Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi IDP Pulumi Cloud Packages Tutorials
  1. Packages
  2. Zscaler Internet Access (ZIA)
  3. API Docs
  4. AdvancedThreatSettings
Zscaler Internet Access v1.0.1 published on Friday, Jun 6, 2025 by Zscaler
zscaler/pulumi-zia

zia.AdvancedThreatSettings

Explore with Pulumi AI

zia logo
Zscaler Internet Access v1.0.1 published on Friday, Jun 6, 2025 by Zscaler
zscaler/pulumi-zia

    The zia_advanced_threat_settings resource allows you to update the advanced threat configuration settings. To learn more see Configuring Advanced Settings

    Example Usage

    resource "zia_advanced_threat_settings" "this" {
  risk_tolerance                           = 80
  risk_tolerance_capture                   = false
  cmd_ctl_server_blocked                   = true
  cmd_ctl_server_capture                   = false
  cmd_ctl_traffic_blocked                  = true
  cmd_ctl_traffic_capture                  = false
  malware_sites_blocked                    = true
  malware_sites_capture                    = false
  activex_blocked                          = true
  activex_capture                          = false
  browser_exploits_blocked                 = true
  browser_exploits_capture                 = false
  file_format_vunerabilites_blocked        = true
  file_format_vunerabilites_capture        = false
  known_phishing_sites_blocked             = true
  known_phishing_sites_capture             = false
  suspected_phishing_sites_blocked         = true
  suspected_phishing_sites_capture         = false
  suspect_adware_spyware_sites_blocked     = true
  suspect_adware_spyware_sites_capture     = false
  web_spam_blocked                         = true
  web_spam_capture                         = false
  irc_tunnelling_blocked                   = true
  irc_tunnelling_capture                   = false
  anonymizer_blocked                       = true
  anonymizer_capture                       = false
  cookie_stealing_blocked                  = true
  cookie_stealing_pcap_enabled             = false
  potential_malicious_requests_blocked     = true
  potential_malicious_requests_capture     = false
  blocked_countries                        = ["BR","US", "CN", "RU"]
  block_countries_capture                  = false
  bit_torrent_blocked                      = true
  bit_torrent_capture                      = false
  tor_blocked                              = true
  tor_capture                              = false
  google_talk_blocked                      = true
  google_talk_capture                      = false
  ssh_tunnelling_blocked                   = true
  ssh_tunnelling_capture                   = false
  crypto_mining_blocked                    = true
  crypto_mining_capture                    = false
  ad_spyware_sites_blocked                 = true
  ad_spyware_sites_capture                 = false
  dga_domains_blocked                      = true
  dga_domains_capture                      = false
  alert_for_unknown_suspicious_c2_traffic  = false
  malicious_urls_capture                   = false
}

    Create AdvancedThreatSettings Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new AdvancedThreatSettings(name: string, args?: AdvancedThreatSettingsArgs, opts?: CustomResourceOptions);
    @overload
def AdvancedThreatSettings(resource_name: str,
                           args: Optional[AdvancedThreatSettingsArgs] = None,
                           opts: Optional[ResourceOptions] = None)

@overload
def AdvancedThreatSettings(resource_name: str,
                           opts: Optional[ResourceOptions] = None,
                           activex_blocked: Optional[bool] = None,
                           activex_capture: Optional[bool] = None,
                           ad_spyware_sites_blocked: Optional[bool] = None,
                           ad_spyware_sites_capture: Optional[bool] = None,
                           alert_for_unknown_suspicious_c2_traffic: Optional[bool] = None,
                           anonymizer_blocked: Optional[bool] = None,
                           anonymizer_capture: Optional[bool] = None,
                           bit_torrent_blocked: Optional[bool] = None,
                           bit_torrent_capture: Optional[bool] = None,
                           block_countries_capture: Optional[bool] = None,
                           blocked_countries: Optional[Sequence[str]] = None,
                           browser_exploits_blocked: Optional[bool] = None,
                           browser_exploits_capture: Optional[bool] = None,
                           cmd_ctl_server_blocked: Optional[bool] = None,
                           cmd_ctl_server_capture: Optional[bool] = None,
                           cmd_ctl_traffic_blocked: Optional[bool] = None,
                           cmd_ctl_traffic_capture: Optional[bool] = None,
                           cookie_stealing_blocked: Optional[bool] = None,
                           cookie_stealing_pcap_enabled: Optional[bool] = None,
                           crypto_mining_blocked: Optional[bool] = None,
                           crypto_mining_capture: Optional[bool] = None,
                           dga_domains_blocked: Optional[bool] = None,
                           dga_domains_capture: Optional[bool] = None,
                           file_format_vunerabilites_blocked: Optional[bool] = None,
                           file_format_vunerabilites_capture: Optional[bool] = None,
                           google_talk_blocked: Optional[bool] = None,
                           google_talk_capture: Optional[bool] = None,
                           irc_tunnelling_blocked: Optional[bool] = None,
                           irc_tunnelling_capture: Optional[bool] = None,
                           known_phishing_sites_blocked: Optional[bool] = None,
                           known_phishing_sites_capture: Optional[bool] = None,
                           malicious_urls_capture: Optional[bool] = None,
                           malware_sites_blocked: Optional[bool] = None,
                           malware_sites_capture: Optional[bool] = None,
                           potential_malicious_requests_blocked: Optional[bool] = None,
                           potential_malicious_requests_capture: Optional[bool] = None,
                           risk_tolerance: Optional[int] = None,
                           risk_tolerance_capture: Optional[bool] = None,
                           ssh_tunnelling_blocked: Optional[bool] = None,
                           ssh_tunnelling_capture: Optional[bool] = None,
                           suspect_adware_spyware_sites_blocked: Optional[bool] = None,
                           suspect_adware_spyware_sites_capture: Optional[bool] = None,
                           suspected_phishing_sites_blocked: Optional[bool] = None,
                           suspected_phishing_sites_capture: Optional[bool] = None,
                           tor_blocked: Optional[bool] = None,
                           tor_capture: Optional[bool] = None,
                           web_spam_blocked: Optional[bool] = None,
                           web_spam_capture: Optional[bool] = None)
    func NewAdvancedThreatSettings(ctx *Context, name string, args *AdvancedThreatSettingsArgs, opts ...ResourceOption) (*AdvancedThreatSettings, error)
    public AdvancedThreatSettings(string name, AdvancedThreatSettingsArgs? args = null, CustomResourceOptions? opts = null)
    public AdvancedThreatSettings(String name, AdvancedThreatSettingsArgs args)
public AdvancedThreatSettings(String name, AdvancedThreatSettingsArgs args, CustomResourceOptions options)

    type: zia:AdvancedThreatSettings
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args AdvancedThreatSettingsArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args AdvancedThreatSettingsArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args AdvancedThreatSettingsArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args AdvancedThreatSettingsArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args AdvancedThreatSettingsArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var advancedThreatSettingsResource = new Zia.AdvancedThreatSettings("advancedThreatSettingsResource", new()
{
    ActivexBlocked = false,
    ActivexCapture = false,
    AdSpywareSitesBlocked = false,
    AdSpywareSitesCapture = false,
    AlertForUnknownSuspiciousC2Traffic = false,
    AnonymizerBlocked = false,
    AnonymizerCapture = false,
    BitTorrentBlocked = false,
    BitTorrentCapture = false,
    BlockCountriesCapture = false,
    BlockedCountries = new[]
    {
        "string",
    },
    BrowserExploitsBlocked = false,
    BrowserExploitsCapture = false,
    CmdCtlServerBlocked = false,
    CmdCtlServerCapture = false,
    CmdCtlTrafficBlocked = false,
    CmdCtlTrafficCapture = false,
    CookieStealingBlocked = false,
    CookieStealingPcapEnabled = false,
    CryptoMiningBlocked = false,
    CryptoMiningCapture = false,
    DgaDomainsBlocked = false,
    DgaDomainsCapture = false,
    FileFormatVunerabilitesBlocked = false,
    FileFormatVunerabilitesCapture = false,
    GoogleTalkBlocked = false,
    GoogleTalkCapture = false,
    IrcTunnellingBlocked = false,
    IrcTunnellingCapture = false,
    KnownPhishingSitesBlocked = false,
    KnownPhishingSitesCapture = false,
    MaliciousUrlsCapture = false,
    MalwareSitesBlocked = false,
    MalwareSitesCapture = false,
    PotentialMaliciousRequestsBlocked = false,
    PotentialMaliciousRequestsCapture = false,
    RiskTolerance = 0,
    RiskToleranceCapture = false,
    SshTunnellingBlocked = false,
    SshTunnellingCapture = false,
    SuspectAdwareSpywareSitesBlocked = false,
    SuspectAdwareSpywareSitesCapture = false,
    SuspectedPhishingSitesBlocked = false,
    SuspectedPhishingSitesCapture = false,
    TorBlocked = false,
    TorCapture = false,
    WebSpamBlocked = false,
    WebSpamCapture = false,
});

    example, err := zia.NewAdvancedThreatSettings(ctx, "advancedThreatSettingsResource", &zia.AdvancedThreatSettingsArgs{
	ActivexBlocked:                     pulumi.Bool(false),
	ActivexCapture:                     pulumi.Bool(false),
	AdSpywareSitesBlocked:              pulumi.Bool(false),
	AdSpywareSitesCapture:              pulumi.Bool(false),
	AlertForUnknownSuspiciousC2Traffic: pulumi.Bool(false),
	AnonymizerBlocked:                  pulumi.Bool(false),
	AnonymizerCapture:                  pulumi.Bool(false),
	BitTorrentBlocked:                  pulumi.Bool(false),
	BitTorrentCapture:                  pulumi.Bool(false),
	BlockCountriesCapture:              pulumi.Bool(false),
	BlockedCountries: pulumi.StringArray{
		pulumi.String("string"),
	},
	BrowserExploitsBlocked:            pulumi.Bool(false),
	BrowserExploitsCapture:            pulumi.Bool(false),
	CmdCtlServerBlocked:               pulumi.Bool(false),
	CmdCtlServerCapture:               pulumi.Bool(false),
	CmdCtlTrafficBlocked:              pulumi.Bool(false),
	CmdCtlTrafficCapture:              pulumi.Bool(false),
	CookieStealingBlocked:             pulumi.Bool(false),
	CookieStealingPcapEnabled:         pulumi.Bool(false),
	CryptoMiningBlocked:               pulumi.Bool(false),
	CryptoMiningCapture:               pulumi.Bool(false),
	DgaDomainsBlocked:                 pulumi.Bool(false),
	DgaDomainsCapture:                 pulumi.Bool(false),
	FileFormatVunerabilitesBlocked:    pulumi.Bool(false),
	FileFormatVunerabilitesCapture:    pulumi.Bool(false),
	GoogleTalkBlocked:                 pulumi.Bool(false),
	GoogleTalkCapture:                 pulumi.Bool(false),
	IrcTunnellingBlocked:              pulumi.Bool(false),
	IrcTunnellingCapture:              pulumi.Bool(false),
	KnownPhishingSitesBlocked:         pulumi.Bool(false),
	KnownPhishingSitesCapture:         pulumi.Bool(false),
	MaliciousUrlsCapture:              pulumi.Bool(false),
	MalwareSitesBlocked:               pulumi.Bool(false),
	MalwareSitesCapture:               pulumi.Bool(false),
	PotentialMaliciousRequestsBlocked: pulumi.Bool(false),
	PotentialMaliciousRequestsCapture: pulumi.Bool(false),
	RiskTolerance:                     pulumi.Int(0),
	RiskToleranceCapture:              pulumi.Bool(false),
	SshTunnellingBlocked:              pulumi.Bool(false),
	SshTunnellingCapture:              pulumi.Bool(false),
	SuspectAdwareSpywareSitesBlocked:  pulumi.Bool(false),
	SuspectAdwareSpywareSitesCapture:  pulumi.Bool(false),
	SuspectedPhishingSitesBlocked:     pulumi.Bool(false),
	SuspectedPhishingSitesCapture:     pulumi.Bool(false),
	TorBlocked:                        pulumi.Bool(false),
	TorCapture:                        pulumi.Bool(false),
	WebSpamBlocked:                    pulumi.Bool(false),
	WebSpamCapture:                    pulumi.Bool(false),
})

    var advancedThreatSettingsResource = new AdvancedThreatSettings("advancedThreatSettingsResource", AdvancedThreatSettingsArgs.builder()
    .activexBlocked(false)
    .activexCapture(false)
    .adSpywareSitesBlocked(false)
    .adSpywareSitesCapture(false)
    .alertForUnknownSuspiciousC2Traffic(false)
    .anonymizerBlocked(false)
    .anonymizerCapture(false)
    .bitTorrentBlocked(false)
    .bitTorrentCapture(false)
    .blockCountriesCapture(false)
    .blockedCountries("string")
    .browserExploitsBlocked(false)
    .browserExploitsCapture(false)
    .cmdCtlServerBlocked(false)
    .cmdCtlServerCapture(false)
    .cmdCtlTrafficBlocked(false)
    .cmdCtlTrafficCapture(false)
    .cookieStealingBlocked(false)
    .cookieStealingPcapEnabled(false)
    .cryptoMiningBlocked(false)
    .cryptoMiningCapture(false)
    .dgaDomainsBlocked(false)
    .dgaDomainsCapture(false)
    .fileFormatVunerabilitesBlocked(false)
    .fileFormatVunerabilitesCapture(false)
    .googleTalkBlocked(false)
    .googleTalkCapture(false)
    .ircTunnellingBlocked(false)
    .ircTunnellingCapture(false)
    .knownPhishingSitesBlocked(false)
    .knownPhishingSitesCapture(false)
    .maliciousUrlsCapture(false)
    .malwareSitesBlocked(false)
    .malwareSitesCapture(false)
    .potentialMaliciousRequestsBlocked(false)
    .potentialMaliciousRequestsCapture(false)
    .riskTolerance(0)
    .riskToleranceCapture(false)
    .sshTunnellingBlocked(false)
    .sshTunnellingCapture(false)
    .suspectAdwareSpywareSitesBlocked(false)
    .suspectAdwareSpywareSitesCapture(false)
    .suspectedPhishingSitesBlocked(false)
    .suspectedPhishingSitesCapture(false)
    .torBlocked(false)
    .torCapture(false)
    .webSpamBlocked(false)
    .webSpamCapture(false)
    .build());

    advanced_threat_settings_resource = zia.AdvancedThreatSettings("advancedThreatSettingsResource",
    activex_blocked=False,
    activex_capture=False,
    ad_spyware_sites_blocked=False,
    ad_spyware_sites_capture=False,
    alert_for_unknown_suspicious_c2_traffic=False,
    anonymizer_blocked=False,
    anonymizer_capture=False,
    bit_torrent_blocked=False,
    bit_torrent_capture=False,
    block_countries_capture=False,
    blocked_countries=["string"],
    browser_exploits_blocked=False,
    browser_exploits_capture=False,
    cmd_ctl_server_blocked=False,
    cmd_ctl_server_capture=False,
    cmd_ctl_traffic_blocked=False,
    cmd_ctl_traffic_capture=False,
    cookie_stealing_blocked=False,
    cookie_stealing_pcap_enabled=False,
    crypto_mining_blocked=False,
    crypto_mining_capture=False,
    dga_domains_blocked=False,
    dga_domains_capture=False,
    file_format_vunerabilites_blocked=False,
    file_format_vunerabilites_capture=False,
    google_talk_blocked=False,
    google_talk_capture=False,
    irc_tunnelling_blocked=False,
    irc_tunnelling_capture=False,
    known_phishing_sites_blocked=False,
    known_phishing_sites_capture=False,
    malicious_urls_capture=False,
    malware_sites_blocked=False,
    malware_sites_capture=False,
    potential_malicious_requests_blocked=False,
    potential_malicious_requests_capture=False,
    risk_tolerance=0,
    risk_tolerance_capture=False,
    ssh_tunnelling_blocked=False,
    ssh_tunnelling_capture=False,
    suspect_adware_spyware_sites_blocked=False,
    suspect_adware_spyware_sites_capture=False,
    suspected_phishing_sites_blocked=False,
    suspected_phishing_sites_capture=False,
    tor_blocked=False,
    tor_capture=False,
    web_spam_blocked=False,
    web_spam_capture=False)

    const advancedThreatSettingsResource = new zia.AdvancedThreatSettings("advancedThreatSettingsResource", {
    activexBlocked: false,
    activexCapture: false,
    adSpywareSitesBlocked: false,
    adSpywareSitesCapture: false,
    alertForUnknownSuspiciousC2Traffic: false,
    anonymizerBlocked: false,
    anonymizerCapture: false,
    bitTorrentBlocked: false,
    bitTorrentCapture: false,
    blockCountriesCapture: false,
    blockedCountries: ["string"],
    browserExploitsBlocked: false,
    browserExploitsCapture: false,
    cmdCtlServerBlocked: false,
    cmdCtlServerCapture: false,
    cmdCtlTrafficBlocked: false,
    cmdCtlTrafficCapture: false,
    cookieStealingBlocked: false,
    cookieStealingPcapEnabled: false,
    cryptoMiningBlocked: false,
    cryptoMiningCapture: false,
    dgaDomainsBlocked: false,
    dgaDomainsCapture: false,
    fileFormatVunerabilitesBlocked: false,
    fileFormatVunerabilitesCapture: false,
    googleTalkBlocked: false,
    googleTalkCapture: false,
    ircTunnellingBlocked: false,
    ircTunnellingCapture: false,
    knownPhishingSitesBlocked: false,
    knownPhishingSitesCapture: false,
    maliciousUrlsCapture: false,
    malwareSitesBlocked: false,
    malwareSitesCapture: false,
    potentialMaliciousRequestsBlocked: false,
    potentialMaliciousRequestsCapture: false,
    riskTolerance: 0,
    riskToleranceCapture: false,
    sshTunnellingBlocked: false,
    sshTunnellingCapture: false,
    suspectAdwareSpywareSitesBlocked: false,
    suspectAdwareSpywareSitesCapture: false,
    suspectedPhishingSitesBlocked: false,
    suspectedPhishingSitesCapture: false,
    torBlocked: false,
    torCapture: false,
    webSpamBlocked: false,
    webSpamCapture: false,
});

    type: zia:AdvancedThreatSettings
properties:
    activexBlocked: false
    activexCapture: false
    adSpywareSitesBlocked: false
    adSpywareSitesCapture: false
    alertForUnknownSuspiciousC2Traffic: false
    anonymizerBlocked: false
    anonymizerCapture: false
    bitTorrentBlocked: false
    bitTorrentCapture: false
    blockCountriesCapture: false
    blockedCountries:
        - string
    browserExploitsBlocked: false
    browserExploitsCapture: false
    cmdCtlServerBlocked: false
    cmdCtlServerCapture: false
    cmdCtlTrafficBlocked: false
    cmdCtlTrafficCapture: false
    cookieStealingBlocked: false
    cookieStealingPcapEnabled: false
    cryptoMiningBlocked: false
    cryptoMiningCapture: false
    dgaDomainsBlocked: false
    dgaDomainsCapture: false
    fileFormatVunerabilitesBlocked: false
    fileFormatVunerabilitesCapture: false
    googleTalkBlocked: false
    googleTalkCapture: false
    ircTunnellingBlocked: false
    ircTunnellingCapture: false
    knownPhishingSitesBlocked: false
    knownPhishingSitesCapture: false
    maliciousUrlsCapture: false
    malwareSitesBlocked: false
    malwareSitesCapture: false
    potentialMaliciousRequestsBlocked: false
    potentialMaliciousRequestsCapture: false
    riskTolerance: 0
    riskToleranceCapture: false
    sshTunnellingBlocked: false
    sshTunnellingCapture: false
    suspectAdwareSpywareSitesBlocked: false
    suspectAdwareSpywareSitesCapture: false
    suspectedPhishingSitesBlocked: false
    suspectedPhishingSitesCapture: false
    torBlocked: false
    torCapture: false
    webSpamBlocked: false
    webSpamCapture: false

    AdvancedThreatSettings Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The AdvancedThreatSettings resource accepts the following input properties:

    ActivexBlocked bool
    A Boolean value specifying whether sites are allowed or blocked from accessing vulnerable ActiveX controls that are known to have been exploited.
    ActivexCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for ActiveX controls
    AdSpywareSitesBlocked bool
    A Boolean value specifying whether to allow or block websites known to contain adware or spyware that displays malicious advertisements that can collect users' information without their knowledge
    AdSpywareSitesCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for adware and spyware sites
    AlertForUnknownSuspiciousC2Traffic bool
    A Boolean value specifying whether to send alerts upon detecting unknown or suspicious C2 traffic
    AnonymizerBlocked bool
    A Boolean value specifying whether to allow or block applications and methods used to obscure the destination and the content accessed by the user, therefore blocking traffic to anonymizing web proxies
    AnonymizerCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for anonymizers
    BitTorrentBlocked bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for blocked countries
    BitTorrentCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for BitTorrent
    BlockCountriesCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for blocked countries
    BlockedCountries List<string>
    Destination countries for which the rule is applicable. If not set, the rule is not restricted to specific destination countries.
    BrowserExploitsBlocked bool
    A Boolean value specifying whether known web browser vulnerabilities prone to exploitation are allowed or blocked.
    BrowserExploitsCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for browser exploits
    CmdCtlServerBlocked bool
    A Boolean value specifying whether connections to known Command & Control (C2) Servers are allowed or blocked
    CmdCtlServerCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for connections to known C2 servers
    CmdCtlTrafficBlocked bool
    A Boolean value specifying whether botnets are allowed or blocked from sending or receiving commands to unknown servers
    CmdCtlTrafficCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for botnets
    CookieStealingBlocked bool
    A Boolean value specifying whether to allow or block third-party websites that gather cookie information
    CookieStealingPcapEnabled bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for cookie stealing
    CryptoMiningBlocked bool
    A Boolean value specifying whether to allow or block cryptocurrency mining network traffic and script
    CryptoMiningCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for cryptomining
    DgaDomainsBlocked bool
    A Boolean value specifying whether to allow or block domains that are suspected to be generated using domain generation algorithms (DGA)
    DgaDomainsCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for DGA domains
    FileFormatVunerabilitesBlocked bool
    A Boolean value specifying whether known file format vulnerabilities and suspicious or malicious content in Microsoft Office or PDF documents are allowed or blocked
    FileFormatVunerabilitesCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for file format vulnerabilities
    GoogleTalkBlocked bool
    A Boolean value specifying whether to allow or block access to Google Hangouts, a popular P2P VoIP application.
    GoogleTalkCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for Google Hangouts
    IrcTunnellingBlocked bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for web spam
    IrcTunnellingCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for IRC tunnels
    KnownPhishingSitesBlocked bool
    A Boolean value specifying whether known phishing sites are allowed or blocked
    KnownPhishingSitesCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for known phishing sites
    MaliciousUrlsCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for malicious URLs
    MalwareSitesBlocked bool
    A Boolean value specifying whether known malicious sites and content are allowed or blocked
    MalwareSitesCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for malicious sites
    PotentialMaliciousRequestsBlocked bool
    A Boolean value specifying whether to allow or block this type of cross-site scripting (XSS)
    PotentialMaliciousRequestsCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for (XSS) attacks
    RiskTolerance int
    The Page Risk tolerance index set between 0 and 100 (100 being the highest risk).
    RiskToleranceCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for suspicious web pages
    SshTunnellingBlocked bool
    A Boolean value specifying whether to allow or block SSH traffic being tunneled over HTTP/Ss
    SshTunnellingCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for SSH tunnels
    SuspectAdwareSpywareSitesBlocked bool
    A Boolean value specifying whether to allow or block any detections of communication and callback traffic associated with spyware agents and data transmission
    SuspectAdwareSpywareSitesCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for suspected adware and spyware sites
    SuspectedPhishingSitesBlocked bool
    A Boolean value specifying whether to allow or block suspected phishing sites identified through heuristic detection.
    SuspectedPhishingSitesCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for suspected phishing sites
    TorBlocked bool
    A Boolean value specifying whether to allow or block the usage of Tor, a popular P2P anonymizer protocol with support for encryption.
    TorCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for Tor
    WebSpamBlocked bool
    A Boolean value specifying whether to allow or block web pages that pretend to contain useful information, to get higher ranking in search engine results or drive traffic to phishing, adware, or spyware distribution sites.
    WebSpamCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for web spam
    ActivexBlocked bool
    A Boolean value specifying whether sites are allowed or blocked from accessing vulnerable ActiveX controls that are known to have been exploited.
    ActivexCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for ActiveX controls
    AdSpywareSitesBlocked bool
    A Boolean value specifying whether to allow or block websites known to contain adware or spyware that displays malicious advertisements that can collect users' information without their knowledge
    AdSpywareSitesCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for adware and spyware sites
    AlertForUnknownSuspiciousC2Traffic bool
    A Boolean value specifying whether to send alerts upon detecting unknown or suspicious C2 traffic
    AnonymizerBlocked bool
    A Boolean value specifying whether to allow or block applications and methods used to obscure the destination and the content accessed by the user, therefore blocking traffic to anonymizing web proxies
    AnonymizerCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for anonymizers
    BitTorrentBlocked bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for blocked countries
    BitTorrentCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for BitTorrent
    BlockCountriesCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for blocked countries
    BlockedCountries []string
    Destination countries for which the rule is applicable. If not set, the rule is not restricted to specific destination countries.
    BrowserExploitsBlocked bool
    A Boolean value specifying whether known web browser vulnerabilities prone to exploitation are allowed or blocked.
    BrowserExploitsCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for browser exploits
    CmdCtlServerBlocked bool
    A Boolean value specifying whether connections to known Command & Control (C2) Servers are allowed or blocked
    CmdCtlServerCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for connections to known C2 servers
    CmdCtlTrafficBlocked bool
    A Boolean value specifying whether botnets are allowed or blocked from sending or receiving commands to unknown servers
    CmdCtlTrafficCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for botnets
    CookieStealingBlocked bool
    A Boolean value specifying whether to allow or block third-party websites that gather cookie information
    CookieStealingPcapEnabled bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for cookie stealing
    CryptoMiningBlocked bool
    A Boolean value specifying whether to allow or block cryptocurrency mining network traffic and script
    CryptoMiningCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for cryptomining
    DgaDomainsBlocked bool
    A Boolean value specifying whether to allow or block domains that are suspected to be generated using domain generation algorithms (DGA)
    DgaDomainsCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for DGA domains
    FileFormatVunerabilitesBlocked bool
    A Boolean value specifying whether known file format vulnerabilities and suspicious or malicious content in Microsoft Office or PDF documents are allowed or blocked
    FileFormatVunerabilitesCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for file format vulnerabilities
    GoogleTalkBlocked bool
    A Boolean value specifying whether to allow or block access to Google Hangouts, a popular P2P VoIP application.
    GoogleTalkCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for Google Hangouts
    IrcTunnellingBlocked bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for web spam
    IrcTunnellingCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for IRC tunnels
    KnownPhishingSitesBlocked bool
    A Boolean value specifying whether known phishing sites are allowed or blocked
    KnownPhishingSitesCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for known phishing sites
    MaliciousUrlsCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for malicious URLs
    MalwareSitesBlocked bool
    A Boolean value specifying whether known malicious sites and content are allowed or blocked
    MalwareSitesCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for malicious sites
    PotentialMaliciousRequestsBlocked bool
    A Boolean value specifying whether to allow or block this type of cross-site scripting (XSS)
    PotentialMaliciousRequestsCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for (XSS) attacks
    RiskTolerance int
    The Page Risk tolerance index set between 0 and 100 (100 being the highest risk).
    RiskToleranceCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for suspicious web pages
    SshTunnellingBlocked bool
    A Boolean value specifying whether to allow or block SSH traffic being tunneled over HTTP/Ss
    SshTunnellingCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for SSH tunnels
    SuspectAdwareSpywareSitesBlocked bool
    A Boolean value specifying whether to allow or block any detections of communication and callback traffic associated with spyware agents and data transmission
    SuspectAdwareSpywareSitesCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for suspected adware and spyware sites
    SuspectedPhishingSitesBlocked bool
    A Boolean value specifying whether to allow or block suspected phishing sites identified through heuristic detection.
    SuspectedPhishingSitesCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for suspected phishing sites
    TorBlocked bool
    A Boolean value specifying whether to allow or block the usage of Tor, a popular P2P anonymizer protocol with support for encryption.
    TorCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for Tor
    WebSpamBlocked bool
    A Boolean value specifying whether to allow or block web pages that pretend to contain useful information, to get higher ranking in search engine results or drive traffic to phishing, adware, or spyware distribution sites.
    WebSpamCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for web spam
    activexBlocked Boolean
    A Boolean value specifying whether sites are allowed or blocked from accessing vulnerable ActiveX controls that are known to have been exploited.
    activexCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for ActiveX controls
    adSpywareSitesBlocked Boolean
    A Boolean value specifying whether to allow or block websites known to contain adware or spyware that displays malicious advertisements that can collect users' information without their knowledge
    adSpywareSitesCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for adware and spyware sites
    alertForUnknownSuspiciousC2Traffic Boolean
    A Boolean value specifying whether to send alerts upon detecting unknown or suspicious C2 traffic
    anonymizerBlocked Boolean
    A Boolean value specifying whether to allow or block applications and methods used to obscure the destination and the content accessed by the user, therefore blocking traffic to anonymizing web proxies
    anonymizerCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for anonymizers
    bitTorrentBlocked Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for blocked countries
    bitTorrentCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for BitTorrent
    blockCountriesCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for blocked countries
    blockedCountries List<String>
    Destination countries for which the rule is applicable. If not set, the rule is not restricted to specific destination countries.
    browserExploitsBlocked Boolean
    A Boolean value specifying whether known web browser vulnerabilities prone to exploitation are allowed or blocked.
    browserExploitsCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for browser exploits
    cmdCtlServerBlocked Boolean
    A Boolean value specifying whether connections to known Command & Control (C2) Servers are allowed or blocked
    cmdCtlServerCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for connections to known C2 servers
    cmdCtlTrafficBlocked Boolean
    A Boolean value specifying whether botnets are allowed or blocked from sending or receiving commands to unknown servers
    cmdCtlTrafficCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for botnets
    cookieStealingBlocked Boolean
    A Boolean value specifying whether to allow or block third-party websites that gather cookie information
    cookieStealingPcapEnabled Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for cookie stealing
    cryptoMiningBlocked Boolean
    A Boolean value specifying whether to allow or block cryptocurrency mining network traffic and script
    cryptoMiningCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for cryptomining
    dgaDomainsBlocked Boolean
    A Boolean value specifying whether to allow or block domains that are suspected to be generated using domain generation algorithms (DGA)
    dgaDomainsCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for DGA domains
    fileFormatVunerabilitesBlocked Boolean
    A Boolean value specifying whether known file format vulnerabilities and suspicious or malicious content in Microsoft Office or PDF documents are allowed or blocked
    fileFormatVunerabilitesCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for file format vulnerabilities
    googleTalkBlocked Boolean
    A Boolean value specifying whether to allow or block access to Google Hangouts, a popular P2P VoIP application.
    googleTalkCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for Google Hangouts
    ircTunnellingBlocked Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for web spam
    ircTunnellingCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for IRC tunnels
    knownPhishingSitesBlocked Boolean
    A Boolean value specifying whether known phishing sites are allowed or blocked
    knownPhishingSitesCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for known phishing sites
    maliciousUrlsCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for malicious URLs
    malwareSitesBlocked Boolean
    A Boolean value specifying whether known malicious sites and content are allowed or blocked
    malwareSitesCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for malicious sites
    potentialMaliciousRequestsBlocked Boolean
    A Boolean value specifying whether to allow or block this type of cross-site scripting (XSS)
    potentialMaliciousRequestsCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for (XSS) attacks
    riskTolerance Integer
    The Page Risk tolerance index set between 0 and 100 (100 being the highest risk).
    riskToleranceCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for suspicious web pages
    sshTunnellingBlocked Boolean
    A Boolean value specifying whether to allow or block SSH traffic being tunneled over HTTP/Ss
    sshTunnellingCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for SSH tunnels
    suspectAdwareSpywareSitesBlocked Boolean
    A Boolean value specifying whether to allow or block any detections of communication and callback traffic associated with spyware agents and data transmission
    suspectAdwareSpywareSitesCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for suspected adware and spyware sites
    suspectedPhishingSitesBlocked Boolean
    A Boolean value specifying whether to allow or block suspected phishing sites identified through heuristic detection.
    suspectedPhishingSitesCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for suspected phishing sites
    torBlocked Boolean
    A Boolean value specifying whether to allow or block the usage of Tor, a popular P2P anonymizer protocol with support for encryption.
    torCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for Tor
    webSpamBlocked Boolean
    A Boolean value specifying whether to allow or block web pages that pretend to contain useful information, to get higher ranking in search engine results or drive traffic to phishing, adware, or spyware distribution sites.
    webSpamCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for web spam
    activexBlocked boolean
    A Boolean value specifying whether sites are allowed or blocked from accessing vulnerable ActiveX controls that are known to have been exploited.
    activexCapture boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for ActiveX controls
    adSpywareSitesBlocked boolean
    A Boolean value specifying whether to allow or block websites known to contain adware or spyware that displays malicious advertisements that can collect users' information without their knowledge
    adSpywareSitesCapture boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for adware and spyware sites
    alertForUnknownSuspiciousC2Traffic boolean
    A Boolean value specifying whether to send alerts upon detecting unknown or suspicious C2 traffic
    anonymizerBlocked boolean
    A Boolean value specifying whether to allow or block applications and methods used to obscure the destination and the content accessed by the user, therefore blocking traffic to anonymizing web proxies
    anonymizerCapture boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for anonymizers
    bitTorrentBlocked boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for blocked countries
    bitTorrentCapture boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for BitTorrent
    blockCountriesCapture boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for blocked countries
    blockedCountries string[]
    Destination countries for which the rule is applicable. If not set, the rule is not restricted to specific destination countries.
    browserExploitsBlocked boolean
    A Boolean value specifying whether known web browser vulnerabilities prone to exploitation are allowed or blocked.
    browserExploitsCapture boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for browser exploits
    cmdCtlServerBlocked boolean
    A Boolean value specifying whether connections to known Command & Control (C2) Servers are allowed or blocked
    cmdCtlServerCapture boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for connections to known C2 servers
    cmdCtlTrafficBlocked boolean
    A Boolean value specifying whether botnets are allowed or blocked from sending or receiving commands to unknown servers
    cmdCtlTrafficCapture boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for botnets
    cookieStealingBlocked boolean
    A Boolean value specifying whether to allow or block third-party websites that gather cookie information
    cookieStealingPcapEnabled boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for cookie stealing
    cryptoMiningBlocked boolean
    A Boolean value specifying whether to allow or block cryptocurrency mining network traffic and script
    cryptoMiningCapture boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for cryptomining
    dgaDomainsBlocked boolean
    A Boolean value specifying whether to allow or block domains that are suspected to be generated using domain generation algorithms (DGA)
    dgaDomainsCapture boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for DGA domains
    fileFormatVunerabilitesBlocked boolean
    A Boolean value specifying whether known file format vulnerabilities and suspicious or malicious content in Microsoft Office or PDF documents are allowed or blocked
    fileFormatVunerabilitesCapture boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for file format vulnerabilities
    googleTalkBlocked boolean
    A Boolean value specifying whether to allow or block access to Google Hangouts, a popular P2P VoIP application.
    googleTalkCapture boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for Google Hangouts
    ircTunnellingBlocked boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for web spam
    ircTunnellingCapture boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for IRC tunnels
    knownPhishingSitesBlocked boolean
    A Boolean value specifying whether known phishing sites are allowed or blocked
    knownPhishingSitesCapture boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for known phishing sites
    maliciousUrlsCapture boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for malicious URLs
    malwareSitesBlocked boolean
    A Boolean value specifying whether known malicious sites and content are allowed or blocked
    malwareSitesCapture boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for malicious sites
    potentialMaliciousRequestsBlocked boolean
    A Boolean value specifying whether to allow or block this type of cross-site scripting (XSS)
    potentialMaliciousRequestsCapture boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for (XSS) attacks
    riskTolerance number
    The Page Risk tolerance index set between 0 and 100 (100 being the highest risk).
    riskToleranceCapture boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for suspicious web pages
    sshTunnellingBlocked boolean
    A Boolean value specifying whether to allow or block SSH traffic being tunneled over HTTP/Ss
    sshTunnellingCapture boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for SSH tunnels
    suspectAdwareSpywareSitesBlocked boolean
    A Boolean value specifying whether to allow or block any detections of communication and callback traffic associated with spyware agents and data transmission
    suspectAdwareSpywareSitesCapture boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for suspected adware and spyware sites
    suspectedPhishingSitesBlocked boolean
    A Boolean value specifying whether to allow or block suspected phishing sites identified through heuristic detection.
    suspectedPhishingSitesCapture boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for suspected phishing sites
    torBlocked boolean
    A Boolean value specifying whether to allow or block the usage of Tor, a popular P2P anonymizer protocol with support for encryption.
    torCapture boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for Tor
    webSpamBlocked boolean
    A Boolean value specifying whether to allow or block web pages that pretend to contain useful information, to get higher ranking in search engine results or drive traffic to phishing, adware, or spyware distribution sites.
    webSpamCapture boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for web spam
    activex_blocked bool
    A Boolean value specifying whether sites are allowed or blocked from accessing vulnerable ActiveX controls that are known to have been exploited.
    activex_capture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for ActiveX controls
    ad_spyware_sites_blocked bool
    A Boolean value specifying whether to allow or block websites known to contain adware or spyware that displays malicious advertisements that can collect users' information without their knowledge
    ad_spyware_sites_capture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for adware and spyware sites
    alert_for_unknown_suspicious_c2_traffic bool
    A Boolean value specifying whether to send alerts upon detecting unknown or suspicious C2 traffic
    anonymizer_blocked bool
    A Boolean value specifying whether to allow or block applications and methods used to obscure the destination and the content accessed by the user, therefore blocking traffic to anonymizing web proxies
    anonymizer_capture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for anonymizers
    bit_torrent_blocked bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for blocked countries
    bit_torrent_capture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for BitTorrent
    block_countries_capture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for blocked countries
    blocked_countries Sequence[str]
    Destination countries for which the rule is applicable. If not set, the rule is not restricted to specific destination countries.
    browser_exploits_blocked bool
    A Boolean value specifying whether known web browser vulnerabilities prone to exploitation are allowed or blocked.
    browser_exploits_capture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for browser exploits
    cmd_ctl_server_blocked bool
    A Boolean value specifying whether connections to known Command & Control (C2) Servers are allowed or blocked
    cmd_ctl_server_capture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for connections to known C2 servers
    cmd_ctl_traffic_blocked bool
    A Boolean value specifying whether botnets are allowed or blocked from sending or receiving commands to unknown servers
    cmd_ctl_traffic_capture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for botnets
    cookie_stealing_blocked bool
    A Boolean value specifying whether to allow or block third-party websites that gather cookie information
    cookie_stealing_pcap_enabled bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for cookie stealing
    crypto_mining_blocked bool
    A Boolean value specifying whether to allow or block cryptocurrency mining network traffic and script
    crypto_mining_capture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for cryptomining
    dga_domains_blocked bool
    A Boolean value specifying whether to allow or block domains that are suspected to be generated using domain generation algorithms (DGA)
    dga_domains_capture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for DGA domains
    file_format_vunerabilites_blocked bool
    A Boolean value specifying whether known file format vulnerabilities and suspicious or malicious content in Microsoft Office or PDF documents are allowed or blocked
    file_format_vunerabilites_capture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for file format vulnerabilities
    google_talk_blocked bool
    A Boolean value specifying whether to allow or block access to Google Hangouts, a popular P2P VoIP application.
    google_talk_capture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for Google Hangouts
    irc_tunnelling_blocked bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for web spam
    irc_tunnelling_capture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for IRC tunnels
    known_phishing_sites_blocked bool
    A Boolean value specifying whether known phishing sites are allowed or blocked
    known_phishing_sites_capture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for known phishing sites
    malicious_urls_capture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for malicious URLs
    malware_sites_blocked bool
    A Boolean value specifying whether known malicious sites and content are allowed or blocked
    malware_sites_capture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for malicious sites
    potential_malicious_requests_blocked bool
    A Boolean value specifying whether to allow or block this type of cross-site scripting (XSS)
    potential_malicious_requests_capture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for (XSS) attacks
    risk_tolerance int
    The Page Risk tolerance index set between 0 and 100 (100 being the highest risk).
    risk_tolerance_capture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for suspicious web pages
    ssh_tunnelling_blocked bool
    A Boolean value specifying whether to allow or block SSH traffic being tunneled over HTTP/Ss
    ssh_tunnelling_capture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for SSH tunnels
    suspect_adware_spyware_sites_blocked bool
    A Boolean value specifying whether to allow or block any detections of communication and callback traffic associated with spyware agents and data transmission
    suspect_adware_spyware_sites_capture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for suspected adware and spyware sites
    suspected_phishing_sites_blocked bool
    A Boolean value specifying whether to allow or block suspected phishing sites identified through heuristic detection.
    suspected_phishing_sites_capture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for suspected phishing sites
    tor_blocked bool
    A Boolean value specifying whether to allow or block the usage of Tor, a popular P2P anonymizer protocol with support for encryption.
    tor_capture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for Tor
    web_spam_blocked bool
    A Boolean value specifying whether to allow or block web pages that pretend to contain useful information, to get higher ranking in search engine results or drive traffic to phishing, adware, or spyware distribution sites.
    web_spam_capture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for web spam
    activexBlocked Boolean
    A Boolean value specifying whether sites are allowed or blocked from accessing vulnerable ActiveX controls that are known to have been exploited.
    activexCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for ActiveX controls
    adSpywareSitesBlocked Boolean
    A Boolean value specifying whether to allow or block websites known to contain adware or spyware that displays malicious advertisements that can collect users' information without their knowledge
    adSpywareSitesCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for adware and spyware sites
    alertForUnknownSuspiciousC2Traffic Boolean
    A Boolean value specifying whether to send alerts upon detecting unknown or suspicious C2 traffic
    anonymizerBlocked Boolean
    A Boolean value specifying whether to allow or block applications and methods used to obscure the destination and the content accessed by the user, therefore blocking traffic to anonymizing web proxies
    anonymizerCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for anonymizers
    bitTorrentBlocked Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for blocked countries
    bitTorrentCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for BitTorrent
    blockCountriesCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for blocked countries
    blockedCountries List<String>
    Destination countries for which the rule is applicable. If not set, the rule is not restricted to specific destination countries.
    browserExploitsBlocked Boolean
    A Boolean value specifying whether known web browser vulnerabilities prone to exploitation are allowed or blocked.
    browserExploitsCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for browser exploits
    cmdCtlServerBlocked Boolean
    A Boolean value specifying whether connections to known Command & Control (C2) Servers are allowed or blocked
    cmdCtlServerCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for connections to known C2 servers
    cmdCtlTrafficBlocked Boolean
    A Boolean value specifying whether botnets are allowed or blocked from sending or receiving commands to unknown servers
    cmdCtlTrafficCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for botnets
    cookieStealingBlocked Boolean
    A Boolean value specifying whether to allow or block third-party websites that gather cookie information
    cookieStealingPcapEnabled Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for cookie stealing
    cryptoMiningBlocked Boolean
    A Boolean value specifying whether to allow or block cryptocurrency mining network traffic and script
    cryptoMiningCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for cryptomining
    dgaDomainsBlocked Boolean
    A Boolean value specifying whether to allow or block domains that are suspected to be generated using domain generation algorithms (DGA)
    dgaDomainsCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for DGA domains
    fileFormatVunerabilitesBlocked Boolean
    A Boolean value specifying whether known file format vulnerabilities and suspicious or malicious content in Microsoft Office or PDF documents are allowed or blocked
    fileFormatVunerabilitesCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for file format vulnerabilities
    googleTalkBlocked Boolean
    A Boolean value specifying whether to allow or block access to Google Hangouts, a popular P2P VoIP application.
    googleTalkCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for Google Hangouts
    ircTunnellingBlocked Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for web spam
    ircTunnellingCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for IRC tunnels
    knownPhishingSitesBlocked Boolean
    A Boolean value specifying whether known phishing sites are allowed or blocked
    knownPhishingSitesCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for known phishing sites
    maliciousUrlsCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for malicious URLs
    malwareSitesBlocked Boolean
    A Boolean value specifying whether known malicious sites and content are allowed or blocked
    malwareSitesCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for malicious sites
    potentialMaliciousRequestsBlocked Boolean
    A Boolean value specifying whether to allow or block this type of cross-site scripting (XSS)
    potentialMaliciousRequestsCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for (XSS) attacks
    riskTolerance Number
    The Page Risk tolerance index set between 0 and 100 (100 being the highest risk).
    riskToleranceCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for suspicious web pages
    sshTunnellingBlocked Boolean
    A Boolean value specifying whether to allow or block SSH traffic being tunneled over HTTP/Ss
    sshTunnellingCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for SSH tunnels
    suspectAdwareSpywareSitesBlocked Boolean
    A Boolean value specifying whether to allow or block any detections of communication and callback traffic associated with spyware agents and data transmission
    suspectAdwareSpywareSitesCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for suspected adware and spyware sites
    suspectedPhishingSitesBlocked Boolean
    A Boolean value specifying whether to allow or block suspected phishing sites identified through heuristic detection.
    suspectedPhishingSitesCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for suspected phishing sites
    torBlocked Boolean
    A Boolean value specifying whether to allow or block the usage of Tor, a popular P2P anonymizer protocol with support for encryption.
    torCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for Tor
    webSpamBlocked Boolean
    A Boolean value specifying whether to allow or block web pages that pretend to contain useful information, to get higher ranking in search engine results or drive traffic to phishing, adware, or spyware distribution sites.
    webSpamCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for web spam

    Outputs

    All input properties are implicitly available as output properties. Additionally, the AdvancedThreatSettings resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing AdvancedThreatSettings Resource

    Get an existing AdvancedThreatSettings resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: AdvancedThreatSettingsState, opts?: CustomResourceOptions): AdvancedThreatSettings
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        activex_blocked: Optional[bool] = None,
        activex_capture: Optional[bool] = None,
        ad_spyware_sites_blocked: Optional[bool] = None,
        ad_spyware_sites_capture: Optional[bool] = None,
        alert_for_unknown_suspicious_c2_traffic: Optional[bool] = None,
        anonymizer_blocked: Optional[bool] = None,
        anonymizer_capture: Optional[bool] = None,
        bit_torrent_blocked: Optional[bool] = None,
        bit_torrent_capture: Optional[bool] = None,
        block_countries_capture: Optional[bool] = None,
        blocked_countries: Optional[Sequence[str]] = None,
        browser_exploits_blocked: Optional[bool] = None,
        browser_exploits_capture: Optional[bool] = None,
        cmd_ctl_server_blocked: Optional[bool] = None,
        cmd_ctl_server_capture: Optional[bool] = None,
        cmd_ctl_traffic_blocked: Optional[bool] = None,
        cmd_ctl_traffic_capture: Optional[bool] = None,
        cookie_stealing_blocked: Optional[bool] = None,
        cookie_stealing_pcap_enabled: Optional[bool] = None,
        crypto_mining_blocked: Optional[bool] = None,
        crypto_mining_capture: Optional[bool] = None,
        dga_domains_blocked: Optional[bool] = None,
        dga_domains_capture: Optional[bool] = None,
        file_format_vunerabilites_blocked: Optional[bool] = None,
        file_format_vunerabilites_capture: Optional[bool] = None,
        google_talk_blocked: Optional[bool] = None,
        google_talk_capture: Optional[bool] = None,
        irc_tunnelling_blocked: Optional[bool] = None,
        irc_tunnelling_capture: Optional[bool] = None,
        known_phishing_sites_blocked: Optional[bool] = None,
        known_phishing_sites_capture: Optional[bool] = None,
        malicious_urls_capture: Optional[bool] = None,
        malware_sites_blocked: Optional[bool] = None,
        malware_sites_capture: Optional[bool] = None,
        potential_malicious_requests_blocked: Optional[bool] = None,
        potential_malicious_requests_capture: Optional[bool] = None,
        risk_tolerance: Optional[int] = None,
        risk_tolerance_capture: Optional[bool] = None,
        ssh_tunnelling_blocked: Optional[bool] = None,
        ssh_tunnelling_capture: Optional[bool] = None,
        suspect_adware_spyware_sites_blocked: Optional[bool] = None,
        suspect_adware_spyware_sites_capture: Optional[bool] = None,
        suspected_phishing_sites_blocked: Optional[bool] = None,
        suspected_phishing_sites_capture: Optional[bool] = None,
        tor_blocked: Optional[bool] = None,
        tor_capture: Optional[bool] = None,
        web_spam_blocked: Optional[bool] = None,
        web_spam_capture: Optional[bool] = None) -> AdvancedThreatSettings
    func GetAdvancedThreatSettings(ctx *Context, name string, id IDInput, state *AdvancedThreatSettingsState, opts ...ResourceOption) (*AdvancedThreatSettings, error)
    public static AdvancedThreatSettings Get(string name, Input<string> id, AdvancedThreatSettingsState? state, CustomResourceOptions? opts = null)
    public static AdvancedThreatSettings get(String name, Output<String> id, AdvancedThreatSettingsState state, CustomResourceOptions options)
    resources:  _:    type: zia:AdvancedThreatSettings    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    ActivexBlocked bool
    A Boolean value specifying whether sites are allowed or blocked from accessing vulnerable ActiveX controls that are known to have been exploited.
    ActivexCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for ActiveX controls
    AdSpywareSitesBlocked bool
    A Boolean value specifying whether to allow or block websites known to contain adware or spyware that displays malicious advertisements that can collect users' information without their knowledge
    AdSpywareSitesCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for adware and spyware sites
    AlertForUnknownSuspiciousC2Traffic bool
    A Boolean value specifying whether to send alerts upon detecting unknown or suspicious C2 traffic
    AnonymizerBlocked bool
    A Boolean value specifying whether to allow or block applications and methods used to obscure the destination and the content accessed by the user, therefore blocking traffic to anonymizing web proxies
    AnonymizerCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for anonymizers
    BitTorrentBlocked bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for blocked countries
    BitTorrentCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for BitTorrent
    BlockCountriesCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for blocked countries
    BlockedCountries List<string>
    Destination countries for which the rule is applicable. If not set, the rule is not restricted to specific destination countries.
    BrowserExploitsBlocked bool
    A Boolean value specifying whether known web browser vulnerabilities prone to exploitation are allowed or blocked.
    BrowserExploitsCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for browser exploits
    CmdCtlServerBlocked bool
    A Boolean value specifying whether connections to known Command & Control (C2) Servers are allowed or blocked
    CmdCtlServerCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for connections to known C2 servers
    CmdCtlTrafficBlocked bool
    A Boolean value specifying whether botnets are allowed or blocked from sending or receiving commands to unknown servers
    CmdCtlTrafficCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for botnets
    CookieStealingBlocked bool
    A Boolean value specifying whether to allow or block third-party websites that gather cookie information
    CookieStealingPcapEnabled bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for cookie stealing
    CryptoMiningBlocked bool
    A Boolean value specifying whether to allow or block cryptocurrency mining network traffic and script
    CryptoMiningCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for cryptomining
    DgaDomainsBlocked bool
    A Boolean value specifying whether to allow or block domains that are suspected to be generated using domain generation algorithms (DGA)
    DgaDomainsCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for DGA domains
    FileFormatVunerabilitesBlocked bool
    A Boolean value specifying whether known file format vulnerabilities and suspicious or malicious content in Microsoft Office or PDF documents are allowed or blocked
    FileFormatVunerabilitesCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for file format vulnerabilities
    GoogleTalkBlocked bool
    A Boolean value specifying whether to allow or block access to Google Hangouts, a popular P2P VoIP application.
    GoogleTalkCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for Google Hangouts
    IrcTunnellingBlocked bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for web spam
    IrcTunnellingCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for IRC tunnels
    KnownPhishingSitesBlocked bool
    A Boolean value specifying whether known phishing sites are allowed or blocked
    KnownPhishingSitesCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for known phishing sites
    MaliciousUrlsCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for malicious URLs
    MalwareSitesBlocked bool
    A Boolean value specifying whether known malicious sites and content are allowed or blocked
    MalwareSitesCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for malicious sites
    PotentialMaliciousRequestsBlocked bool
    A Boolean value specifying whether to allow or block this type of cross-site scripting (XSS)
    PotentialMaliciousRequestsCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for (XSS) attacks
    RiskTolerance int
    The Page Risk tolerance index set between 0 and 100 (100 being the highest risk).
    RiskToleranceCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for suspicious web pages
    SshTunnellingBlocked bool
    A Boolean value specifying whether to allow or block SSH traffic being tunneled over HTTP/Ss
    SshTunnellingCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for SSH tunnels
    SuspectAdwareSpywareSitesBlocked bool
    A Boolean value specifying whether to allow or block any detections of communication and callback traffic associated with spyware agents and data transmission
    SuspectAdwareSpywareSitesCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for suspected adware and spyware sites
    SuspectedPhishingSitesBlocked bool
    A Boolean value specifying whether to allow or block suspected phishing sites identified through heuristic detection.
    SuspectedPhishingSitesCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for suspected phishing sites
    TorBlocked bool
    A Boolean value specifying whether to allow or block the usage of Tor, a popular P2P anonymizer protocol with support for encryption.
    TorCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for Tor
    WebSpamBlocked bool
    A Boolean value specifying whether to allow or block web pages that pretend to contain useful information, to get higher ranking in search engine results or drive traffic to phishing, adware, or spyware distribution sites.
    WebSpamCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for web spam
    ActivexBlocked bool
    A Boolean value specifying whether sites are allowed or blocked from accessing vulnerable ActiveX controls that are known to have been exploited.
    ActivexCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for ActiveX controls
    AdSpywareSitesBlocked bool
    A Boolean value specifying whether to allow or block websites known to contain adware or spyware that displays malicious advertisements that can collect users' information without their knowledge
    AdSpywareSitesCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for adware and spyware sites
    AlertForUnknownSuspiciousC2Traffic bool
    A Boolean value specifying whether to send alerts upon detecting unknown or suspicious C2 traffic
    AnonymizerBlocked bool
    A Boolean value specifying whether to allow or block applications and methods used to obscure the destination and the content accessed by the user, therefore blocking traffic to anonymizing web proxies
    AnonymizerCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for anonymizers
    BitTorrentBlocked bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for blocked countries
    BitTorrentCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for BitTorrent
    BlockCountriesCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for blocked countries
    BlockedCountries []string
    Destination countries for which the rule is applicable. If not set, the rule is not restricted to specific destination countries.
    BrowserExploitsBlocked bool
    A Boolean value specifying whether known web browser vulnerabilities prone to exploitation are allowed or blocked.
    BrowserExploitsCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for browser exploits
    CmdCtlServerBlocked bool
    A Boolean value specifying whether connections to known Command & Control (C2) Servers are allowed or blocked
    CmdCtlServerCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for connections to known C2 servers
    CmdCtlTrafficBlocked bool
    A Boolean value specifying whether botnets are allowed or blocked from sending or receiving commands to unknown servers
    CmdCtlTrafficCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for botnets
    CookieStealingBlocked bool
    A Boolean value specifying whether to allow or block third-party websites that gather cookie information
    CookieStealingPcapEnabled bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for cookie stealing
    CryptoMiningBlocked bool
    A Boolean value specifying whether to allow or block cryptocurrency mining network traffic and script
    CryptoMiningCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for cryptomining
    DgaDomainsBlocked bool
    A Boolean value specifying whether to allow or block domains that are suspected to be generated using domain generation algorithms (DGA)
    DgaDomainsCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for DGA domains
    FileFormatVunerabilitesBlocked bool
    A Boolean value specifying whether known file format vulnerabilities and suspicious or malicious content in Microsoft Office or PDF documents are allowed or blocked
    FileFormatVunerabilitesCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for file format vulnerabilities
    GoogleTalkBlocked bool
    A Boolean value specifying whether to allow or block access to Google Hangouts, a popular P2P VoIP application.
    GoogleTalkCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for Google Hangouts
    IrcTunnellingBlocked bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for web spam
    IrcTunnellingCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for IRC tunnels
    KnownPhishingSitesBlocked bool
    A Boolean value specifying whether known phishing sites are allowed or blocked
    KnownPhishingSitesCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for known phishing sites
    MaliciousUrlsCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for malicious URLs
    MalwareSitesBlocked bool
    A Boolean value specifying whether known malicious sites and content are allowed or blocked
    MalwareSitesCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for malicious sites
    PotentialMaliciousRequestsBlocked bool
    A Boolean value specifying whether to allow or block this type of cross-site scripting (XSS)
    PotentialMaliciousRequestsCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for (XSS) attacks
    RiskTolerance int
    The Page Risk tolerance index set between 0 and 100 (100 being the highest risk).
    RiskToleranceCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for suspicious web pages
    SshTunnellingBlocked bool
    A Boolean value specifying whether to allow or block SSH traffic being tunneled over HTTP/Ss
    SshTunnellingCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for SSH tunnels
    SuspectAdwareSpywareSitesBlocked bool
    A Boolean value specifying whether to allow or block any detections of communication and callback traffic associated with spyware agents and data transmission
    SuspectAdwareSpywareSitesCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for suspected adware and spyware sites
    SuspectedPhishingSitesBlocked bool
    A Boolean value specifying whether to allow or block suspected phishing sites identified through heuristic detection.
    SuspectedPhishingSitesCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for suspected phishing sites
    TorBlocked bool
    A Boolean value specifying whether to allow or block the usage of Tor, a popular P2P anonymizer protocol with support for encryption.
    TorCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for Tor
    WebSpamBlocked bool
    A Boolean value specifying whether to allow or block web pages that pretend to contain useful information, to get higher ranking in search engine results or drive traffic to phishing, adware, or spyware distribution sites.
    WebSpamCapture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for web spam
    activexBlocked Boolean
    A Boolean value specifying whether sites are allowed or blocked from accessing vulnerable ActiveX controls that are known to have been exploited.
    activexCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for ActiveX controls
    adSpywareSitesBlocked Boolean
    A Boolean value specifying whether to allow or block websites known to contain adware or spyware that displays malicious advertisements that can collect users' information without their knowledge
    adSpywareSitesCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for adware and spyware sites
    alertForUnknownSuspiciousC2Traffic Boolean
    A Boolean value specifying whether to send alerts upon detecting unknown or suspicious C2 traffic
    anonymizerBlocked Boolean
    A Boolean value specifying whether to allow or block applications and methods used to obscure the destination and the content accessed by the user, therefore blocking traffic to anonymizing web proxies
    anonymizerCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for anonymizers
    bitTorrentBlocked Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for blocked countries
    bitTorrentCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for BitTorrent
    blockCountriesCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for blocked countries
    blockedCountries List<String>
    Destination countries for which the rule is applicable. If not set, the rule is not restricted to specific destination countries.
    browserExploitsBlocked Boolean
    A Boolean value specifying whether known web browser vulnerabilities prone to exploitation are allowed or blocked.
    browserExploitsCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for browser exploits
    cmdCtlServerBlocked Boolean
    A Boolean value specifying whether connections to known Command & Control (C2) Servers are allowed or blocked
    cmdCtlServerCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for connections to known C2 servers
    cmdCtlTrafficBlocked Boolean
    A Boolean value specifying whether botnets are allowed or blocked from sending or receiving commands to unknown servers
    cmdCtlTrafficCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for botnets
    cookieStealingBlocked Boolean
    A Boolean value specifying whether to allow or block third-party websites that gather cookie information
    cookieStealingPcapEnabled Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for cookie stealing
    cryptoMiningBlocked Boolean
    A Boolean value specifying whether to allow or block cryptocurrency mining network traffic and script
    cryptoMiningCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for cryptomining
    dgaDomainsBlocked Boolean
    A Boolean value specifying whether to allow or block domains that are suspected to be generated using domain generation algorithms (DGA)
    dgaDomainsCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for DGA domains
    fileFormatVunerabilitesBlocked Boolean
    A Boolean value specifying whether known file format vulnerabilities and suspicious or malicious content in Microsoft Office or PDF documents are allowed or blocked
    fileFormatVunerabilitesCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for file format vulnerabilities
    googleTalkBlocked Boolean
    A Boolean value specifying whether to allow or block access to Google Hangouts, a popular P2P VoIP application.
    googleTalkCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for Google Hangouts
    ircTunnellingBlocked Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for web spam
    ircTunnellingCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for IRC tunnels
    knownPhishingSitesBlocked Boolean
    A Boolean value specifying whether known phishing sites are allowed or blocked
    knownPhishingSitesCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for known phishing sites
    maliciousUrlsCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for malicious URLs
    malwareSitesBlocked Boolean
    A Boolean value specifying whether known malicious sites and content are allowed or blocked
    malwareSitesCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for malicious sites
    potentialMaliciousRequestsBlocked Boolean
    A Boolean value specifying whether to allow or block this type of cross-site scripting (XSS)
    potentialMaliciousRequestsCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for (XSS) attacks
    riskTolerance Integer
    The Page Risk tolerance index set between 0 and 100 (100 being the highest risk).
    riskToleranceCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for suspicious web pages
    sshTunnellingBlocked Boolean
    A Boolean value specifying whether to allow or block SSH traffic being tunneled over HTTP/Ss
    sshTunnellingCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for SSH tunnels
    suspectAdwareSpywareSitesBlocked Boolean
    A Boolean value specifying whether to allow or block any detections of communication and callback traffic associated with spyware agents and data transmission
    suspectAdwareSpywareSitesCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for suspected adware and spyware sites
    suspectedPhishingSitesBlocked Boolean
    A Boolean value specifying whether to allow or block suspected phishing sites identified through heuristic detection.
    suspectedPhishingSitesCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for suspected phishing sites
    torBlocked Boolean
    A Boolean value specifying whether to allow or block the usage of Tor, a popular P2P anonymizer protocol with support for encryption.
    torCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for Tor
    webSpamBlocked Boolean
    A Boolean value specifying whether to allow or block web pages that pretend to contain useful information, to get higher ranking in search engine results or drive traffic to phishing, adware, or spyware distribution sites.
    webSpamCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for web spam
    activexBlocked boolean
    A Boolean value specifying whether sites are allowed or blocked from accessing vulnerable ActiveX controls that are known to have been exploited.
    activexCapture boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for ActiveX controls
    adSpywareSitesBlocked boolean
    A Boolean value specifying whether to allow or block websites known to contain adware or spyware that displays malicious advertisements that can collect users' information without their knowledge
    adSpywareSitesCapture boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for adware and spyware sites
    alertForUnknownSuspiciousC2Traffic boolean
    A Boolean value specifying whether to send alerts upon detecting unknown or suspicious C2 traffic
    anonymizerBlocked boolean
    A Boolean value specifying whether to allow or block applications and methods used to obscure the destination and the content accessed by the user, therefore blocking traffic to anonymizing web proxies
    anonymizerCapture boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for anonymizers
    bitTorrentBlocked boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for blocked countries
    bitTorrentCapture boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for BitTorrent
    blockCountriesCapture boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for blocked countries
    blockedCountries string[]
    Destination countries for which the rule is applicable. If not set, the rule is not restricted to specific destination countries.
    browserExploitsBlocked boolean
    A Boolean value specifying whether known web browser vulnerabilities prone to exploitation are allowed or blocked.
    browserExploitsCapture boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for browser exploits
    cmdCtlServerBlocked boolean
    A Boolean value specifying whether connections to known Command & Control (C2) Servers are allowed or blocked
    cmdCtlServerCapture boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for connections to known C2 servers
    cmdCtlTrafficBlocked boolean
    A Boolean value specifying whether botnets are allowed or blocked from sending or receiving commands to unknown servers
    cmdCtlTrafficCapture boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for botnets
    cookieStealingBlocked boolean
    A Boolean value specifying whether to allow or block third-party websites that gather cookie information
    cookieStealingPcapEnabled boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for cookie stealing
    cryptoMiningBlocked boolean
    A Boolean value specifying whether to allow or block cryptocurrency mining network traffic and script
    cryptoMiningCapture boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for cryptomining
    dgaDomainsBlocked boolean
    A Boolean value specifying whether to allow or block domains that are suspected to be generated using domain generation algorithms (DGA)
    dgaDomainsCapture boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for DGA domains
    fileFormatVunerabilitesBlocked boolean
    A Boolean value specifying whether known file format vulnerabilities and suspicious or malicious content in Microsoft Office or PDF documents are allowed or blocked
    fileFormatVunerabilitesCapture boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for file format vulnerabilities
    googleTalkBlocked boolean
    A Boolean value specifying whether to allow or block access to Google Hangouts, a popular P2P VoIP application.
    googleTalkCapture boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for Google Hangouts
    ircTunnellingBlocked boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for web spam
    ircTunnellingCapture boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for IRC tunnels
    knownPhishingSitesBlocked boolean
    A Boolean value specifying whether known phishing sites are allowed or blocked
    knownPhishingSitesCapture boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for known phishing sites
    maliciousUrlsCapture boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for malicious URLs
    malwareSitesBlocked boolean
    A Boolean value specifying whether known malicious sites and content are allowed or blocked
    malwareSitesCapture boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for malicious sites
    potentialMaliciousRequestsBlocked boolean
    A Boolean value specifying whether to allow or block this type of cross-site scripting (XSS)
    potentialMaliciousRequestsCapture boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for (XSS) attacks
    riskTolerance number
    The Page Risk tolerance index set between 0 and 100 (100 being the highest risk).
    riskToleranceCapture boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for suspicious web pages
    sshTunnellingBlocked boolean
    A Boolean value specifying whether to allow or block SSH traffic being tunneled over HTTP/Ss
    sshTunnellingCapture boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for SSH tunnels
    suspectAdwareSpywareSitesBlocked boolean
    A Boolean value specifying whether to allow or block any detections of communication and callback traffic associated with spyware agents and data transmission
    suspectAdwareSpywareSitesCapture boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for suspected adware and spyware sites
    suspectedPhishingSitesBlocked boolean
    A Boolean value specifying whether to allow or block suspected phishing sites identified through heuristic detection.
    suspectedPhishingSitesCapture boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for suspected phishing sites
    torBlocked boolean
    A Boolean value specifying whether to allow or block the usage of Tor, a popular P2P anonymizer protocol with support for encryption.
    torCapture boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for Tor
    webSpamBlocked boolean
    A Boolean value specifying whether to allow or block web pages that pretend to contain useful information, to get higher ranking in search engine results or drive traffic to phishing, adware, or spyware distribution sites.
    webSpamCapture boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for web spam
    activex_blocked bool
    A Boolean value specifying whether sites are allowed or blocked from accessing vulnerable ActiveX controls that are known to have been exploited.
    activex_capture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for ActiveX controls
    ad_spyware_sites_blocked bool
    A Boolean value specifying whether to allow or block websites known to contain adware or spyware that displays malicious advertisements that can collect users' information without their knowledge
    ad_spyware_sites_capture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for adware and spyware sites
    alert_for_unknown_suspicious_c2_traffic bool
    A Boolean value specifying whether to send alerts upon detecting unknown or suspicious C2 traffic
    anonymizer_blocked bool
    A Boolean value specifying whether to allow or block applications and methods used to obscure the destination and the content accessed by the user, therefore blocking traffic to anonymizing web proxies
    anonymizer_capture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for anonymizers
    bit_torrent_blocked bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for blocked countries
    bit_torrent_capture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for BitTorrent
    block_countries_capture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for blocked countries
    blocked_countries Sequence[str]
    Destination countries for which the rule is applicable. If not set, the rule is not restricted to specific destination countries.
    browser_exploits_blocked bool
    A Boolean value specifying whether known web browser vulnerabilities prone to exploitation are allowed or blocked.
    browser_exploits_capture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for browser exploits
    cmd_ctl_server_blocked bool
    A Boolean value specifying whether connections to known Command & Control (C2) Servers are allowed or blocked
    cmd_ctl_server_capture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for connections to known C2 servers
    cmd_ctl_traffic_blocked bool
    A Boolean value specifying whether botnets are allowed or blocked from sending or receiving commands to unknown servers
    cmd_ctl_traffic_capture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for botnets
    cookie_stealing_blocked bool
    A Boolean value specifying whether to allow or block third-party websites that gather cookie information
    cookie_stealing_pcap_enabled bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for cookie stealing
    crypto_mining_blocked bool
    A Boolean value specifying whether to allow or block cryptocurrency mining network traffic and script
    crypto_mining_capture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for cryptomining
    dga_domains_blocked bool
    A Boolean value specifying whether to allow or block domains that are suspected to be generated using domain generation algorithms (DGA)
    dga_domains_capture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for DGA domains
    file_format_vunerabilites_blocked bool
    A Boolean value specifying whether known file format vulnerabilities and suspicious or malicious content in Microsoft Office or PDF documents are allowed or blocked
    file_format_vunerabilites_capture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for file format vulnerabilities
    google_talk_blocked bool
    A Boolean value specifying whether to allow or block access to Google Hangouts, a popular P2P VoIP application.
    google_talk_capture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for Google Hangouts
    irc_tunnelling_blocked bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for web spam
    irc_tunnelling_capture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for IRC tunnels
    known_phishing_sites_blocked bool
    A Boolean value specifying whether known phishing sites are allowed or blocked
    known_phishing_sites_capture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for known phishing sites
    malicious_urls_capture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for malicious URLs
    malware_sites_blocked bool
    A Boolean value specifying whether known malicious sites and content are allowed or blocked
    malware_sites_capture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for malicious sites
    potential_malicious_requests_blocked bool
    A Boolean value specifying whether to allow or block this type of cross-site scripting (XSS)
    potential_malicious_requests_capture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for (XSS) attacks
    risk_tolerance int
    The Page Risk tolerance index set between 0 and 100 (100 being the highest risk).
    risk_tolerance_capture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for suspicious web pages
    ssh_tunnelling_blocked bool
    A Boolean value specifying whether to allow or block SSH traffic being tunneled over HTTP/Ss
    ssh_tunnelling_capture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for SSH tunnels
    suspect_adware_spyware_sites_blocked bool
    A Boolean value specifying whether to allow or block any detections of communication and callback traffic associated with spyware agents and data transmission
    suspect_adware_spyware_sites_capture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for suspected adware and spyware sites
    suspected_phishing_sites_blocked bool
    A Boolean value specifying whether to allow or block suspected phishing sites identified through heuristic detection.
    suspected_phishing_sites_capture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for suspected phishing sites
    tor_blocked bool
    A Boolean value specifying whether to allow or block the usage of Tor, a popular P2P anonymizer protocol with support for encryption.
    tor_capture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for Tor
    web_spam_blocked bool
    A Boolean value specifying whether to allow or block web pages that pretend to contain useful information, to get higher ranking in search engine results or drive traffic to phishing, adware, or spyware distribution sites.
    web_spam_capture bool
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for web spam
    activexBlocked Boolean
    A Boolean value specifying whether sites are allowed or blocked from accessing vulnerable ActiveX controls that are known to have been exploited.
    activexCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for ActiveX controls
    adSpywareSitesBlocked Boolean
    A Boolean value specifying whether to allow or block websites known to contain adware or spyware that displays malicious advertisements that can collect users' information without their knowledge
    adSpywareSitesCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for adware and spyware sites
    alertForUnknownSuspiciousC2Traffic Boolean
    A Boolean value specifying whether to send alerts upon detecting unknown or suspicious C2 traffic
    anonymizerBlocked Boolean
    A Boolean value specifying whether to allow or block applications and methods used to obscure the destination and the content accessed by the user, therefore blocking traffic to anonymizing web proxies
    anonymizerCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for anonymizers
    bitTorrentBlocked Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for blocked countries
    bitTorrentCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for BitTorrent
    blockCountriesCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for blocked countries
    blockedCountries List<String>
    Destination countries for which the rule is applicable. If not set, the rule is not restricted to specific destination countries.
    browserExploitsBlocked Boolean
    A Boolean value specifying whether known web browser vulnerabilities prone to exploitation are allowed or blocked.
    browserExploitsCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for browser exploits
    cmdCtlServerBlocked Boolean
    A Boolean value specifying whether connections to known Command & Control (C2) Servers are allowed or blocked
    cmdCtlServerCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for connections to known C2 servers
    cmdCtlTrafficBlocked Boolean
    A Boolean value specifying whether botnets are allowed or blocked from sending or receiving commands to unknown servers
    cmdCtlTrafficCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for botnets
    cookieStealingBlocked Boolean
    A Boolean value specifying whether to allow or block third-party websites that gather cookie information
    cookieStealingPcapEnabled Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for cookie stealing
    cryptoMiningBlocked Boolean
    A Boolean value specifying whether to allow or block cryptocurrency mining network traffic and script
    cryptoMiningCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for cryptomining
    dgaDomainsBlocked Boolean
    A Boolean value specifying whether to allow or block domains that are suspected to be generated using domain generation algorithms (DGA)
    dgaDomainsCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for DGA domains
    fileFormatVunerabilitesBlocked Boolean
    A Boolean value specifying whether known file format vulnerabilities and suspicious or malicious content in Microsoft Office or PDF documents are allowed or blocked
    fileFormatVunerabilitesCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for file format vulnerabilities
    googleTalkBlocked Boolean
    A Boolean value specifying whether to allow or block access to Google Hangouts, a popular P2P VoIP application.
    googleTalkCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for Google Hangouts
    ircTunnellingBlocked Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for web spam
    ircTunnellingCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for IRC tunnels
    knownPhishingSitesBlocked Boolean
    A Boolean value specifying whether known phishing sites are allowed or blocked
    knownPhishingSitesCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for known phishing sites
    maliciousUrlsCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for malicious URLs
    malwareSitesBlocked Boolean
    A Boolean value specifying whether known malicious sites and content are allowed or blocked
    malwareSitesCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for malicious sites
    potentialMaliciousRequestsBlocked Boolean
    A Boolean value specifying whether to allow or block this type of cross-site scripting (XSS)
    potentialMaliciousRequestsCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for (XSS) attacks
    riskTolerance Number
    The Page Risk tolerance index set between 0 and 100 (100 being the highest risk).
    riskToleranceCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for suspicious web pages
    sshTunnellingBlocked Boolean
    A Boolean value specifying whether to allow or block SSH traffic being tunneled over HTTP/Ss
    sshTunnellingCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for SSH tunnels
    suspectAdwareSpywareSitesBlocked Boolean
    A Boolean value specifying whether to allow or block any detections of communication and callback traffic associated with spyware agents and data transmission
    suspectAdwareSpywareSitesCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for suspected adware and spyware sites
    suspectedPhishingSitesBlocked Boolean
    A Boolean value specifying whether to allow or block suspected phishing sites identified through heuristic detection.
    suspectedPhishingSitesCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for suspected phishing sites
    torBlocked Boolean
    A Boolean value specifying whether to allow or block the usage of Tor, a popular P2P anonymizer protocol with support for encryption.
    torCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for Tor
    webSpamBlocked Boolean
    A Boolean value specifying whether to allow or block web pages that pretend to contain useful information, to get higher ranking in search engine results or drive traffic to phishing, adware, or spyware distribution sites.
    webSpamCapture Boolean
    A Boolean value specifying whether packet capture (PCAP) is enabled or not for web spam

    Import

    Zscaler offers a dedicated tool called Zscaler-Terraformer to allow the automated import of ZIA configurations into Terraform-compliant HashiCorp Configuration Language.

    Visit

    zia_advanced_threat_settings can be imported by using advanced_threat_settings as the import ID.

    For example:

    $ pulumi import zia:index/advancedThreatSettings:AdvancedThreatSettings this "advanced_threat_settings"

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    zia zscaler/pulumi-zia
    License
    MIT
    Notes
    This Pulumi package is based on the zia Terraform Provider.
    zia logo
    Zscaler Internet Access v1.0.1 published on Friday, Jun 6, 2025 by Zscaler
    zscaler/pulumi-zia