal to true

    • Choices: MINUTE, HOUR, DAY
    • Default value: MINUTE
    display_time_unit_variable str
    Variable name, Attribute conditional on surrogateIp equal to true
    dn_bandwidth float
    , Attribute conditional on enforceBandwidthControl equal to true

    • Range: 0.1-99999
    dn_bandwidth_variable str
    Variable name, Attribute conditional on enforceBandwidthControl equal to true
    enforce_bandwidth_control bool
    • Default value: false
    enforce_bandwidth_control_variable str
    Variable name
    feature_profile_id str
    Feature Profile ID
    force_ssl_inspection bool
    For first-time Acceptable User Policy behavior, force SSL inspection, Attribute conditional on aupEnabled equal to true

    • Default value: false
    force_ssl_inspection_variable str
    Variable name, Attribute conditional on aupEnabled equal to true
    idle_time int
    Idle time to disassociation, Attribute conditional on surrogateIp equal to true

    • At Least: 1
    • Default value: 1
    idle_time_variable str
    Variable name, Attribute conditional on surrogateIp equal to true
    interface_pairs Sequence[SseZscalerFeatureInterfacePairArgs]
    Interface Pair for active and backup
    interfaces Sequence[SseZscalerFeatureInterfaceArgs]
    Interface name: IPsec when present
    ip_enforced_for_known_browsers bool
    Enforce Surrogate IP for known browsers

    • Default value: false
    ip_enforced_for_known_browsers_variable str
    Variable name
    ips_control bool
    Enable IPS Control

    • Default value: false
    ips_control_variable str
    Variable name
    location_name str
    Zscaler location name (optional)

    • Default value: Auto
    location_name_variable str
    Variable name
    name str
    The name of the Feature
    ofw_enabled bool
    Firewall enabled

    • Default value: false
    ofw_enabled_variable str
    Variable name
    primary_data_center str
    Custom Primary Datacenter

    • Default value: Auto
    primary_data_center_variable str
    Variable name
    refresh_time int
    Refresh time for re-validation of surrogacy in minutes

    • At Least: 1
    • Default value: 1
    refresh_time_unit str
    Refresh Time unit

    • Choices: MINUTE, HOUR, DAY
    • Default value: MINUTE
    refresh_time_unit_variable str
    Variable name
    refresh_time_variable str
    Variable name
    secondary_data_center str
    Custom Secondary Datacenter

    • Default value: Auto
    secondary_data_center_variable str
    Variable name
    src_vpn bool
    Share Source VPN

    • Default value: false
    sub_locations Sequence[SseZscalerFeatureSubLocationArgs]
    surrogate_ip bool
    Enable Surrogate IP, Attribute conditional on authRequired equal to true

    • Default value: false
    surrogate_ip_variable str
    Variable name, Attribute conditional on authRequired equal to true
    tracker_source_ip str
    Source IP address for Tracker
    tracker_source_ip_variable str
    Variable name
    trackers Sequence[SseZscalerFeatureTrackerArgs]
    Tracker configuration
    up_bandwidth float
    , Attribute conditional on enforceBandwidthControl equal to true

    • Range: 0.1-99999
    up_bandwidth_variable str
    Variable name, Attribute conditional on enforceBandwidthControl equal to true
    version int
    The version of the Feature
    xff_forward_enabled bool
    XFF forwarding enabled

    • Default value: false
    xff_forward_enabled_variable str
    Variable name
    aupEnabled Boolean
    Enable Acceptable User Policy

    • Default value: false
    aupEnabledVariable String
    Variable name
    aupTimeout Number
    Custom Acceptable User Policy frequency in days, Attribute conditional on aupEnabled equal to true

    • Range: 1-180
    • Default value: 1
    aupTimeoutVariable String
    Variable name, Attribute conditional on aupEnabled equal to true
    authRequired Boolean
    Enforce Authentication

    • Default value: false
    authRequiredVariable String
    Variable name
    blockInternetUntilAccepted Boolean
    For first-time Acceptable User Policy behavior, block Internet access, Attribute conditional on aupEnabled equal to true

    • Default value: false
    blockInternetUntilAcceptedVariable String
    Variable name, Attribute conditional on aupEnabled equal to true
    cautionEnabled Boolean
    Enable Caution

    • Default value: false
    cautionEnabledVariable String
    Variable name
    country Boolean
    • Default value: false
    countryVariable String
    Variable name
    description String
    The description of the Feature
    displayTimeUnit String
    Display time unit, Attribute conditional on surrogateIp equal to true

    • Choices: MINUTE, HOUR, DAY
    • Default value: MINUTE
    displayTimeUnitVariable String
    Variable name, Attribute conditional on surrogateIp equal to true
    dnBandwidth Number
    , Attribute conditional on enforceBandwidthControl equal to true

    • Range: 0.1-99999
    dnBandwidthVariable String
    Variable name, Attribute conditional on enforceBandwidthControl equal to true
    enforceBandwidthControl Boolean
    • Default value: false
    enforceBandwidthControlVariable String
    Variable name
    featureProfileId String
    Feature Profile ID
    forceSslInspection Boolean
    For first-time Acceptable User Policy behavior, force SSL inspection, Attribute conditional on aupEnabled equal to true

    • Default value: false
    forceSslInspectionVariable String
    Variable name, Attribute conditional on aupEnabled equal to true
    idleTime Number
    Idle time to disassociation, Attribute conditional on surrogateIp equal to true

    • At Least: 1
    • Default value: 1
    idleTimeVariable String
    Variable name, Attribute conditional on surrogateIp equal to true
    interfacePairs List<Property Map>
    Interface Pair for active and backup
    interfaces List<Property Map>
    Interface name: IPsec when present
    ipEnforcedForKnownBrowsers Boolean
    Enforce Surrogate IP for known browsers

    • Default value: false
    ipEnforcedForKnownBrowsersVariable String
    Variable name
    ipsControl Boolean
    Enable IPS Control

    • Default value: false
    ipsControlVariable String
    Variable name
    locationName String
    Zscaler location name (optional)

    • Default value: Auto
    locationNameVariable String
    Variable name
    name String
    The name of the Feature
    ofwEnabled Boolean
    Firewall enabled

    • Default value: false
    ofwEnabledVariable String
    Variable name
    primaryDataCenter String
    Custom Primary Datacenter

    • Default value: Auto
    primaryDataCenterVariable String
    Variable name
    refreshTime Number
    Refresh time for re-validation of surrogacy in minutes

    • At Least: 1
    • Default value: 1
    refreshTimeUnit String
    Refresh Time unit

    • Choices: MINUTE, HOUR, DAY
    • Default value: MINUTE
    refreshTimeUnitVariable String
    Variable name
    refreshTimeVariable String
    Variable name
    secondaryDataCenter String
    Custom Secondary Datacenter

    • Default value: Auto
    secondaryDataCenterVariable String
    Variable name
    srcVpn Boolean
    Share Source VPN

    • Default value: false
    subLocations List<Property Map>
    surrogateIp Boolean
    Enable Surrogate IP, Attribute conditional on authRequired equal to true

    • Default value: false
    surrogateIpVariable String
    Variable name, Attribute conditional on authRequired equal to true
    trackerSourceIp String
    Source IP address for Tracker
    trackerSourceIpVariable String
    Variable name
    trackers List<Property Map>
    Tracker configuration
    upBandwidth Number
    , Attribute conditional on enforceBandwidthControl equal to true

    • Range: 0.1-99999
    upBandwidthVariable String
    Variable name, Attribute conditional on enforceBandwidthControl equal to true
    version Number
    The version of the Feature
    xffForwardEnabled Boolean
    XFF forwarding enabled

    • Default value: false
    xffForwardEnabledVariable String
    Variable name

    Supporting Types

    SseZscalerFeatureInterface, SseZscalerFeatureInterfaceArgs

    Auto bool
    Auto Tunnel Mode
    DpdInterval int
    IKE keepalive interval (seconds)

    • Range: 10-3600
    • Default value: 10
    DpdIntervalVariable string
    Variable name
    DpdRetries int
    IKE keepalive retries

    • Range: 2-60
    • Default value: 3
    DpdRetriesVariable string
    Variable name
    IkeCiphersuite string
    IKE identity the IKE preshared secret belongs to

    • Choices: aes256-cbc-sha1, aes256-cbc-sha2, aes128-cbc-sha1, aes128-cbc-sha2
    • Default value: aes256-cbc-sha1
    IkeCiphersuiteVariable string
    Variable name
    IkeGroup string
    IKE Diffie Hellman Groups

    • Choices: 2, 5, 14, 15, 16, 19, 20, 21
    • Default value: 16
    IkeGroupVariable string
    Variable name
    IkeLocalId string
    IKE ID for the local endpoint. Input IPv4 address, domain name, or email address
    IkeLocalIdVariable string
    Variable name
    IkeRekeyInterval int
    IKE rekey interval <300..1209600> seconds

    • Range: 300-86400
    • Default value: 14400
    IkeRekeyIntervalVariable string
    Variable name
    IkeRemoteId string
    IKE ID for the remote endpoint. Input IPv4 address, domain name, or email address
    IkeRemoteIdVariable string
    Variable name
    IkeVersion int
    IKE Version <1..2>

    • Range: 1-2
    • Default value: 2
    IkeVersionVariable string
    Variable name
    InterfaceDescription string
    Interface description
    InterfaceDescriptionVariable string
    Variable name
    InterfaceName string
    Interface name: IPsec when present
    IpsecCiphersuite string
    IPsec(ESP) encryption and integrity protocol

    • Choices: aes256-cbc-sha1, aes256-cbc-sha384, aes256-cbc-sha256, aes256-cbc-sha512, aes256-gcm
    • Default value: aes256-cbc-sha512
    IpsecCiphersuiteVariable string
    Variable name
    IpsecRekeyInterval int
    IPsec rekey interval <300..1209600> seconds

    • Range: 300-1209600
    • Default value: 3600
    IpsecRekeyIntervalVariable string
    Variable name
    IpsecReplayWindow int
    Replay window size 32..8192 (must be a power of 2)

    • Default value: 512
    IpsecReplayWindowVariable string
    Variable name
    Ipv4Address string
    Assign IPv4 address
    Ipv4AddressVariable string
    Variable name
    Mtu int
    Interface MTU <576..2000>, in bytes

    • Range: 576-2000
    • Default value: 1400
    MtuVariable string
    Variable name
    PerfectForwardSecrecy string
    IPsec perfect forward secrecy settings

    • Choices: group-2, group-5, group-14, group-15, group-16, group-19, group-20, group-21, none
    • Default value: none
    PerfectForwardSecrecyVariable string
    Variable name
    PreSharedKeyDynamic bool
    Use preshared key to authenticate IKE peer
    PreSharedSecret string
    Use preshared key to authenticate IKE peer
    PreSharedSecretVariable string
    Variable name
    Shutdown bool
    Administrative state

    • Default value: false
    TcpMssAdjust int
    TCP MSS on SYN packets, in bytes

    • Range: 500-1460
    TcpMssAdjustVariable string
    Variable name
    TrackEnable bool
    Enable/disable Zscaler SSE tracking

    • Default value: true
    Tracker string
    Enable tracker for this interface

    • Default value: DefaultTracker
    TunnelDcPreference string
    Zscaler SSE Tunnel Data Center

    • Choices: primary-dc, secondary-dc
    TunnelDestination string
    Tunnel destination IP address
    TunnelDestinationVariable string
    Variable name
    TunnelPublicIp string
    Public IP required to setup GRE tunnel to Zscaler

    • Default value: Auto
    TunnelPublicIpVariable string
    Variable name
    TunnelRouteVia string
    <1..32 characters> Interface name: ge0/<0-..> or ge0/<0-..>.vlanid
    TunnelRouteViaVariable string
    Variable name
    TunnelSet string
    Zscaler SSE Tunnel Provider

    • Choices: secure-internet-gateway-umbrella, secure-internet-gateway-zscaler, secure-internet-gateway-other
    TunnelSource string
    Tunnel source IP Address
    TunnelSourceInterface string
    <1..32 characters> Interface name: ge0/<0-..> or ge0/<0-..>.vlanid
    TunnelSourceInterfaceVariable string
    Variable name
    TunnelSourceVariable string
    Variable name
    Unnumbered bool
    Unnumbered interface
    Auto bool
    Auto Tunnel Mode
    DpdInterval int
    IKE keepalive interval (seconds)

    • Range: 10-3600
    • Default value: 10
    DpdIntervalVariable string
    Variable name
    DpdRetries int
    IKE keepalive retries

    • Range: 2-60
    • Default value: 3
    DpdRetriesVariable string
    Variable name
    IkeCiphersuite string
    IKE identity the IKE preshared secret belongs to

    • Choices: aes256-cbc-sha1, aes256-cbc-sha2, aes128-cbc-sha1, aes128-cbc-sha2
    • Default value: aes256-cbc-sha1
    IkeCiphersuiteVariable string
    Variable name
    IkeGroup string
    IKE Diffie Hellman Groups

    • Choices: 2, 5, 14, 15, 16, 19, 20, 21
    • Default value: 16
    IkeGroupVariable string
    Variable name
    IkeLocalId string
    IKE ID for the local endpoint. Input IPv4 address, domain name, or email address
    IkeLocalIdVariable string
    Variable name
    IkeRekeyInterval int
    IKE rekey interval <300..1209600> seconds

    • Range: 300-86400
    • Default value: 14400
    IkeRekeyIntervalVariable string
    Variable name
    IkeRemoteId string
    IKE ID for the remote endpoint. Input IPv4 address, domain name, or email address
    IkeRemoteIdVariable string
    Variable name
    IkeVersion int
    IKE Version <1..2>

    • Range: 1-2
    • Default value: 2
    IkeVersionVariable string
    Variable name
    InterfaceDescription string
    Interface description
    InterfaceDescriptionVariable string
    Variable name
    InterfaceName string
    Interface name: IPsec when present
    IpsecCiphersuite string
    IPsec(ESP) encryption and integrity protocol

    • Choices: aes256-cbc-sha1, aes256-cbc-sha384, aes256-cbc-sha256, aes256-cbc-sha512, aes256-gcm
    • Default value: aes256-cbc-sha512
    IpsecCiphersuiteVariable string
    Variable name
    IpsecRekeyInterval int
    IPsec rekey interval <300..1209600> seconds

    • Range: 300-1209600
    • Default value: 3600
    IpsecRekeyIntervalVariable string
    Variable name
    IpsecReplayWindow int
    Replay window size 32..8192 (must be a power of 2)

    • Default value: 512
    IpsecReplayWindowVariable string
    Variable name
    Ipv4Address string
    Assign IPv4 address
    Ipv4AddressVariable string
    Variable name
    Mtu int
    Interface MTU <576..2000>, in bytes

    • Range: 576-2000
    • Default value: 1400
    MtuVariable string
    Variable name
    PerfectForwardSecrecy string
    IPsec perfect forward secrecy settings

    • Choices: group-2, group-5, group-14, group-15, group-16, group-19, group-20, group-21, none
    • Default value: none
    PerfectForwardSecrecyVariable string
    Variable name
    PreSharedKeyDynamic bool
    Use preshared key to authenticate IKE peer
    PreSharedSecret string
    Use preshared key to authenticate IKE peer
    PreSharedSecretVariable string
    Variable name
    Shutdown bool
    Administrative state

    • Default value: false
    TcpMssAdjust int
    TCP MSS on SYN packets, in bytes

    • Range: 500-1460
    TcpMssAdjustVariable string
    Variable name
    TrackEnable bool
    Enable/disable Zscaler SSE tracking

    • Default value: true
    Tracker string
    Enable tracker for this interface

    • Default value: DefaultTracker
    TunnelDcPreference string
    Zscaler SSE Tunnel Data Center

    • Choices: primary-dc, secondary-dc
    TunnelDestination string
    Tunnel destination IP address
    TunnelDestinationVariable string
    Variable name
    TunnelPublicIp string
    Public IP required to setup GRE tunnel to Zscaler

    • Default value: Auto
    TunnelPublicIpVariable string
    Variable name
    TunnelRouteVia string
    <1..32 characters> Interface name: ge0/<0-..> or ge0/<0-..>.vlanid
    TunnelRouteViaVariable string
    Variable name
    TunnelSet string
    Zscaler SSE Tunnel Provider

    • Choices: secure-internet-gateway-umbrella, secure-internet-gateway-zscaler, secure-internet-gateway-other
    TunnelSource string
    Tunnel source IP Address
    TunnelSourceInterface string
    <1..32 characters> Interface name: ge0/<0-..> or ge0/<0-..>.vlanid
    TunnelSourceInterfaceVariable string
    Variable name
    TunnelSourceVariable string
    Variable name
    Unnumbered bool
    Unnumbered interface
    auto bool
    Auto Tunnel Mode
    dpd_interval number
    IKE keepalive interval (seconds)

    • Range: 10-3600
    • Default value: 10
    dpd_interval_variable string
    Variable name
    dpd_retries number
    IKE keepalive retries

    • Range: 2-60
    • Default value: 3
    dpd_retries_variable string
    Variable name
    ike_ciphersuite string
    IKE identity the IKE preshared secret belongs to

    • Choices: aes256-cbc-sha1, aes256-cbc-sha2, aes128-cbc-sha1, aes128-cbc-sha2
    • Default value: aes256-cbc-sha1
    ike_ciphersuite_variable string
    Variable name
    ike_group string
    IKE Diffie Hellman Groups

    • Choices: 2, 5, 14, 15, 16, 19, 20, 21
    • Default value: 16
    ike_group_variable string
    Variable name
    ike_local_id string
    IKE ID for the local endpoint. Input IPv4 address, domain name, or email address
    ike_local_id_variable string
    Variable name
    ike_rekey_interval number
    IKE rekey interval <300..1209600> seconds

    • Range: 300-86400
    • Default value: 14400
    ike_rekey_interval_variable string
    Variable name
    ike_remote_id string
    IKE ID for the remote endpoint. Input IPv4 address, domain name, or email address
    ike_remote_id_variable string
    Variable name
    ike_version number
    IKE Version <1..2>

    • Range: 1-2
    • Default value: 2
    ike_version_variable string
    Variable name
    interface_description string
    Interface description
    interface_description_variable string
    Variable name
    interface_name string
    Interface name: IPsec when present
    ipsec_ciphersuite string
    IPsec(ESP) encryption and integrity protocol

    • Choices: aes256-cbc-sha1, aes256-cbc-sha384, aes256-cbc-sha256, aes256-cbc-sha512, aes256-gcm
    • Default value: aes256-cbc-sha512
    ipsec_ciphersuite_variable string
    Variable name
    ipsec_rekey_interval number
    IPsec rekey interval <300..1209600> seconds

    • Range: 300-1209600
    • Default value: 3600
    ipsec_rekey_interval_variable string
    Variable name
    ipsec_replay_window number
    Replay window size 32..8192 (must be a power of 2)

    • Default value: 512
    ipsec_replay_window_variable string
    Variable name
    ipv4_address string
    Assign IPv4 address
    ipv4_address_variable string
    Variable name
    mtu number
    Interface MTU <576..2000>, in bytes

    • Range: 576-2000
    • Default value: 1400
    mtu_variable string
    Variable name
    perfect_forward_secrecy string
    IPsec perfect forward secrecy settings

    • Choices: group-2, group-5, group-14, group-15, group-16, group-19, group-20, group-21, none
    • Default value: none
    perfect_forward_secrecy_variable string
    Variable name
    pre_shared_key_dynamic bool
    Use preshared key to authenticate IKE peer
    pre_shared_secret string
    Use preshared key to authenticate IKE peer
    pre_shared_secret_variable string
    Variable name
    shutdown bool
    Administrative state

    • Default value: false
    tcp_mss_adjust number
    TCP MSS on SYN packets, in bytes

    • Range: 500-1460
    tcp_mss_adjust_variable string
    Variable name
    track_enable bool
    Enable/disable Zscaler SSE tracking

    • Default value: true
    tracker string
    Enable tracker for this interface

    • Default value: DefaultTracker
    tunnel_dc_preference string
    Zscaler SSE Tunnel Data Center

    • Choices: primary-dc, secondary-dc
    tunnel_destination string
    Tunnel destination IP address
    tunnel_destination_variable string
    Variable name
    tunnel_public_ip string
    Public IP required to setup GRE tunnel to Zscaler

    • Default value: Auto
    tunnel_public_ip_variable string
    Variable name
    tunnel_route_via string
    <1..32 characters> Interface name: ge0/<0-..> or ge0/<0-..>.vlanid
    tunnel_route_via_variable string
    Variable name
    tunnel_set string
    Zscaler SSE Tunnel Provider

    • Choices: secure-internet-gateway-umbrella, secure-internet-gateway-zscaler, secure-internet-gateway-other
    tunnel_source string
    Tunnel source IP Address
    tunnel_source_interface string
    <1..32 characters> Interface name: ge0/<0-..> or ge0/<0-..>.vlanid
    tunnel_source_interface_variable string
    Variable name
    tunnel_source_variable string
    Variable name
    unnumbered bool
    Unnumbered interface
    auto Boolean
    Auto Tunnel Mode
    dpdInterval Integer
    IKE keepalive interval (seconds)

    • Range: 10-3600
    • Default value: 10
    dpdIntervalVariable String
    Variable name
    dpdRetries Integer
    IKE keepalive retries

    • Range: 2-60
    • Default value: 3
    dpdRetriesVariable String
    Variable name
    ikeCiphersuite String
    IKE identity the IKE preshared secret belongs to

    • Choices: aes256-cbc-sha1, aes256-cbc-sha2, aes128-cbc-sha1, aes128-cbc-sha2
    • Default value: aes256-cbc-sha1
    ikeCiphersuiteVariable String
    Variable name
    ikeGroup String
    IKE Diffie Hellman Groups

    • Choices: 2, 5, 14, 15, 16, 19, 20, 21
    • Default value: 16
    ikeGroupVariable String
    Variable name
    ikeLocalId String
    IKE ID for the local endpoint. Input IPv4 address, domain name, or email address
    ikeLocalIdVariable String
    Variable name
    ikeRekeyInterval Integer
    IKE rekey interval <300..1209600> seconds

    • Range: 300-86400
    • Default value: 14400
    ikeRekeyIntervalVariable String
    Variable name
    ikeRemoteId String
    IKE ID for the remote endpoint. Input IPv4 address, domain name, or email address
    ikeRemoteIdVariable String
    Variable name
    ikeVersion Integer
    IKE Version <1..2>

    • Range: 1-2
    • Default value: 2
    ikeVersionVariable String
    Variable name
    interfaceDescription String
    Interface description
    interfaceDescriptionVariable String
    Variable name
    interfaceName String
    Interface name: IPsec when present
    ipsecCiphersuite String
    IPsec(ESP) encryption and integrity protocol

    • Choices: aes256-cbc-sha1, aes256-cbc-sha384, aes256-cbc-sha256, aes256-cbc-sha512, aes256-gcm
    • Default value: aes256-cbc-sha512
    ipsecCiphersuiteVariable String
    Variable name
    ipsecRekeyInterval Integer
    IPsec rekey interval <300..1209600> seconds

    • Range: 300-1209600
    • Default value: 3600
    ipsecRekeyIntervalVariable String
    Variable name
    ipsecReplayWindow Integer
    Replay window size 32..8192 (must be a power of 2)

    • Default value: 512
    ipsecReplayWindowVariable String
    Variable name
    ipv4Address String
    Assign IPv4 address
    ipv4AddressVariable String
    Variable name
    mtu Integer
    Interface MTU <576..2000>, in bytes

    • Range: 576-2000
    • Default value: 1400
    mtuVariable String
    Variable name
    perfectForwardSecrecy String
    IPsec perfect forward secrecy settings

    • Choices: group-2, group-5, group-14, group-15, group-16, group-19, group-20, group-21, none
    • Default value: none
    perfectForwardSecrecyVariable String
    Variable name
    preSharedKeyDynamic Boolean
    Use preshared key to authenticate IKE peer
    preSharedSecret String
    Use preshared key to authenticate IKE peer
    preSharedSecretVariable String
    Variable name
    shutdown Boolean
    Administrative state

    • Default value: false
    tcpMssAdjust Integer
    TCP MSS on SYN packets, in bytes

    • Range: 500-1460
    tcpMssAdjustVariable String
    Variable name
    trackEnable Boolean
    Enable/disable Zscaler SSE tracking

    • Default value: true
    tracker String
    Enable tracker for this interface

    • Default value: DefaultTracker
    tunnelDcPreference String
    Zscaler SSE Tunnel Data Center

    • Choices: primary-dc, secondary-dc
    tunnelDestination String
    Tunnel destination IP address
    tunnelDestinationVariable String
    Variable name
    tunnelPublicIp String
    Public IP required to setup GRE tunnel to Zscaler

    • Default value: Auto
    tunnelPublicIpVariable String
    Variable name
    tunnelRouteVia String
    <1..32 characters> Interface name: ge0/<0-..> or ge0/<0-..>.vlanid
    tunnelRouteViaVariable String
    Variable name
    tunnelSet String
    Zscaler SSE Tunnel Provider

    • Choices: secure-internet-gateway-umbrella, secure-internet-gateway-zscaler, secure-internet-gateway-other
    tunnelSource String
    Tunnel source IP Address
    tunnelSourceInterface String
    <1..32 characters> Interface name: ge0/<0-..> or ge0/<0-..>.vlanid
    tunnelSourceInterfaceVariable String
    Variable name
    tunnelSourceVariable String
    Variable name
    unnumbered Boolean
    Unnumbered interface
    auto boolean
    Auto Tunnel Mode
    dpdInterval number
    IKE keepalive interval (seconds)

    • Range: 10-3600
    • Default value: 10
    dpdIntervalVariable string
    Variable name
    dpdRetries number
    IKE keepalive retries

    • Range: 2-60
    • Default value: 3
    dpdRetriesVariable string
    Variable name
    ikeCiphersuite string
    IKE identity the IKE preshared secret belongs to

    • Choices: aes256-cbc-sha1, aes256-cbc-sha2, aes128-cbc-sha1, aes128-cbc-sha2
    • Default value: aes256-cbc-sha1
    ikeCiphersuiteVariable string
    Variable name
    ikeGroup string
    IKE Diffie Hellman Groups

    • Choices: 2, 5, 14, 15, 16, 19, 20, 21
    • Default value: 16
    ikeGroupVariable string
    Variable name
    ikeLocalId string
    IKE ID for the local endpoint. Input IPv4 address, domain name, or email address
    ikeLocalIdVariable string
    Variable name
    ikeRekeyInterval number
    IKE rekey interval <300..1209600> seconds

    • Range: 300-86400
    • Default value: 14400
    ikeRekeyIntervalVariable string
    Variable name
    ikeRemoteId string
    IKE ID for the remote endpoint. Input IPv4 address, domain name, or email address
    ikeRemoteIdVariable string
    Variable name
    ikeVersion number
    IKE Version <1..2>

    • Range: 1-2
    • Default value: 2
    ikeVersionVariable string
    Variable name
    interfaceDescription string
    Interface description
    interfaceDescriptionVariable string
    Variable name
    interfaceName string
    Interface name: IPsec when present
    ipsecCiphersuite string
    IPsec(ESP) encryption and integrity protocol

    • Choices: aes256-cbc-sha1, aes256-cbc-sha384, aes256-cbc-sha256, aes256-cbc-sha512, aes256-gcm
    • Default value: aes256-cbc-sha512
    ipsecCiphersuiteVariable string
    Variable name
    ipsecRekeyInterval number
    IPsec rekey interval <300..1209600> seconds

    • Range: 300-1209600
    • Default value: 3600
    ipsecRekeyIntervalVariable string
    Variable name
    ipsecReplayWindow number
    Replay window size 32..8192 (must be a power of 2)

    • Default value: 512
    ipsecReplayWindowVariable string
    Variable name
    ipv4Address string
    Assign IPv4 address
    ipv4AddressVariable string
    Variable name
    mtu number
    Interface MTU <576..2000>, in bytes

    • Range: 576-2000
    • Default value: 1400
    mtuVariable string
    Variable name
    perfectForwardSecrecy string
    IPsec perfect forward secrecy settings

    • Choices: group-2, group-5, group-14, group-15, group-16, group-19, group-20, group-21, none
    • Default value: none
    perfectForwardSecrecyVariable string
    Variable name
    preSharedKeyDynamic boolean
    Use preshared key to authenticate IKE peer
    preSharedSecret string
    Use preshared key to authenticate IKE peer
    preSharedSecretVariable string
    Variable name
    shutdown boolean
    Administrative state

    • Default value: false
    tcpMssAdjust number
    TCP MSS on SYN packets, in bytes

    • Range: 500-1460
    tcpMssAdjustVariable string
    Variable name
    trackEnable boolean
    Enable/disable Zscaler SSE tracking

    • Default value: true
    tracker string
    Enable tracker for this interface

    • Default value: DefaultTracker
    tunnelDcPreference string
    Zscaler SSE Tunnel Data Center

    • Choices: primary-dc, secondary-dc
    tunnelDestination string
    Tunnel destination IP address
    tunnelDestinationVariable string
    Variable name
    tunnelPublicIp string
    Public IP required to setup GRE tunnel to Zscaler

    • Default value: Auto
    tunnelPublicIpVariable string
    Variable name
    tunnelRouteVia string
    <1..32 characters> Interface name: ge0/<0-..> or ge0/<0-..>.vlanid
    tunnelRouteViaVariable string
    Variable name
    tunnelSet string
    Zscaler SSE Tunnel Provider

    • Choices: secure-internet-gateway-umbrella, secure-internet-gateway-zscaler, secure-internet-gateway-other
    tunnelSource string
    Tunnel source IP Address
    tunnelSourceInterface string
    <1..32 characters> Interface name: ge0/<0-..> or ge0/<0-..>.vlanid
    tunnelSourceInterfaceVariable string
    Variable name
    tunnelSourceVariable string
    Variable name
    unnumbered boolean
    Unnumbered interface
    auto bool
    Auto Tunnel Mode
    dpd_interval int
    IKE keepalive interval (seconds)

    • Range: 10-3600
    • Default value: 10
    dpd_interval_variable str
    Variable name
    dpd_retries int
    IKE keepalive retries

    • Range: 2-60
    • Default value: 3
    dpd_retries_variable str
    Variable name
    ike_ciphersuite str
    IKE identity the IKE preshared secret belongs to

    • Choices: aes256-cbc-sha1, aes256-cbc-sha2, aes128-cbc-sha1, aes128-cbc-sha2
    • Default value: aes256-cbc-sha1
    ike_ciphersuite_variable str
    Variable name
    ike_group str
    IKE Diffie Hellman Groups

    • Choices: 2, 5, 14, 15, 16, 19, 20, 21
    • Default value: 16
    ike_group_variable str
    Variable name
    ike_local_id str
    IKE ID for the local endpoint. Input IPv4 address, domain name, or email address
    ike_local_id_variable str
    Variable name
    ike_rekey_interval int
    IKE rekey interval <300..1209600> seconds

    • Range: 300-86400
    • Default value: 14400
    ike_rekey_interval_variable str
    Variable name
    ike_remote_id str
    IKE ID for the remote endpoint. Input IPv4 address, domain name, or email address
    ike_remote_id_variable str
    Variable name
    ike_version int
    IKE Version <1..2>

    • Range: 1-2
    • Default value: 2
    ike_version_variable str
    Variable name
    interface_description str
    Interface description
    interface_description_variable str
    Variable name
    interface_name str
    Interface name: IPsec when present
    ipsec_ciphersuite str
    IPsec(ESP) encryption and integrity protocol

    • Choices: aes256-cbc-sha1, aes256-cbc-sha384, aes256-cbc-sha256, aes256-cbc-sha512, aes256-gcm
    • Default value: aes256-cbc-sha512
    ipsec_ciphersuite_variable str
    Variable name
    ipsec_rekey_interval int
    IPsec rekey interval <300..1209600> seconds

    • Range: 300-1209600
    • Default value: 3600
    ipsec_rekey_interval_variable str
    Variable name
    ipsec_replay_window int
    Replay window size 32..8192 (must be a power of 2)

    • Default value: 512
    ipsec_replay_window_variable str
    Variable name
    ipv4_address str
    Assign IPv4 address
    ipv4_address_variable str
    Variable name
    mtu int
    Interface MTU <576..2000>, in bytes

    • Range: 576-2000
    • Default value: 1400
    mtu_variable str
    Variable name
    perfect_forward_secrecy str
    IPsec perfect forward secrecy settings

    • Choices: group-2, group-5, group-14, group-15, group-16, group-19, group-20, group-21, none
    • Default value: none
    perfect_forward_secrecy_variable str
    Variable name
    pre_shared_key_dynamic bool
    Use preshared key to authenticate IKE peer
    pre_shared_secret str
    Use preshared key to authenticate IKE peer
    pre_shared_secret_variable str
    Variable name
    shutdown bool
    Administrative state

    • Default value: false
    tcp_mss_adjust int
    TCP MSS on SYN packets, in bytes

    • Range: 500-1460
    tcp_mss_adjust_variable str
    Variable name
    track_enable bool
    Enable/disable Zscaler SSE tracking

    • Default value: true
    tracker str
    Enable tracker for this interface

    • Default value: DefaultTracker
    tunnel_dc_preference str
    Zscaler SSE Tunnel Data Center

    • Choices: primary-dc, secondary-dc
    tunnel_destination str
    Tunnel destination IP address
    tunnel_destination_variable str
    Variable name
    tunnel_public_ip str
    Public IP required to setup GRE tunnel to Zscaler

    • Default value: Auto
    tunnel_public_ip_variable str
    Variable name
    tunnel_route_via str
    <1..32 characters> Interface name: ge0/<0-..> or ge0/<0-..>.vlanid
    tunnel_route_via_variable str
    Variable name
    tunnel_set str
    Zscaler SSE Tunnel Provider

    • Choices: secure-internet-gateway-umbrella, secure-internet-gateway-zscaler, secure-internet-gateway-other
    tunnel_source str
    Tunnel source IP Address
    tunnel_source_interface str
    <1..32 characters> Interface name: ge0/<0-..> or ge0/<0-..>.vlanid
    tunnel_source_interface_variable str
    Variable name
    tunnel_source_variable str
    Variable name
    unnumbered bool
    Unnumbered interface
    auto Boolean
    Auto Tunnel Mode
    dpdInterval Number
    IKE keepalive interval (seconds)

    • Range: 10-3600
    • Default value: 10
    dpdIntervalVariable String
    Variable name
    dpdRetries Number
    IKE keepalive retries

    • Range: 2-60
    • Default value: 3
    dpdRetriesVariable String
    Variable name
    ikeCiphersuite String
    IKE identity the IKE preshared secret belongs to

    • Choices: aes256-cbc-sha1, aes256-cbc-sha2, aes128-cbc-sha1, aes128-cbc-sha2
    • Default value: aes256-cbc-sha1
    ikeCiphersuiteVariable String
    Variable name
    ikeGroup String
    IKE Diffie Hellman Groups

    • Choices: 2, 5, 14, 15, 16, 19, 20, 21
    • Default value: 16
    ikeGroupVariable String
    Variable name
    ikeLocalId String
    IKE ID for the local endpoint. Input IPv4 address, domain name, or email address
    ikeLocalIdVariable String
    Variable name
    ikeRekeyInterval Number
    IKE rekey interval <300..1209600> seconds

    • Range: 300-86400
    • Default value: 14400
    ikeRekeyIntervalVariable String
    Variable name
    ikeRemoteId String
    IKE ID for the remote endpoint. Input IPv4 address, domain name, or email address
    ikeRemoteIdVariable String
    Variable name
    ikeVersion Number
    IKE Version <1..2>

    • Range: 1-2
    • Default value: 2
    ikeVersionVariable String
    Variable name
    interfaceDescription String
    Interface description
    interfaceDescriptionVariable String
    Variable name
    interfaceName String
    Interface name: IPsec when present
    ipsecCiphersuite String
    IPsec(ESP) encryption and integrity protocol

    • Choices: aes256-cbc-sha1, aes256-cbc-sha384, aes256-cbc-sha256, aes256-cbc-sha512, aes256-gcm
    • Default value: aes256-cbc-sha512
    ipsecCiphersuiteVariable String
    Variable name
    ipsecRekeyInterval Number
    IPsec rekey interval <300..1209600> seconds

    • Range: 300-1209600
    • Default value: 3600
    ipsecRekeyIntervalVariable String
    Variable name
    ipsecReplayWindow Number
    Replay window size 32..8192 (must be a power of 2)

    • Default value: 512
    ipsecReplayWindowVariable String
    Variable name
    ipv4Address String
    Assign IPv4 address
    ipv4AddressVariable String
    Variable name
    mtu Number
    Interface MTU <576..2000>, in bytes

    • Range: 576-2000
    • Default value: 1400
    mtuVariable String
    Variable name
    perfectForwardSecrecy String
    IPsec perfect forward secrecy settings

    • Choices: group-2, group-5, group-14, group-15, group-16, group-19, group-20, group-21, none
    • Default value: none
    perfectForwardSecrecyVariable String
    Variable name
    preSharedKeyDynamic Boolean
    Use preshared key to authenticate IKE peer
    preSharedSecret String
    Use preshared key to authenticate IKE peer
    preSharedSecretVariable String
    Variable name
    shutdown Boolean
    Administrative state

    • Default value: false
    tcpMssAdjust Number
    TCP MSS on SYN packets, in bytes

    • Range: 500-1460
    tcpMssAdjustVariable String
    Variable name
    trackEnable Boolean
    Enable/disable Zscaler SSE tracking

    • Default value: true
    tracker String
    Enable tracker for this interface

    • Default value: DefaultTracker
    tunnelDcPreference String
    Zscaler SSE Tunnel Data Center

    • Choices: primary-dc, secondary-dc
    tunnelDestination String
    Tunnel destination IP address
    tunnelDestinationVariable String
    Variable name
    tunnelPublicIp String
    Public IP required to setup GRE tunnel to Zscaler

    • Default value: Auto
    tunnelPublicIpVariable String
    Variable name
    tunnelRouteVia String
    <1..32 characters> Interface name: ge0/<0-..> or ge0/<0-..>.vlanid
    tunnelRouteViaVariable String
    Variable name
    tunnelSet String
    Zscaler SSE Tunnel Provider

    • Choices: secure-internet-gateway-umbrella, secure-internet-gateway-zscaler, secure-internet-gateway-other
    tunnelSource String
    Tunnel source IP Address
    tunnelSourceInterface String
    <1..32 characters> Interface name: ge0/<0-..> or ge0/<0-..>.vlanid
    tunnelSourceInterfaceVariable String
    Variable name
    tunnelSourceVariable String
    Variable name
    unnumbered Boolean
    Unnumbered interface

    SseZscalerFeatureInterfacePair, SseZscalerFeatureInterfacePairArgs

    ActiveInterface string
    Active Tunnel Interface for Zscaler SSE
    ActiveInterfaceWeight int
    Active Tunnel Interface Weight

    • Range: 1-255
    BackupInterface string
    Backup Tunnel Interface for Zscaler SSE
    BackupInterfaceWeight int
    Backup Tunnel Interface Weight

    • Range: 1-255
    ActiveInterface string
    Active Tunnel Interface for Zscaler SSE
    ActiveInterfaceWeight int
    Active Tunnel Interface Weight

    • Range: 1-255
    BackupInterface string
    Backup Tunnel Interface for Zscaler SSE
    BackupInterfaceWeight int
    Backup Tunnel Interface Weight

    • Range: 1-255
    active_interface string
    Active Tunnel Interface for Zscaler SSE
    active_interface_weight number
    Active Tunnel Interface Weight

    • Range: 1-255
    backup_interface string
    Backup Tunnel Interface for Zscaler SSE
    backup_interface_weight number
    Backup Tunnel Interface Weight

    • Range: 1-255
    activeInterface String
    Active Tunnel Interface for Zscaler SSE
    activeInterfaceWeight Integer
    Active Tunnel Interface Weight

    • Range: 1-255
    backupInterface String
    Backup Tunnel Interface for Zscaler SSE
    backupInterfaceWeight Integer
    Backup Tunnel Interface Weight

    • Range: 1-255
    activeInterface string
    Active Tunnel Interface for Zscaler SSE
    activeInterfaceWeight number
    Active Tunnel Interface Weight

    • Range: 1-255
    backupInterface string
    Backup Tunnel Interface for Zscaler SSE
    backupInterfaceWeight number
    Backup Tunnel Interface Weight

    • Range: 1-255
    active_interface str
    Active Tunnel Interface for Zscaler SSE
    active_interface_weight int
    Active Tunnel Interface Weight

    • Range: 1-255
    backup_interface str
    Backup Tunnel Interface for Zscaler SSE
    backup_interface_weight int
    Backup Tunnel Interface Weight

    • Range: 1-255
    activeInterface String
    Active Tunnel Interface for Zscaler SSE
    activeInterfaceWeight Number
    Active Tunnel Interface Weight

    • Range: 1-255
    backupInterface String
    Backup Tunnel Interface for Zscaler SSE
    backupInterfaceWeight Number
    Backup Tunnel Interface Weight

    • Range: 1-255

    SseZscalerFeatureSubLocation, SseZscalerFeatureSubLocationArgs

    AupEnabled bool
    Displays an Acceptable Use Policy for unauthenticated traffic and require users to accept it

    • Default value: false
    AupEnabledVariable string
    Variable name
    AupTimeout int
    How frequently in days the Acceptable Use Policy is displayed to users, Attribute conditional on aupEnabled equal to true

    • Range: 1-180
    • Default value: 1
    AupTimeoutVariable string
    Variable name, Attribute conditional on aupEnabled equal to true
    AuthRequired bool
    Enable Enforce Authentication to require users from this location to authenticate to the service.

    • Default value: false
    AuthRequiredVariable string
    Variable name
    BlockInternetUntilAccepted bool
    Disable all access to the internet, including non-HTTP traffic, until the user accepts the Acceptable Use Policy, Attribute conditional on aupEnabled equal to true

    • Default value: false
    BlockInternetUntilAcceptedVariable string
    Variable name, Attribute conditional on aupEnabled equal to true
    CautionEnabled bool
    Enforces a caution policy action and display an end user notification for unauthenticated traffic. If disabled, the action is treated as an allow policy.

    • Default value: false
    CautionEnabledVariable string
    Variable name
    DisplayTimeUnit string
    Display time unit for Idle Time to Disassociation, Attribute conditional on surrogateIp equal to true

    • Choices: MINUTE, HOUR, DAY
    • Default value: MINUTE
    DisplayTimeUnitVariable string
    Variable name, Attribute conditional on surrogateIp equal to true
    DnBandwidth double
    , Attribute conditional on enforceBandwidthControl equal to override

    • Range: 0.1-99999
    DnBandwidthVariable string
    Variable name, Attribute conditional on enforceBandwidthControl equal to override
    EnforceBandwidthControl string
    Enforce Bandwidth Control for sub location

    • Choices: location-bandwidth, override, disabled
    • Default value: location-bandwidth
    EnforceBandwidthControlVariable string
    Variable name
    ForceSslInspection bool
    Enable to make SSL Interception enforce an Acceptable Use Policy for HTTPS traffic, Attribute conditional on aupEnabled equal to true

    • Default value: false
    ForceSslInspectionVariable string
    Variable name, Attribute conditional on aupEnabled equal to true
    IdleTime int
    Idle time to disassociation. How long after a completed transaction the service retains the IP address to user mapping., Attribute conditional on surrogateIp equal to true

    • At Least: 1
    • Default value: 1
    IdleTimeVariable string
    Variable name, Attribute conditional on surrogateIp equal to true
    InternalIps List<SseZscalerFeatureSubLocationInternalIp>
    IpEnforcedForKnownBrowsers bool
    If enabled, and if the IP-user mapping exists, then the Surrogate user identity is used for traffic from known browsers. If disabled, traffic from known browsers will always be challenged using the configured authentication mechanism and Surrogate user identity is ignored

    • Default value: false
    IpEnforcedForKnownBrowsersVariable string
    Variable name
    Name string
    NameVariable string
    Variable name
    OfwEnabled bool
    Enforces firewall at the location

    • Default value: false
    OfwEnabledVariable string
    Variable name
    RefreshTime int
    Length of time that surrogate user identity can be used for traffic from known browsers before it must refresh and re-validate the surrogate user identity, Attribute conditional on ipEnforcedForKnownBrowsers equal to true

    • At Least: 1
    • Default value: 1
    RefreshTimeUnit string
    Refresh Time display unit, Attribute conditional on ipEnforcedForKnownBrowsers equal to true

    • Choices: MINUTE, HOUR, DAY
    • Default value: MINUTE
    RefreshTimeUnitVariable string
    Variable name, Attribute conditional on ipEnforcedForKnownBrowsers equal to true
    RefreshTimeVariable string
    Variable name, Attribute conditional on ipEnforcedForKnownBrowsers equal to true
    ServiceVpnVariable string
    Variable name
    ServiceVpns List<string>
    SurrogateIp bool
    Enable Surrogate IP. Maps users to device IP addresses. This is used to enforce user policies on cookie-compatible traffic., Attribute conditional on authRequired equal to true

    • Default value: false
    SurrogateIpVariable string
    Variable name, Attribute conditional on authRequired equal to true
    UpBandwidth double
    , Attribute conditional on enforceBandwidthControl equal to override

    • Range: 0.1-99999
    UpBandwidthVariable string
    Variable name, Attribute conditional on enforceBandwidthControl equal to override
    AupEnabled bool
    Displays an Acceptable Use Policy for unauthenticated traffic and require users to accept it

    • Default value: false
    AupEnabledVariable string
    Variable name
    AupTimeout int
    How frequently in days the Acceptable Use Policy is displayed to users, Attribute conditional on aupEnabled equal to true

    • Range: 1-180
    • Default value: 1
    AupTimeoutVariable string
    Variable name, Attribute conditional on aupEnabled equal to true
    AuthRequired bool
    Enable Enforce Authentication to require users from this location to authenticate to the service.

    • Default value: false
    AuthRequiredVariable string
    Variable name
    BlockInternetUntilAccepted bool
    Disable all access to the internet, including non-HTTP traffic, until the user accepts the Acceptable Use Policy, Attribute conditional on aupEnabled equal to true

    • Default value: false
    BlockInternetUntilAcceptedVariable string
    Variable name, Attribute conditional on aupEnabled equal to true
    CautionEnabled bool
    Enforces a caution policy action and display an end user notification for unauthenticated traffic. If disabled, the action is treated as an allow policy.

    • Default value: false
    CautionEnabledVariable string
    Variable name
    DisplayTimeUnit string
    Display time unit for Idle Time to Disassociation, Attribute conditional on surrogateIp equal to true

    • Choices: MINUTE, HOUR, DAY
    • Default value: MINUTE
    DisplayTimeUnitVariable string
    Variable name, Attribute conditional on surrogateIp equal to true
    DnBandwidth float64
    , Attribute conditional on enforceBandwidthControl equal to override

    • Range: 0.1-99999
    DnBandwidthVariable string
    Variable name, Attribute conditional on enforceBandwidthControl equal to override
    EnforceBandwidthControl string
    Enforce Bandwidth Control for sub location

    • Choices: location-bandwidth, override, disabled
    • Default value: location-bandwidth
    EnforceBandwidthControlVariable string
    Variable name
    ForceSslInspection bool
    Enable to make SSL Interception enforce an Acceptable Use Policy for HTTPS traffic, Attribute conditional on aupEnabled equal to true

    • Default value: false
    ForceSslInspectionVariable string
    Variable name, Attribute conditional on aupEnabled equal to true
    IdleTime int
    Idle time to disassociation. How long after a completed transaction the service retains the IP address to user mapping., Attribute conditional on surrogateIp equal to true

    • At Least: 1
    • Default value: 1
    IdleTimeVariable string
    Variable name, Attribute conditional on surrogateIp equal to true
    InternalIps []SseZscalerFeatureSubLocationInternalIp
    IpEnforcedForKnownBrowsers bool
    If enabled, and if the IP-user mapping exists, then the Surrogate user identity is used for traffic from known browsers. If disabled, traffic from known browsers will always be challenged using the configured authentication mechanism and Surrogate user identity is ignored

    • Default value: false
    IpEnforcedForKnownBrowsersVariable string
    Variable name
    Name string
    NameVariable string
    Variable name
    OfwEnabled bool
    Enforces firewall at the location

    • Default value: false
    OfwEnabledVariable string
    Variable name
    RefreshTime int
    Length of time that surrogate user identity can be used for traffic from known browsers before it must refresh and re-validate the surrogate user identity, Attribute conditional on ipEnforcedForKnownBrowsers equal to true

    • At Least: 1
    • Default value: 1
    RefreshTimeUnit string
    Refresh Time display unit, Attribute conditional on ipEnforcedForKnownBrowsers equal to true

    • Choices: MINUTE, HOUR, DAY
    • Default value: MINUTE
    RefreshTimeUnitVariable string
    Variable name, Attribute conditional on ipEnforcedForKnownBrowsers equal to true
    RefreshTimeVariable string
    Variable name, Attribute conditional on ipEnforcedForKnownBrowsers equal to true
    ServiceVpnVariable string
    Variable name
    ServiceVpns []string
    SurrogateIp bool
    Enable Surrogate IP. Maps users to device IP addresses. This is used to enforce user policies on cookie-compatible traffic., Attribute conditional on authRequired equal to true

    • Default value: false
    SurrogateIpVariable string
    Variable name, Attribute conditional on authRequired equal to true
    UpBandwidth float64
    , Attribute conditional on enforceBandwidthControl equal to override

    • Range: 0.1-99999
    UpBandwidthVariable string
    Variable name, Attribute conditional on enforceBandwidthControl equal to override
    aup_enabled bool
    Displays an Acceptable Use Policy for unauthenticated traffic and require users to accept it

    • Default value: false
    aup_enabled_variable string
    Variable name
    aup_timeout number
    How frequently in days the Acceptable Use Policy is displayed to users, Attribute conditional on aupEnabled equal to true

    • Range: 1-180
    • Default value: 1
    aup_timeout_variable string
    Variable name, Attribute conditional on aupEnabled equal to true
    auth_required bool
    Enable Enforce Authentication to require users from this location to authenticate to the service.

    • Default value: false
    auth_required_variable string
    Variable name
    block_internet_until_accepted bool
    Disable all access to the internet, including non-HTTP traffic, until the user accepts the Acceptable Use Policy, Attribute conditional on aupEnabled equal to true

    • Default value: false
    block_internet_until_accepted_variable string
    Variable name, Attribute conditional on aupEnabled equal to true
    caution_enabled bool
    Enforces a caution policy action and display an end user notification for unauthenticated traffic. If disabled, the action is treated as an allow policy.

    • Default value: false
    caution_enabled_variable string
    Variable name
    display_time_unit string
    Display time unit for Idle Time to Disassociation, Attribute conditional on surrogateIp equal to true

    • Choices: MINUTE, HOUR, DAY
    • Default value: MINUTE
    display_time_unit_variable string
    Variable name, Attribute conditional on surrogateIp equal to true
    dn_bandwidth number
    , Attribute conditional on enforceBandwidthControl equal to override

    • Range: 0.1-99999
    dn_bandwidth_variable string
    Variable name, Attribute conditional on enforceBandwidthControl equal to override
    enforce_bandwidth_control string
    Enforce Bandwidth Control for sub location

    • Choices: location-bandwidth, override, disabled
    • Default value: location-bandwidth
    enforce_bandwidth_control_variable string
    Variable name
    force_ssl_inspection bool
    Enable to make SSL Interception enforce an Acceptable Use Policy for HTTPS traffic, Attribute conditional on aupEnabled equal to true

    • Default value: false
    force_ssl_inspection_variable string
    Variable name, Attribute conditional on aupEnabled equal to true
    idle_time number
    Idle time to disassociation. How long after a completed transaction the service retains the IP address to user mapping., Attribute conditional on surrogateIp equal to true

    • At Least: 1
    • Default value: 1
    idle_time_variable string
    Variable name, Attribute conditional on surrogateIp equal to true
    internal_ips list(object)
    ip_enforced_for_known_browsers bool
    If enabled, and if the IP-user mapping exists, then the Surrogate user identity is used for traffic from known browsers. If disabled, traffic from known browsers will always be challenged using the configured authentication mechanism and Surrogate user identity is ignored

    • Default value: false
    ip_enforced_for_known_browsers_variable string
    Variable name
    name string
    name_variable string
    Variable name
    ofw_enabled bool
    Enforces firewall at the location

    • Default value: false
    ofw_enabled_variable string
    Variable name
    refresh_time number
    Length of time that surrogate user identity can be used for traffic from known browsers before it must refresh and re-validate the surrogate user identity, Attribute conditional on ipEnforcedForKnownBrowsers equal to true

    • At Least: 1
    • Default value: 1
    refresh_time_unit string
    Refresh Time display unit, Attribute conditional on ipEnforcedForKnownBrowsers equal to true

    • Choices: MINUTE, HOUR, DAY
    • Default value: MINUTE
    refresh_time_unit_variable string
    Variable name, Attribute conditional on ipEnforcedForKnownBrowsers equal to true
    refresh_time_variable string
    Variable name, Attribute conditional on ipEnforcedForKnownBrowsers equal to true
    service_vpn_variable string
    Variable name
    service_vpns list(string)
    surrogate_ip bool
    Enable Surrogate IP. Maps users to device IP addresses. This is used to enforce user policies on cookie-compatible traffic., Attribute conditional on authRequired equal to true

    • Default value: false
    surrogate_ip_variable string
    Variable name, Attribute conditional on authRequired equal to true
    up_bandwidth number
    , Attribute conditional on enforceBandwidthControl equal to override

    • Range: 0.1-99999
    up_bandwidth_variable string
    Variable name, Attribute conditional on enforceBandwidthControl equal to override
    aupEnabled Boolean
    Displays an Acceptable Use Policy for unauthenticated traffic and require users to accept it

    • Default value: false
    aupEnabledVariable String
    Variable name
    aupTimeout Integer
    How frequently in days the Acceptable Use Policy is displayed to users, Attribute conditional on aupEnabled equal to true

    • Range: 1-180
    • Default value: 1
    aupTimeoutVariable String
    Variable name, Attribute conditional on aupEnabled equal to true
    authRequired Boolean
    Enable Enforce Authentication to require users from this location to authenticate to the service.

    • Default value: false
    authRequiredVariable String
    Variable name
    blockInternetUntilAccepted Boolean
    Disable all access to the internet, including non-HTTP traffic, until the user accepts the Acceptable Use Policy, Attribute conditional on aupEnabled equal to true

    • Default value: false
    blockInternetUntilAcceptedVariable String
    Variable name, Attribute conditional on aupEnabled equal to true
    cautionEnabled Boolean
    Enforces a caution policy action and display an end user notification for unauthenticated traffic. If disabled, the action is treated as an allow policy.

    • Default value: false
    cautionEnabledVariable String
    Variable name
    displayTimeUnit String
    Display time unit for Idle Time to Disassociation, Attribute conditional on surrogateIp equal to true

    • Choices: MINUTE, HOUR, DAY
    • Default value: MINUTE
    displayTimeUnitVariable String
    Variable name, Attribute conditional on surrogateIp equal to true
    dnBandwidth Double
    , Attribute conditional on enforceBandwidthControl equal to override

    • Range: 0.1-99999
    dnBandwidthVariable String
    Variable name, Attribute conditional on enforceBandwidthControl equal to override
    enforceBandwidthControl String
    Enforce Bandwidth Control for sub location

    • Choices: location-bandwidth, override, disabled
    • Default value: location-bandwidth
    enforceBandwidthControlVariable String
    Variable name
    forceSslInspection Boolean
    Enable to make SSL Interception enforce an Acceptable Use Policy for HTTPS traffic, Attribute conditional on aupEnabled equal to true

    • Default value: false
    forceSslInspectionVariable String
    Variable name, Attribute conditional on aupEnabled equal to true
    idleTime Integer
    Idle time to disassociation. How long after a completed transaction the service retains the IP address to user mapping., Attribute conditional on surrogateIp equal to true

    • At Least: 1
    • Default value: 1
    idleTimeVariable String
    Variable name, Attribute conditional on surrogateIp equal to true
    internalIps List<SseZscalerFeatureSubLocationInternalIp>
    ipEnforcedForKnownBrowsers Boolean
    If enabled, and if the IP-user mapping exists, then the Surrogate user identity is used for traffic from known browsers. If disabled, traffic from known browsers will always be challenged using the configured authentication mechanism and Surrogate user identity is ignored

    • Default value: false
    ipEnforcedForKnownBrowsersVariable String
    Variable name
    name String
    nameVariable String
    Variable name
    ofwEnabled Boolean
    Enforces firewall at the location

    • Default value: false
    ofwEnabledVariable String
    Variable name
    refreshTime Integer
    Length of time that surrogate user identity can be used for traffic from known browsers before it must refresh and re-validate the surrogate user identity, Attribute conditional on ipEnforcedForKnownBrowsers equal to true

    • At Least: 1
    • Default value: 1
    refreshTimeUnit String
    Refresh Time display unit, Attribute conditional on ipEnforcedForKnownBrowsers equal to true

    • Choices: MINUTE, HOUR, DAY
    • Default value: MINUTE
    refreshTimeUnitVariable String
    Variable name, Attribute conditional on ipEnforcedForKnownBrowsers equal to true
    refreshTimeVariable String
    Variable name, Attribute conditional on ipEnforcedForKnownBrowsers equal to true
    serviceVpnVariable String
    Variable name
    serviceVpns List<String>
    surrogateIp Boolean
    Enable Surrogate IP. Maps users to device IP addresses. This is used to enforce user policies on cookie-compatible traffic., Attribute conditional on authRequired equal to true

    • Default value: false
    surrogateIpVariable String
    Variable name, Attribute conditional on authRequired equal to true
    upBandwidth Double
    , Attribute conditional on enforceBandwidthControl equal to override

    • Range: 0.1-99999
    upBandwidthVariable String
    Variable name, Attribute conditional on enforceBandwidthControl equal to override
    aupEnabled boolean
    Displays an Acceptable Use Policy for unauthenticated traffic and require users to accept it

    • Default value: false
    aupEnabledVariable string
    Variable name
    aupTimeout number
    How frequently in days the Acceptable Use Policy is displayed to users, Attribute conditional on aupEnabled equal to true

    • Range: 1-180
    • Default value: 1
    aupTimeoutVariable string
    Variable name, Attribute conditional on aupEnabled equal to true
    authRequired boolean
    Enable Enforce Authentication to require users from this location to authenticate to the service.

    • Default value: false
    authRequiredVariable string
    Variable name
    blockInternetUntilAccepted boolean
    Disable all access to the internet, including non-HTTP traffic, until the user accepts the Acceptable Use Policy, Attribute conditional on aupEnabled equal to true

    • Default value: false
    blockInternetUntilAcceptedVariable string
    Variable name, Attribute conditional on aupEnabled equal to true
    cautionEnabled boolean
    Enforces a caution policy action and display an end user notification for unauthenticated traffic. If disabled, the action is treated as an allow policy.

    • Default value: false
    cautionEnabledVariable string
    Variable name
    displayTimeUnit string
    Display time unit for Idle Time to Disassociation, Attribute conditional on surrogateIp equal to true

    • Choices: MINUTE, HOUR, DAY
    • Default value: MINUTE
    displayTimeUnitVariable string
    Variable name, Attribute conditional on surrogateIp equal to true
    dnBandwidth number
    , Attribute conditional on enforceBandwidthControl equal to override

    • Range: 0.1-99999
    dnBandwidthVariable string
    Variable name, Attribute conditional on enforceBandwidthControl equal to override
    enforceBandwidthControl string
    Enforce Bandwidth Control for sub location

    • Choices: location-bandwidth, override, disabled
    • Default value: location-bandwidth
    enforceBandwidthControlVariable string
    Variable name
    forceSslInspection boolean
    Enable to make SSL Interception enforce an Acceptable Use Policy for HTTPS traffic, Attribute conditional on aupEnabled equal to true

    • Default value: false
    forceSslInspectionVariable string
    Variable name, Attribute conditional on aupEnabled equal to true
    idleTime number
    Idle time to disassociation. How long after a completed transaction the service retains the IP address to user mapping., Attribute conditional on surrogateIp equal to true

    • At Least: 1
    • Default value: 1
    idleTimeVariable string
    Variable name, Attribute conditional on surrogateIp equal to true
    internalIps SseZscalerFeatureSubLocationInternalIp[]
    ipEnforcedForKnownBrowsers boolean
    If enabled, and if the IP-user mapping exists, then the Surrogate user identity is used for traffic from known browsers. If disabled, traffic from known browsers will always be challenged using the configured authentication mechanism and Surrogate user identity is ignored

    • Default value: false
    ipEnforcedForKnownBrowsersVariable string
    Variable name
    name string
    nameVariable string
    Variable name
    ofwEnabled boolean
    Enforces firewall at the location

    • Default value: false
    ofwEnabledVariable string
    Variable name
    refreshTime number
    Length of time that surrogate user identity can be used for traffic from known browsers before it must refresh and re-validate the surrogate user identity, Attribute conditional on ipEnforcedForKnownBrowsers equal to true

    • At Least: 1
    • Default value: 1
    refreshTimeUnit string
    Refresh Time display unit, Attribute conditional on ipEnforcedForKnownBrowsers equal to true

    • Choices: MINUTE, HOUR, DAY
    • Default value: MINUTE
    refreshTimeUnitVariable string
    Variable name, Attribute conditional on ipEnforcedForKnownBrowsers equal to true
    refreshTimeVariable string
    Variable name, Attribute conditional on ipEnforcedForKnownBrowsers equal to true
    serviceVpnVariable string
    Variable name
    serviceVpns string[]
    surrogateIp boolean
    Enable Surrogate IP. Maps users to device IP addresses. This is used to enforce user policies on cookie-compatible traffic., Attribute conditional on authRequired equal to true

    • Default value: false
    surrogateIpVariable string
    Variable name, Attribute conditional on authRequired equal to true
    upBandwidth number
    , Attribute conditional on enforceBandwidthControl equal to override

    • Range: 0.1-99999
    upBandwidthVariable string
    Variable name, Attribute conditional on enforceBandwidthControl equal to override
    aup_enabled bool
    Displays an Acceptable Use Policy for unauthenticated traffic and require users to accept it

    • Default value: false
    aup_enabled_variable str
    Variable name
    aup_timeout int
    How frequently in days the Acceptable Use Policy is displayed to users, Attribute conditional on aupEnabled equal to true

    • Range: 1-180
    • Default value: 1
    aup_timeout_variable str
    Variable name, Attribute conditional on aupEnabled equal to true
    auth_required bool
    Enable Enforce Authentication to require users from this location to authenticate to the service.

    • Default value: false
    auth_required_variable str
    Variable name
    block_internet_until_accepted bool
    Disable all access to the internet, including non-HTTP traffic, until the user accepts the Acceptable Use Policy, Attribute conditional on aupEnabled equal to true

    • Default value: false
    block_internet_until_accepted_variable str
    Variable name, Attribute conditional on aupEnabled equal to true
    caution_enabled bool
    Enforces a caution policy action and display an end user notification for unauthenticated traffic. If disabled, the action is treated as an allow policy.

    • Default value: false
    caution_enabled_variable str
    Variable name
    display_time_unit str
    Display time unit for Idle Time to Disassociation, Attribute conditional on surrogateIp equal to true

    • Choices: MINUTE, HOUR, DAY
    • Default value: MINUTE
    display_time_unit_variable str
    Variable name, Attribute conditional on surrogateIp equal to true
    dn_bandwidth float
    , Attribute conditional on enforceBandwidthControl equal to override

    • Range: 0.1-99999
    dn_bandwidth_variable str
    Variable name, Attribute conditional on enforceBandwidthControl equal to override
    enforce_bandwidth_control str
    Enforce Bandwidth Control for sub location

    • Choices: location-bandwidth, override, disabled
    • Default value: location-bandwidth
    enforce_bandwidth_control_variable str
    Variable name
    force_ssl_inspection bool
    Enable to make SSL Interception enforce an Acceptable Use Policy for HTTPS traffic, Attribute conditional on aupEnabled equal to true

    • Default value: false
    force_ssl_inspection_variable str
    Variable name, Attribute conditional on aupEnabled equal to true
    idle_time int
    Idle time to disassociation. How long after a completed transaction the service retains the IP address to user mapping., Attribute conditional on surrogateIp equal to true

    • At Least: 1
    • Default value: 1
    idle_time_variable str
    Variable name, Attribute conditional on surrogateIp equal to true
    internal_ips Sequence[SseZscalerFeatureSubLocationInternalIp]
    ip_enforced_for_known_browsers bool
    If enabled, and if the IP-user mapping exists, then the Surrogate user identity is used for traffic from known browsers. If disabled, traffic from known browsers will always be challenged using the configured authentication mechanism and Surrogate user identity is ignored

    • Default value: false
    ip_enforced_for_known_browsers_variable str
    Variable name
    name str
    name_variable str
    Variable name
    ofw_enabled bool
    Enforces firewall at the location

    • Default value: false
    ofw_enabled_variable str
    Variable name
    refresh_time int
    Length of time that surrogate user identity can be used for traffic from known browsers before it must refresh and re-validate the surrogate user identity, Attribute conditional on ipEnforcedForKnownBrowsers equal to true

    • At Least: 1
    • Default value: 1
    refresh_time_unit str
    Refresh Time display unit, Attribute conditional on ipEnforcedForKnownBrowsers equal to true

    • Choices: MINUTE, HOUR, DAY
    • Default value: MINUTE
    refresh_time_unit_variable str
    Variable name, Attribute conditional on ipEnforcedForKnownBrowsers equal to true
    refresh_time_variable str
    Variable name, Attribute conditional on ipEnforcedForKnownBrowsers equal to true
    service_vpn_variable str
    Variable name
    service_vpns Sequence[str]
    surrogate_ip bool
    Enable Surrogate IP. Maps users to device IP addresses. This is used to enforce user policies on cookie-compatible traffic., Attribute conditional on authRequired equal to true

    • Default value: false
    surrogate_ip_variable str
    Variable name, Attribute conditional on authRequired equal to true
    up_bandwidth float
    , Attribute conditional on enforceBandwidthControl equal to override

    • Range: 0.1-99999
    up_bandwidth_variable str
    Variable name, Attribute conditional on enforceBandwidthControl equal to override
    aupEnabled Boolean
    Displays an Acceptable Use Policy for unauthenticated traffic and require users to accept it

    • Default value: false
    aupEnabledVariable String
    Variable name
    aupTimeout Number
    How frequently in days the Acceptable Use Policy is displayed to users, Attribute conditional on aupEnabled equal to true

    • Range: 1-180
    • Default value: 1
    aupTimeoutVariable String
    Variable name, Attribute conditional on aupEnabled equal to true
    authRequired Boolean
    Enable Enforce Authentication to require users from this location to authenticate to the service.

    • Default value: false
    authRequiredVariable String
    Variable name
    blockInternetUntilAccepted Boolean
    Disable all access to the internet, including non-HTTP traffic, until the user accepts the Acceptable Use Policy, Attribute conditional on aupEnabled equal to true

    • Default value: false
    blockInternetUntilAcceptedVariable String
    Variable name, Attribute conditional on aupEnabled equal to true
    cautionEnabled Boolean
    Enforces a caution policy action and display an end user notification for unauthenticated traffic. If disabled, the action is treated as an allow policy.

    • Default value: false
    cautionEnabledVariable String
    Variable name
    displayTimeUnit String
    Display time unit for Idle Time to Disassociation, Attribute conditional on surrogateIp equal to true

    • Choices: MINUTE, HOUR, DAY
    • Default value: MINUTE
    displayTimeUnitVariable String
    Variable name, Attribute conditional on surrogateIp equal to true
    dnBandwidth Number
    , Attribute conditional on enforceBandwidthControl equal to override

    • Range: 0.1-99999
    dnBandwidthVariable String
    Variable name, Attribute conditional on enforceBandwidthControl equal to override
    enforceBandwidthControl String
    Enforce Bandwidth Control for sub location

    • Choices: location-bandwidth, override, disabled
    • Default value: location-bandwidth
    enforceBandwidthControlVariable String
    Variable name
    forceSslInspection Boolean
    Enable to make SSL Interception enforce an Acceptable Use Policy for HTTPS traffic, Attribute conditional on aupEnabled equal to true

    • Default value: false
    forceSslInspectionVariable String
    Variable name, Attribute conditional on aupEnabled equal to true
    idleTime Number
    Idle time to disassociation. How long after a completed transaction the service retains the IP address to user mapping., Attribute conditional on surrogateIp equal to true

    • At Least: 1
    • Default value: 1
    idleTimeVariable String
    Variable name, Attribute conditional on surrogateIp equal to true
    internalIps List<Property Map>
    ipEnforcedForKnownBrowsers Boolean
    If enabled, and if the IP-user mapping exists, then the Surrogate user identity is used for traffic from known browsers. If disabled, traffic from known browsers will always be challenged using the configured authentication mechanism and Surrogate user identity is ignored

    • Default value: false
    ipEnforcedForKnownBrowsersVariable String
    Variable name
    name String
    nameVariable String
    Variable name
    ofwEnabled Boolean
    Enforces firewall at the location

    • Default value: false
    ofwEnabledVariable String
    Variable name
    refreshTime Number
    Length of time that surrogate user identity can be used for traffic from known browsers before it must refresh and re-validate the surrogate user identity, Attribute conditional on ipEnforcedForKnownBrowsers equal to true

    • At Least: 1
    • Default value: 1
    refreshTimeUnit String
    Refresh Time display unit, Attribute conditional on ipEnforcedForKnownBrowsers equal to true

    • Choices: MINUTE, HOUR, DAY
    • Default value: MINUTE
    refreshTimeUnitVariable String
    Variable name, Attribute conditional on ipEnforcedForKnownBrowsers equal to true
    refreshTimeVariable String
    Variable name, Attribute conditional on ipEnforcedForKnownBrowsers equal to true
    serviceVpnVariable String
    Variable name
    serviceVpns List<String>
    surrogateIp Boolean
    Enable Surrogate IP. Maps users to device IP addresses. This is used to enforce user policies on cookie-compatible traffic., Attribute conditional on authRequired equal to true

    • Default value: false
    surrogateIpVariable String
    Variable name, Attribute conditional on authRequired equal to true
    upBandwidth Number
    , Attribute conditional on enforceBandwidthControl equal to override

    • Range: 0.1-99999
    upBandwidthVariable String
    Variable name, Attribute conditional on enforceBandwidthControl equal to override

    SseZscalerFeatureSubLocationInternalIp, SseZscalerFeatureSubLocationInternalIpArgs

    InternalIpValue string
    InternalIpValueVariable string
    Variable name
    InternalIpValue string
    InternalIpValueVariable string
    Variable name
    internalIpValue String
    internalIpValueVariable String
    Variable name
    internalIpValue string
    internalIpValueVariable string
    Variable name
    internalIpValue String
    internalIpValueVariable String
    Variable name

    SseZscalerFeatureTracker, SseZscalerFeatureTrackerArgs

    EndpointApiUrl string
    API url of endpoint
    EndpointApiUrlVariable string
    Variable name
    Interval int
    Probe interval <10..600> seconds

    • Range: 20-600
    • Default value: 30
    IntervalVariable string
    Variable name
    Multiplier int
    Probe failure multiplier <1..10> failed attempts

    • Range: 1-10
    • Default value: 2
    MultiplierVariable string
    Variable name
    Name string
    Tracker name
    Threshold int
    Probe Timeout threshold <100..1000> milliseconds

    • Range: 100-1000
    • Default value: 1000
    ThresholdVariable string
    Variable name
    EndpointApiUrl string
    API url of endpoint
    EndpointApiUrlVariable string
    Variable name
    Interval int
    Probe interval <10..600> seconds

    • Range: 20-600
    • Default value: 30
    IntervalVariable string
    Variable name
    Multiplier int
    Probe failure multiplier <1..10> failed attempts

    • Range: 1-10
    • Default value: 2
    MultiplierVariable string
    Variable name
    Name string
    Tracker name
    Threshold int
    Probe Timeout threshold <100..1000> milliseconds

    • Range: 100-1000
    • Default value: 1000
    ThresholdVariable string
    Variable name
    endpoint_api_url string
    API url of endpoint
    endpoint_api_url_variable string
    Variable name
    interval number
    Probe interval <10..600> seconds

    • Range: 20-600
    • Default value: 30
    interval_variable string
    Variable name
    multiplier number
    Probe failure multiplier <1..10> failed attempts

    • Range: 1-10
    • Default value: 2
    multiplier_variable string
    Variable name
    name string
    Tracker name
    threshold number
    Probe Timeout threshold <100..1000> milliseconds

    • Range: 100-1000
    • Default value: 1000
    threshold_variable string
    Variable name
    endpointApiUrl String
    API url of endpoint
    endpointApiUrlVariable String
    Variable name
    interval Integer
    Probe interval <10..600> seconds

    • Range: 20-600
    • Default value: 30
    intervalVariable String
    Variable name
    multiplier Integer
    Probe failure multiplier <1..10> failed attempts

    • Range: 1-10
    • Default value: 2
    multiplierVariable String
    Variable name
    name String
    Tracker name
    threshold Integer
    Probe Timeout threshold <100..1000> milliseconds

    • Range: 100-1000
    • Default value: 1000
    thresholdVariable String
    Variable name
    endpointApiUrl string
    API url of endpoint
    endpointApiUrlVariable string
    Variable name
    interval number
    Probe interval <10..600> seconds

    • Range: 20-600
    • Default value: 30
    intervalVariable string
    Variable name
    multiplier number
    Probe failure multiplier <1..10> failed attempts

    • Range: 1-10
    • Default value: 2
    multiplierVariable string
    Variable name
    name string
    Tracker name
    threshold number
    Probe Timeout threshold <100..1000> milliseconds

    • Range: 100-1000
    • Default value: 1000
    thresholdVariable string
    Variable name
    endpoint_api_url str
    API url of endpoint
    endpoint_api_url_variable str
    Variable name
    interval int
    Probe interval <10..600> seconds

    • Range: 20-600
    • Default value: 30
    interval_variable str
    Variable name
    multiplier int
    Probe failure multiplier <1..10> failed attempts

    • Range: 1-10
    • Default value: 2
    multiplier_variable str
    Variable name
    name str
    Tracker name
    threshold int
    Probe Timeout threshold <100..1000> milliseconds

    • Range: 100-1000
    • Default value: 1000
    threshold_variable str
    Variable name
    endpointApiUrl String
    API url of endpoint
    endpointApiUrlVariable String
    Variable name
    interval Number
    Probe interval <10..600> seconds

    • Range: 20-600
    • Default value: 30
    intervalVariable String
    Variable name
    multiplier Number
    Probe failure multiplier <1..10> failed attempts

    • Range: 1-10
    • Default value: 2
    multiplierVariable String
    Variable name
    name String
    Tracker name
    threshold Number
    Probe Timeout threshold <100..1000> milliseconds

    • Range: 100-1000
    • Default value: 1000
    thresholdVariable String
    Variable name

    Import

    The pulumi import command can be used, for example:

    Expected import identifier with the format: “sse_zscaler_feature_id,feature_profile_id”

    $ pulumi import sdwan:index/sseZscalerFeature:SseZscalerFeature example "f6b2c44c-693c-4763-b010-895aa3d236bd,f6dd22c8-0b4f-496c-9a0b-6813d1f8b8ac"

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    sdwan pulumi/pulumi-sdwan
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the sdwan Terraform Provider.
    sdwan logo
    Viewing docs for Cisco Catalyst SD-WAN v0.9.1
    published on Friday, Jun 26, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-sdwan

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial