1. Packages
  2. Zscaler Internet Access (ZIA)
  3. API Docs
  4. AtpSettings
Viewing docs for pulumi-resource-zia v1.3.8
published on Friday, Mar 13, 2026 by Zscaler
zia logo
Viewing docs for pulumi-resource-zia v1.3.8
published on Friday, Mar 13, 2026 by Zscaler

    The zia_atp_settings resource manages Advanced Threat Protection (ATP) settings in the Zscaler Internet Access (ZIA) cloud service. ATP settings control which threat categories are blocked or captured (logged) for packet capture analysis. This is a singleton resource.

    For more information, see the ZIA Advanced Threat Protection documentation.

    This is a singleton resource. Import is not applicable.

    Example Usage

    Configure ATP Settings

    Example coming soon!

    Example coming soon!

    Example coming soon!

    import * as zia from "@bdzscaler/pulumi-zia";
    
    const example = new zia.AtpSettings("example", {
        malwareSitesBlocked: true,
        malwareSitesCapture: true,
        knownPhishingSitesBlocked: true,
        knownPhishingSitesCapture: true,
        cmdCtlServerBlocked: true,
        cryptoMiningBlocked: true,
        torBlocked: true,
        riskTolerance: 0,
    });
    
    import zscaler_pulumi_zia as zia
    
    example = zia.AtpSettings("example",
        malware_sites_blocked=True,
        malware_sites_capture=True,
        known_phishing_sites_blocked=True,
        known_phishing_sites_capture=True,
        cmd_ctl_server_blocked=True,
        crypto_mining_blocked=True,
        tor_blocked=True,
        risk_tolerance=0,
    )
    
    resources:
      example:
        type: zia:AtpSettings
        properties:
          malwareSitesBlocked: true
          malwareSitesCapture: true
          knownPhishingSitesBlocked: true
          knownPhishingSitesCapture: true
          cmdCtlServerBlocked: true
          cryptoMiningBlocked: true
          torBlocked: true
          riskTolerance: 0
    

    Create AtpSettings Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new AtpSettings(name: string, args?: AtpSettingsArgs, opts?: CustomResourceOptions);
    @overload
    def AtpSettings(resource_name: str,
                    args: Optional[AtpSettingsArgs] = None,
                    opts: Optional[ResourceOptions] = None)
    
    @overload
    def AtpSettings(resource_name: str,
                    opts: Optional[ResourceOptions] = None,
                    activex_blocked: Optional[bool] = None,
                    activex_capture: Optional[bool] = None,
                    ad_spyware_sites_blocked: Optional[bool] = None,
                    ad_spyware_sites_capture: Optional[bool] = None,
                    alert_for_unknown_suspicious_c2_traffic: Optional[bool] = None,
                    anonymizer_blocked: Optional[bool] = None,
                    anonymizer_capture: Optional[bool] = None,
                    bit_torrent_blocked: Optional[bool] = None,
                    bit_torrent_capture: Optional[bool] = None,
                    block_countries_capture: Optional[bool] = None,
                    blocked_countries: Optional[Sequence[str]] = None,
                    browser_exploits_blocked: Optional[bool] = None,
                    browser_exploits_capture: Optional[bool] = None,
                    cmd_ctl_server_blocked: Optional[bool] = None,
                    cmd_ctl_server_capture: Optional[bool] = None,
                    cmd_ctl_traffic_blocked: Optional[bool] = None,
                    cmd_ctl_traffic_capture: Optional[bool] = None,
                    cookie_stealing_blocked: Optional[bool] = None,
                    cookie_stealing_pcap_enabled: Optional[bool] = None,
                    crypto_mining_blocked: Optional[bool] = None,
                    crypto_mining_capture: Optional[bool] = None,
                    dga_domains_blocked: Optional[bool] = None,
                    dga_domains_capture: Optional[bool] = None,
                    file_format_vunerabilites_blocked: Optional[bool] = None,
                    file_format_vunerabilites_capture: Optional[bool] = None,
                    google_talk_blocked: Optional[bool] = None,
                    google_talk_capture: Optional[bool] = None,
                    irc_tunnelling_blocked: Optional[bool] = None,
                    irc_tunnelling_capture: Optional[bool] = None,
                    known_phishing_sites_blocked: Optional[bool] = None,
                    known_phishing_sites_capture: Optional[bool] = None,
                    malicious_urls_capture: Optional[bool] = None,
                    malware_sites_blocked: Optional[bool] = None,
                    malware_sites_capture: Optional[bool] = None,
                    potential_malicious_requests_blocked: Optional[bool] = None,
                    potential_malicious_requests_capture: Optional[bool] = None,
                    risk_tolerance: Optional[int] = None,
                    risk_tolerance_capture: Optional[bool] = None,
                    ssh_tunnelling_blocked: Optional[bool] = None,
                    ssh_tunnelling_capture: Optional[bool] = None,
                    suspect_adware_spyware_sites_blocked: Optional[bool] = None,
                    suspect_adware_spyware_sites_capture: Optional[bool] = None,
                    suspected_phishing_sites_blocked: Optional[bool] = None,
                    suspected_phishing_sites_capture: Optional[bool] = None,
                    tor_blocked: Optional[bool] = None,
                    tor_capture: Optional[bool] = None,
                    web_spam_blocked: Optional[bool] = None,
                    web_spam_capture: Optional[bool] = None)
    func NewAtpSettings(ctx *Context, name string, args *AtpSettingsArgs, opts ...ResourceOption) (*AtpSettings, error)
    public AtpSettings(string name, AtpSettingsArgs? args = null, CustomResourceOptions? opts = null)
    public AtpSettings(String name, AtpSettingsArgs args)
    public AtpSettings(String name, AtpSettingsArgs args, CustomResourceOptions options)
    
    type: zia:AtpSettings
    properties: # The arguments to resource properties.
    options: # Bag of options to control resource's behavior.
    
    

    Parameters

    name string
    The unique name of the resource.
    args AtpSettingsArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args AtpSettingsArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args AtpSettingsArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args AtpSettingsArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args AtpSettingsArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var atpSettingsResource = new Zia.AtpSettings("atpSettingsResource", new()
    {
        ActivexBlocked = false,
        ActivexCapture = false,
        AdSpywareSitesBlocked = false,
        AdSpywareSitesCapture = false,
        AlertForUnknownSuspiciousC2Traffic = false,
        AnonymizerBlocked = false,
        AnonymizerCapture = false,
        BitTorrentBlocked = false,
        BitTorrentCapture = false,
        BlockCountriesCapture = false,
        BlockedCountries = new[]
        {
            "string",
        },
        BrowserExploitsBlocked = false,
        BrowserExploitsCapture = false,
        CmdCtlServerBlocked = false,
        CmdCtlServerCapture = false,
        CmdCtlTrafficBlocked = false,
        CmdCtlTrafficCapture = false,
        CookieStealingBlocked = false,
        CookieStealingPcapEnabled = false,
        CryptoMiningBlocked = false,
        CryptoMiningCapture = false,
        DgaDomainsBlocked = false,
        DgaDomainsCapture = false,
        FileFormatVunerabilitesBlocked = false,
        FileFormatVunerabilitesCapture = false,
        GoogleTalkBlocked = false,
        GoogleTalkCapture = false,
        IrcTunnellingBlocked = false,
        IrcTunnellingCapture = false,
        KnownPhishingSitesBlocked = false,
        KnownPhishingSitesCapture = false,
        MaliciousUrlsCapture = false,
        MalwareSitesBlocked = false,
        MalwareSitesCapture = false,
        PotentialMaliciousRequestsBlocked = false,
        PotentialMaliciousRequestsCapture = false,
        RiskTolerance = 0,
        RiskToleranceCapture = false,
        SshTunnellingBlocked = false,
        SshTunnellingCapture = false,
        SuspectAdwareSpywareSitesBlocked = false,
        SuspectAdwareSpywareSitesCapture = false,
        SuspectedPhishingSitesBlocked = false,
        SuspectedPhishingSitesCapture = false,
        TorBlocked = false,
        TorCapture = false,
        WebSpamBlocked = false,
        WebSpamCapture = false,
    });
    
    example, err := zia.NewAtpSettings(ctx, "atpSettingsResource", &zia.AtpSettingsArgs{
    	ActivexBlocked:                     pulumi.Bool(false),
    	ActivexCapture:                     pulumi.Bool(false),
    	AdSpywareSitesBlocked:              pulumi.Bool(false),
    	AdSpywareSitesCapture:              pulumi.Bool(false),
    	AlertForUnknownSuspiciousC2Traffic: pulumi.Bool(false),
    	AnonymizerBlocked:                  pulumi.Bool(false),
    	AnonymizerCapture:                  pulumi.Bool(false),
    	BitTorrentBlocked:                  pulumi.Bool(false),
    	BitTorrentCapture:                  pulumi.Bool(false),
    	BlockCountriesCapture:              pulumi.Bool(false),
    	BlockedCountries: pulumi.StringArray{
    		pulumi.String("string"),
    	},
    	BrowserExploitsBlocked:            pulumi.Bool(false),
    	BrowserExploitsCapture:            pulumi.Bool(false),
    	CmdCtlServerBlocked:               pulumi.Bool(false),
    	CmdCtlServerCapture:               pulumi.Bool(false),
    	CmdCtlTrafficBlocked:              pulumi.Bool(false),
    	CmdCtlTrafficCapture:              pulumi.Bool(false),
    	CookieStealingBlocked:             pulumi.Bool(false),
    	CookieStealingPcapEnabled:         pulumi.Bool(false),
    	CryptoMiningBlocked:               pulumi.Bool(false),
    	CryptoMiningCapture:               pulumi.Bool(false),
    	DgaDomainsBlocked:                 pulumi.Bool(false),
    	DgaDomainsCapture:                 pulumi.Bool(false),
    	FileFormatVunerabilitesBlocked:    pulumi.Bool(false),
    	FileFormatVunerabilitesCapture:    pulumi.Bool(false),
    	GoogleTalkBlocked:                 pulumi.Bool(false),
    	GoogleTalkCapture:                 pulumi.Bool(false),
    	IrcTunnellingBlocked:              pulumi.Bool(false),
    	IrcTunnellingCapture:              pulumi.Bool(false),
    	KnownPhishingSitesBlocked:         pulumi.Bool(false),
    	KnownPhishingSitesCapture:         pulumi.Bool(false),
    	MaliciousUrlsCapture:              pulumi.Bool(false),
    	MalwareSitesBlocked:               pulumi.Bool(false),
    	MalwareSitesCapture:               pulumi.Bool(false),
    	PotentialMaliciousRequestsBlocked: pulumi.Bool(false),
    	PotentialMaliciousRequestsCapture: pulumi.Bool(false),
    	RiskTolerance:                     pulumi.Int(0),
    	RiskToleranceCapture:              pulumi.Bool(false),
    	SshTunnellingBlocked:              pulumi.Bool(false),
    	SshTunnellingCapture:              pulumi.Bool(false),
    	SuspectAdwareSpywareSitesBlocked:  pulumi.Bool(false),
    	SuspectAdwareSpywareSitesCapture:  pulumi.Bool(false),
    	SuspectedPhishingSitesBlocked:     pulumi.Bool(false),
    	SuspectedPhishingSitesCapture:     pulumi.Bool(false),
    	TorBlocked:                        pulumi.Bool(false),
    	TorCapture:                        pulumi.Bool(false),
    	WebSpamBlocked:                    pulumi.Bool(false),
    	WebSpamCapture:                    pulumi.Bool(false),
    })
    
    var atpSettingsResource = new AtpSettings("atpSettingsResource", AtpSettingsArgs.builder()
        .activexBlocked(false)
        .activexCapture(false)
        .adSpywareSitesBlocked(false)
        .adSpywareSitesCapture(false)
        .alertForUnknownSuspiciousC2Traffic(false)
        .anonymizerBlocked(false)
        .anonymizerCapture(false)
        .bitTorrentBlocked(false)
        .bitTorrentCapture(false)
        .blockCountriesCapture(false)
        .blockedCountries("string")
        .browserExploitsBlocked(false)
        .browserExploitsCapture(false)
        .cmdCtlServerBlocked(false)
        .cmdCtlServerCapture(false)
        .cmdCtlTrafficBlocked(false)
        .cmdCtlTrafficCapture(false)
        .cookieStealingBlocked(false)
        .cookieStealingPcapEnabled(false)
        .cryptoMiningBlocked(false)
        .cryptoMiningCapture(false)
        .dgaDomainsBlocked(false)
        .dgaDomainsCapture(false)
        .fileFormatVunerabilitesBlocked(false)
        .fileFormatVunerabilitesCapture(false)
        .googleTalkBlocked(false)
        .googleTalkCapture(false)
        .ircTunnellingBlocked(false)
        .ircTunnellingCapture(false)
        .knownPhishingSitesBlocked(false)
        .knownPhishingSitesCapture(false)
        .maliciousUrlsCapture(false)
        .malwareSitesBlocked(false)
        .malwareSitesCapture(false)
        .potentialMaliciousRequestsBlocked(false)
        .potentialMaliciousRequestsCapture(false)
        .riskTolerance(0)
        .riskToleranceCapture(false)
        .sshTunnellingBlocked(false)
        .sshTunnellingCapture(false)
        .suspectAdwareSpywareSitesBlocked(false)
        .suspectAdwareSpywareSitesCapture(false)
        .suspectedPhishingSitesBlocked(false)
        .suspectedPhishingSitesCapture(false)
        .torBlocked(false)
        .torCapture(false)
        .webSpamBlocked(false)
        .webSpamCapture(false)
        .build());
    
    atp_settings_resource = zia.AtpSettings("atpSettingsResource",
        activex_blocked=False,
        activex_capture=False,
        ad_spyware_sites_blocked=False,
        ad_spyware_sites_capture=False,
        alert_for_unknown_suspicious_c2_traffic=False,
        anonymizer_blocked=False,
        anonymizer_capture=False,
        bit_torrent_blocked=False,
        bit_torrent_capture=False,
        block_countries_capture=False,
        blocked_countries=["string"],
        browser_exploits_blocked=False,
        browser_exploits_capture=False,
        cmd_ctl_server_blocked=False,
        cmd_ctl_server_capture=False,
        cmd_ctl_traffic_blocked=False,
        cmd_ctl_traffic_capture=False,
        cookie_stealing_blocked=False,
        cookie_stealing_pcap_enabled=False,
        crypto_mining_blocked=False,
        crypto_mining_capture=False,
        dga_domains_blocked=False,
        dga_domains_capture=False,
        file_format_vunerabilites_blocked=False,
        file_format_vunerabilites_capture=False,
        google_talk_blocked=False,
        google_talk_capture=False,
        irc_tunnelling_blocked=False,
        irc_tunnelling_capture=False,
        known_phishing_sites_blocked=False,
        known_phishing_sites_capture=False,
        malicious_urls_capture=False,
        malware_sites_blocked=False,
        malware_sites_capture=False,
        potential_malicious_requests_blocked=False,
        potential_malicious_requests_capture=False,
        risk_tolerance=0,
        risk_tolerance_capture=False,
        ssh_tunnelling_blocked=False,
        ssh_tunnelling_capture=False,
        suspect_adware_spyware_sites_blocked=False,
        suspect_adware_spyware_sites_capture=False,
        suspected_phishing_sites_blocked=False,
        suspected_phishing_sites_capture=False,
        tor_blocked=False,
        tor_capture=False,
        web_spam_blocked=False,
        web_spam_capture=False)
    
    const atpSettingsResource = new zia.AtpSettings("atpSettingsResource", {
        activexBlocked: false,
        activexCapture: false,
        adSpywareSitesBlocked: false,
        adSpywareSitesCapture: false,
        alertForUnknownSuspiciousC2Traffic: false,
        anonymizerBlocked: false,
        anonymizerCapture: false,
        bitTorrentBlocked: false,
        bitTorrentCapture: false,
        blockCountriesCapture: false,
        blockedCountries: ["string"],
        browserExploitsBlocked: false,
        browserExploitsCapture: false,
        cmdCtlServerBlocked: false,
        cmdCtlServerCapture: false,
        cmdCtlTrafficBlocked: false,
        cmdCtlTrafficCapture: false,
        cookieStealingBlocked: false,
        cookieStealingPcapEnabled: false,
        cryptoMiningBlocked: false,
        cryptoMiningCapture: false,
        dgaDomainsBlocked: false,
        dgaDomainsCapture: false,
        fileFormatVunerabilitesBlocked: false,
        fileFormatVunerabilitesCapture: false,
        googleTalkBlocked: false,
        googleTalkCapture: false,
        ircTunnellingBlocked: false,
        ircTunnellingCapture: false,
        knownPhishingSitesBlocked: false,
        knownPhishingSitesCapture: false,
        maliciousUrlsCapture: false,
        malwareSitesBlocked: false,
        malwareSitesCapture: false,
        potentialMaliciousRequestsBlocked: false,
        potentialMaliciousRequestsCapture: false,
        riskTolerance: 0,
        riskToleranceCapture: false,
        sshTunnellingBlocked: false,
        sshTunnellingCapture: false,
        suspectAdwareSpywareSitesBlocked: false,
        suspectAdwareSpywareSitesCapture: false,
        suspectedPhishingSitesBlocked: false,
        suspectedPhishingSitesCapture: false,
        torBlocked: false,
        torCapture: false,
        webSpamBlocked: false,
        webSpamCapture: false,
    });
    
    type: zia:AtpSettings
    properties:
        activexBlocked: false
        activexCapture: false
        adSpywareSitesBlocked: false
        adSpywareSitesCapture: false
        alertForUnknownSuspiciousC2Traffic: false
        anonymizerBlocked: false
        anonymizerCapture: false
        bitTorrentBlocked: false
        bitTorrentCapture: false
        blockCountriesCapture: false
        blockedCountries:
            - string
        browserExploitsBlocked: false
        browserExploitsCapture: false
        cmdCtlServerBlocked: false
        cmdCtlServerCapture: false
        cmdCtlTrafficBlocked: false
        cmdCtlTrafficCapture: false
        cookieStealingBlocked: false
        cookieStealingPcapEnabled: false
        cryptoMiningBlocked: false
        cryptoMiningCapture: false
        dgaDomainsBlocked: false
        dgaDomainsCapture: false
        fileFormatVunerabilitesBlocked: false
        fileFormatVunerabilitesCapture: false
        googleTalkBlocked: false
        googleTalkCapture: false
        ircTunnellingBlocked: false
        ircTunnellingCapture: false
        knownPhishingSitesBlocked: false
        knownPhishingSitesCapture: false
        maliciousUrlsCapture: false
        malwareSitesBlocked: false
        malwareSitesCapture: false
        potentialMaliciousRequestsBlocked: false
        potentialMaliciousRequestsCapture: false
        riskTolerance: 0
        riskToleranceCapture: false
        sshTunnellingBlocked: false
        sshTunnellingCapture: false
        suspectAdwareSpywareSitesBlocked: false
        suspectAdwareSpywareSitesCapture: false
        suspectedPhishingSitesBlocked: false
        suspectedPhishingSitesCapture: false
        torBlocked: false
        torCapture: false
        webSpamBlocked: false
        webSpamCapture: false
    

    AtpSettings Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The AtpSettings resource accepts the following input properties:

    ActivexBlocked bool
    Block ActiveX controls.
    ActivexCapture bool
    Enable packet capture for ActiveX events.
    AdSpywareSitesBlocked bool
    Block adware/spyware sites.
    AdSpywareSitesCapture bool
    Enable packet capture for adware/spyware site events.
    AlertForUnknownSuspiciousC2Traffic bool
    Enable alerts for unknown or suspicious C2 traffic.
    AnonymizerBlocked bool
    Block anonymizers.
    AnonymizerCapture bool
    Enable packet capture for anonymizer events.
    BitTorrentBlocked bool
    Block BitTorrent traffic.
    BitTorrentCapture bool
    Enable packet capture for BitTorrent events.
    BlockCountriesCapture bool
    Enable packet capture for blocked countries events.
    BlockedCountries List<string>
    List of countries (ISO 3166-1 alpha-2 codes) to block.
    BrowserExploitsBlocked bool
    Block browser exploits.
    BrowserExploitsCapture bool
    Enable packet capture for browser exploit events.
    CmdCtlServerBlocked bool
    Block known command-and-control servers.
    CmdCtlServerCapture bool
    Enable packet capture for command-and-control server events.
    CmdCtlTrafficBlocked bool
    Block command-and-control traffic.
    CmdCtlTrafficCapture bool
    Enable packet capture for command-and-control traffic events.
    CookieStealingBlocked bool
    Block cookie stealing attempts.
    CookieStealingPcapEnabled bool
    Enable packet capture for cookie stealing events.
    CryptoMiningBlocked bool
    Block crypto mining traffic.
    CryptoMiningCapture bool
    Enable packet capture for crypto mining events.
    DgaDomainsBlocked bool
    Block domain generation algorithm (DGA) domains.
    DgaDomainsCapture bool
    Enable packet capture for DGA domain events.
    FileFormatVunerabilitesBlocked bool
    Block file format vulnerabilities.
    FileFormatVunerabilitesCapture bool
    Enable packet capture for file format vulnerability events.
    GoogleTalkBlocked bool
    Block Google Talk traffic.
    GoogleTalkCapture bool
    Enable packet capture for Google Talk events.
    IrcTunnellingBlocked bool
    Block IRC tunnelling.
    IrcTunnellingCapture bool
    Enable packet capture for IRC tunnelling events.
    KnownPhishingSitesBlocked bool
    Block known phishing sites.
    KnownPhishingSitesCapture bool
    Enable packet capture for known phishing site events.
    MaliciousUrlsCapture bool
    Enable packet capture for malicious URL events.
    MalwareSitesBlocked bool
    Block known malware sites.
    MalwareSitesCapture bool
    Enable packet capture for malware site events.
    PotentialMaliciousRequestsBlocked bool
    Block potentially malicious requests.
    PotentialMaliciousRequestsCapture bool
    Enable packet capture for potentially malicious request events.
    RiskTolerance int
    Risk tolerance level. Controls the sensitivity for detecting threats.
    RiskToleranceCapture bool
    Enable packet capture for risk tolerance events.
    SshTunnellingBlocked bool
    Block SSH tunnelling.
    SshTunnellingCapture bool
    Enable packet capture for SSH tunnelling events.
    SuspectAdwareSpywareSitesBlocked bool
    Block suspect adware/spyware sites.
    SuspectAdwareSpywareSitesCapture bool
    Enable packet capture for suspect adware/spyware site events.
    SuspectedPhishingSitesBlocked bool
    Block suspected phishing sites.
    SuspectedPhishingSitesCapture bool
    Enable packet capture for suspected phishing site events.
    TorBlocked bool
    Block Tor traffic.
    TorCapture bool
    Enable packet capture for Tor events.
    WebSpamBlocked bool
    Block web spam.
    WebSpamCapture bool
    Enable packet capture for web spam events.
    ActivexBlocked bool
    Block ActiveX controls.
    ActivexCapture bool
    Enable packet capture for ActiveX events.
    AdSpywareSitesBlocked bool
    Block adware/spyware sites.
    AdSpywareSitesCapture bool
    Enable packet capture for adware/spyware site events.
    AlertForUnknownSuspiciousC2Traffic bool
    Enable alerts for unknown or suspicious C2 traffic.
    AnonymizerBlocked bool
    Block anonymizers.
    AnonymizerCapture bool
    Enable packet capture for anonymizer events.
    BitTorrentBlocked bool
    Block BitTorrent traffic.
    BitTorrentCapture bool
    Enable packet capture for BitTorrent events.
    BlockCountriesCapture bool
    Enable packet capture for blocked countries events.
    BlockedCountries []string
    List of countries (ISO 3166-1 alpha-2 codes) to block.
    BrowserExploitsBlocked bool
    Block browser exploits.
    BrowserExploitsCapture bool
    Enable packet capture for browser exploit events.
    CmdCtlServerBlocked bool
    Block known command-and-control servers.
    CmdCtlServerCapture bool
    Enable packet capture for command-and-control server events.
    CmdCtlTrafficBlocked bool
    Block command-and-control traffic.
    CmdCtlTrafficCapture bool
    Enable packet capture for command-and-control traffic events.
    CookieStealingBlocked bool
    Block cookie stealing attempts.
    CookieStealingPcapEnabled bool
    Enable packet capture for cookie stealing events.
    CryptoMiningBlocked bool
    Block crypto mining traffic.
    CryptoMiningCapture bool
    Enable packet capture for crypto mining events.
    DgaDomainsBlocked bool
    Block domain generation algorithm (DGA) domains.
    DgaDomainsCapture bool
    Enable packet capture for DGA domain events.
    FileFormatVunerabilitesBlocked bool
    Block file format vulnerabilities.
    FileFormatVunerabilitesCapture bool
    Enable packet capture for file format vulnerability events.
    GoogleTalkBlocked bool
    Block Google Talk traffic.
    GoogleTalkCapture bool
    Enable packet capture for Google Talk events.
    IrcTunnellingBlocked bool
    Block IRC tunnelling.
    IrcTunnellingCapture bool
    Enable packet capture for IRC tunnelling events.
    KnownPhishingSitesBlocked bool
    Block known phishing sites.
    KnownPhishingSitesCapture bool
    Enable packet capture for known phishing site events.
    MaliciousUrlsCapture bool
    Enable packet capture for malicious URL events.
    MalwareSitesBlocked bool
    Block known malware sites.
    MalwareSitesCapture bool
    Enable packet capture for malware site events.
    PotentialMaliciousRequestsBlocked bool
    Block potentially malicious requests.
    PotentialMaliciousRequestsCapture bool
    Enable packet capture for potentially malicious request events.
    RiskTolerance int
    Risk tolerance level. Controls the sensitivity for detecting threats.
    RiskToleranceCapture bool
    Enable packet capture for risk tolerance events.
    SshTunnellingBlocked bool
    Block SSH tunnelling.
    SshTunnellingCapture bool
    Enable packet capture for SSH tunnelling events.
    SuspectAdwareSpywareSitesBlocked bool
    Block suspect adware/spyware sites.
    SuspectAdwareSpywareSitesCapture bool
    Enable packet capture for suspect adware/spyware site events.
    SuspectedPhishingSitesBlocked bool
    Block suspected phishing sites.
    SuspectedPhishingSitesCapture bool
    Enable packet capture for suspected phishing site events.
    TorBlocked bool
    Block Tor traffic.
    TorCapture bool
    Enable packet capture for Tor events.
    WebSpamBlocked bool
    Block web spam.
    WebSpamCapture bool
    Enable packet capture for web spam events.
    activexBlocked Boolean
    Block ActiveX controls.
    activexCapture Boolean
    Enable packet capture for ActiveX events.
    adSpywareSitesBlocked Boolean
    Block adware/spyware sites.
    adSpywareSitesCapture Boolean
    Enable packet capture for adware/spyware site events.
    alertForUnknownSuspiciousC2Traffic Boolean
    Enable alerts for unknown or suspicious C2 traffic.
    anonymizerBlocked Boolean
    Block anonymizers.
    anonymizerCapture Boolean
    Enable packet capture for anonymizer events.
    bitTorrentBlocked Boolean
    Block BitTorrent traffic.
    bitTorrentCapture Boolean
    Enable packet capture for BitTorrent events.
    blockCountriesCapture Boolean
    Enable packet capture for blocked countries events.
    blockedCountries List<String>
    List of countries (ISO 3166-1 alpha-2 codes) to block.
    browserExploitsBlocked Boolean
    Block browser exploits.
    browserExploitsCapture Boolean
    Enable packet capture for browser exploit events.
    cmdCtlServerBlocked Boolean
    Block known command-and-control servers.
    cmdCtlServerCapture Boolean
    Enable packet capture for command-and-control server events.
    cmdCtlTrafficBlocked Boolean
    Block command-and-control traffic.
    cmdCtlTrafficCapture Boolean
    Enable packet capture for command-and-control traffic events.
    cookieStealingBlocked Boolean
    Block cookie stealing attempts.
    cookieStealingPcapEnabled Boolean
    Enable packet capture for cookie stealing events.
    cryptoMiningBlocked Boolean
    Block crypto mining traffic.
    cryptoMiningCapture Boolean
    Enable packet capture for crypto mining events.
    dgaDomainsBlocked Boolean
    Block domain generation algorithm (DGA) domains.
    dgaDomainsCapture Boolean
    Enable packet capture for DGA domain events.
    fileFormatVunerabilitesBlocked Boolean
    Block file format vulnerabilities.
    fileFormatVunerabilitesCapture Boolean
    Enable packet capture for file format vulnerability events.
    googleTalkBlocked Boolean
    Block Google Talk traffic.
    googleTalkCapture Boolean
    Enable packet capture for Google Talk events.
    ircTunnellingBlocked Boolean
    Block IRC tunnelling.
    ircTunnellingCapture Boolean
    Enable packet capture for IRC tunnelling events.
    knownPhishingSitesBlocked Boolean
    Block known phishing sites.
    knownPhishingSitesCapture Boolean
    Enable packet capture for known phishing site events.
    maliciousUrlsCapture Boolean
    Enable packet capture for malicious URL events.
    malwareSitesBlocked Boolean
    Block known malware sites.
    malwareSitesCapture Boolean
    Enable packet capture for malware site events.
    potentialMaliciousRequestsBlocked Boolean
    Block potentially malicious requests.
    potentialMaliciousRequestsCapture Boolean
    Enable packet capture for potentially malicious request events.
    riskTolerance Integer
    Risk tolerance level. Controls the sensitivity for detecting threats.
    riskToleranceCapture Boolean
    Enable packet capture for risk tolerance events.
    sshTunnellingBlocked Boolean
    Block SSH tunnelling.
    sshTunnellingCapture Boolean
    Enable packet capture for SSH tunnelling events.
    suspectAdwareSpywareSitesBlocked Boolean
    Block suspect adware/spyware sites.
    suspectAdwareSpywareSitesCapture Boolean
    Enable packet capture for suspect adware/spyware site events.
    suspectedPhishingSitesBlocked Boolean
    Block suspected phishing sites.
    suspectedPhishingSitesCapture Boolean
    Enable packet capture for suspected phishing site events.
    torBlocked Boolean
    Block Tor traffic.
    torCapture Boolean
    Enable packet capture for Tor events.
    webSpamBlocked Boolean
    Block web spam.
    webSpamCapture Boolean
    Enable packet capture for web spam events.
    activexBlocked boolean
    Block ActiveX controls.
    activexCapture boolean
    Enable packet capture for ActiveX events.
    adSpywareSitesBlocked boolean
    Block adware/spyware sites.
    adSpywareSitesCapture boolean
    Enable packet capture for adware/spyware site events.
    alertForUnknownSuspiciousC2Traffic boolean
    Enable alerts for unknown or suspicious C2 traffic.
    anonymizerBlocked boolean
    Block anonymizers.
    anonymizerCapture boolean
    Enable packet capture for anonymizer events.
    bitTorrentBlocked boolean
    Block BitTorrent traffic.
    bitTorrentCapture boolean
    Enable packet capture for BitTorrent events.
    blockCountriesCapture boolean
    Enable packet capture for blocked countries events.
    blockedCountries string[]
    List of countries (ISO 3166-1 alpha-2 codes) to block.
    browserExploitsBlocked boolean
    Block browser exploits.
    browserExploitsCapture boolean
    Enable packet capture for browser exploit events.
    cmdCtlServerBlocked boolean
    Block known command-and-control servers.
    cmdCtlServerCapture boolean
    Enable packet capture for command-and-control server events.
    cmdCtlTrafficBlocked boolean
    Block command-and-control traffic.
    cmdCtlTrafficCapture boolean
    Enable packet capture for command-and-control traffic events.
    cookieStealingBlocked boolean
    Block cookie stealing attempts.
    cookieStealingPcapEnabled boolean
    Enable packet capture for cookie stealing events.
    cryptoMiningBlocked boolean
    Block crypto mining traffic.
    cryptoMiningCapture boolean
    Enable packet capture for crypto mining events.
    dgaDomainsBlocked boolean
    Block domain generation algorithm (DGA) domains.
    dgaDomainsCapture boolean
    Enable packet capture for DGA domain events.
    fileFormatVunerabilitesBlocked boolean
    Block file format vulnerabilities.
    fileFormatVunerabilitesCapture boolean
    Enable packet capture for file format vulnerability events.
    googleTalkBlocked boolean
    Block Google Talk traffic.
    googleTalkCapture boolean
    Enable packet capture for Google Talk events.
    ircTunnellingBlocked boolean
    Block IRC tunnelling.
    ircTunnellingCapture boolean
    Enable packet capture for IRC tunnelling events.
    knownPhishingSitesBlocked boolean
    Block known phishing sites.
    knownPhishingSitesCapture boolean
    Enable packet capture for known phishing site events.
    maliciousUrlsCapture boolean
    Enable packet capture for malicious URL events.
    malwareSitesBlocked boolean
    Block known malware sites.
    malwareSitesCapture boolean
    Enable packet capture for malware site events.
    potentialMaliciousRequestsBlocked boolean
    Block potentially malicious requests.
    potentialMaliciousRequestsCapture boolean
    Enable packet capture for potentially malicious request events.
    riskTolerance number
    Risk tolerance level. Controls the sensitivity for detecting threats.
    riskToleranceCapture boolean
    Enable packet capture for risk tolerance events.
    sshTunnellingBlocked boolean
    Block SSH tunnelling.
    sshTunnellingCapture boolean
    Enable packet capture for SSH tunnelling events.
    suspectAdwareSpywareSitesBlocked boolean
    Block suspect adware/spyware sites.
    suspectAdwareSpywareSitesCapture boolean
    Enable packet capture for suspect adware/spyware site events.
    suspectedPhishingSitesBlocked boolean
    Block suspected phishing sites.
    suspectedPhishingSitesCapture boolean
    Enable packet capture for suspected phishing site events.
    torBlocked boolean
    Block Tor traffic.
    torCapture boolean
    Enable packet capture for Tor events.
    webSpamBlocked boolean
    Block web spam.
    webSpamCapture boolean
    Enable packet capture for web spam events.
    activex_blocked bool
    Block ActiveX controls.
    activex_capture bool
    Enable packet capture for ActiveX events.
    ad_spyware_sites_blocked bool
    Block adware/spyware sites.
    ad_spyware_sites_capture bool
    Enable packet capture for adware/spyware site events.
    alert_for_unknown_suspicious_c2_traffic bool
    Enable alerts for unknown or suspicious C2 traffic.
    anonymizer_blocked bool
    Block anonymizers.
    anonymizer_capture bool
    Enable packet capture for anonymizer events.
    bit_torrent_blocked bool
    Block BitTorrent traffic.
    bit_torrent_capture bool
    Enable packet capture for BitTorrent events.
    block_countries_capture bool
    Enable packet capture for blocked countries events.
    blocked_countries Sequence[str]
    List of countries (ISO 3166-1 alpha-2 codes) to block.
    browser_exploits_blocked bool
    Block browser exploits.
    browser_exploits_capture bool
    Enable packet capture for browser exploit events.
    cmd_ctl_server_blocked bool
    Block known command-and-control servers.
    cmd_ctl_server_capture bool
    Enable packet capture for command-and-control server events.
    cmd_ctl_traffic_blocked bool
    Block command-and-control traffic.
    cmd_ctl_traffic_capture bool
    Enable packet capture for command-and-control traffic events.
    cookie_stealing_blocked bool
    Block cookie stealing attempts.
    cookie_stealing_pcap_enabled bool
    Enable packet capture for cookie stealing events.
    crypto_mining_blocked bool
    Block crypto mining traffic.
    crypto_mining_capture bool
    Enable packet capture for crypto mining events.
    dga_domains_blocked bool
    Block domain generation algorithm (DGA) domains.
    dga_domains_capture bool
    Enable packet capture for DGA domain events.
    file_format_vunerabilites_blocked bool
    Block file format vulnerabilities.
    file_format_vunerabilites_capture bool
    Enable packet capture for file format vulnerability events.
    google_talk_blocked bool
    Block Google Talk traffic.
    google_talk_capture bool
    Enable packet capture for Google Talk events.
    irc_tunnelling_blocked bool
    Block IRC tunnelling.
    irc_tunnelling_capture bool
    Enable packet capture for IRC tunnelling events.
    known_phishing_sites_blocked bool
    Block known phishing sites.
    known_phishing_sites_capture bool
    Enable packet capture for known phishing site events.
    malicious_urls_capture bool
    Enable packet capture for malicious URL events.
    malware_sites_blocked bool
    Block known malware sites.
    malware_sites_capture bool
    Enable packet capture for malware site events.
    potential_malicious_requests_blocked bool
    Block potentially malicious requests.
    potential_malicious_requests_capture bool
    Enable packet capture for potentially malicious request events.
    risk_tolerance int
    Risk tolerance level. Controls the sensitivity for detecting threats.
    risk_tolerance_capture bool
    Enable packet capture for risk tolerance events.
    ssh_tunnelling_blocked bool
    Block SSH tunnelling.
    ssh_tunnelling_capture bool
    Enable packet capture for SSH tunnelling events.
    suspect_adware_spyware_sites_blocked bool
    Block suspect adware/spyware sites.
    suspect_adware_spyware_sites_capture bool
    Enable packet capture for suspect adware/spyware site events.
    suspected_phishing_sites_blocked bool
    Block suspected phishing sites.
    suspected_phishing_sites_capture bool
    Enable packet capture for suspected phishing site events.
    tor_blocked bool
    Block Tor traffic.
    tor_capture bool
    Enable packet capture for Tor events.
    web_spam_blocked bool
    Block web spam.
    web_spam_capture bool
    Enable packet capture for web spam events.
    activexBlocked Boolean
    Block ActiveX controls.
    activexCapture Boolean
    Enable packet capture for ActiveX events.
    adSpywareSitesBlocked Boolean
    Block adware/spyware sites.
    adSpywareSitesCapture Boolean
    Enable packet capture for adware/spyware site events.
    alertForUnknownSuspiciousC2Traffic Boolean
    Enable alerts for unknown or suspicious C2 traffic.
    anonymizerBlocked Boolean
    Block anonymizers.
    anonymizerCapture Boolean
    Enable packet capture for anonymizer events.
    bitTorrentBlocked Boolean
    Block BitTorrent traffic.
    bitTorrentCapture Boolean
    Enable packet capture for BitTorrent events.
    blockCountriesCapture Boolean
    Enable packet capture for blocked countries events.
    blockedCountries List<String>
    List of countries (ISO 3166-1 alpha-2 codes) to block.
    browserExploitsBlocked Boolean
    Block browser exploits.
    browserExploitsCapture Boolean
    Enable packet capture for browser exploit events.
    cmdCtlServerBlocked Boolean
    Block known command-and-control servers.
    cmdCtlServerCapture Boolean
    Enable packet capture for command-and-control server events.
    cmdCtlTrafficBlocked Boolean
    Block command-and-control traffic.
    cmdCtlTrafficCapture Boolean
    Enable packet capture for command-and-control traffic events.
    cookieStealingBlocked Boolean
    Block cookie stealing attempts.
    cookieStealingPcapEnabled Boolean
    Enable packet capture for cookie stealing events.
    cryptoMiningBlocked Boolean
    Block crypto mining traffic.
    cryptoMiningCapture Boolean
    Enable packet capture for crypto mining events.
    dgaDomainsBlocked Boolean
    Block domain generation algorithm (DGA) domains.
    dgaDomainsCapture Boolean
    Enable packet capture for DGA domain events.
    fileFormatVunerabilitesBlocked Boolean
    Block file format vulnerabilities.
    fileFormatVunerabilitesCapture Boolean
    Enable packet capture for file format vulnerability events.
    googleTalkBlocked Boolean
    Block Google Talk traffic.
    googleTalkCapture Boolean
    Enable packet capture for Google Talk events.
    ircTunnellingBlocked Boolean
    Block IRC tunnelling.
    ircTunnellingCapture Boolean
    Enable packet capture for IRC tunnelling events.
    knownPhishingSitesBlocked Boolean
    Block known phishing sites.
    knownPhishingSitesCapture Boolean
    Enable packet capture for known phishing site events.
    maliciousUrlsCapture Boolean
    Enable packet capture for malicious URL events.
    malwareSitesBlocked Boolean
    Block known malware sites.
    malwareSitesCapture Boolean
    Enable packet capture for malware site events.
    potentialMaliciousRequestsBlocked Boolean
    Block potentially malicious requests.
    potentialMaliciousRequestsCapture Boolean
    Enable packet capture for potentially malicious request events.
    riskTolerance Number
    Risk tolerance level. Controls the sensitivity for detecting threats.
    riskToleranceCapture Boolean
    Enable packet capture for risk tolerance events.
    sshTunnellingBlocked Boolean
    Block SSH tunnelling.
    sshTunnellingCapture Boolean
    Enable packet capture for SSH tunnelling events.
    suspectAdwareSpywareSitesBlocked Boolean
    Block suspect adware/spyware sites.
    suspectAdwareSpywareSitesCapture Boolean
    Enable packet capture for suspect adware/spyware site events.
    suspectedPhishingSitesBlocked Boolean
    Block suspected phishing sites.
    suspectedPhishingSitesCapture Boolean
    Enable packet capture for suspected phishing site events.
    torBlocked Boolean
    Block Tor traffic.
    torCapture Boolean
    Enable packet capture for Tor events.
    webSpamBlocked Boolean
    Block web spam.
    webSpamCapture Boolean
    Enable packet capture for web spam events.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the AtpSettings resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    ResourceId string
    The internal resource identifier for the ATP settings.
    Id string
    The provider-assigned unique ID for this managed resource.
    ResourceId string
    The internal resource identifier for the ATP settings.
    id String
    The provider-assigned unique ID for this managed resource.
    resourceId String
    The internal resource identifier for the ATP settings.
    id string
    The provider-assigned unique ID for this managed resource.
    resourceId string
    The internal resource identifier for the ATP settings.
    id str
    The provider-assigned unique ID for this managed resource.
    resource_id str
    The internal resource identifier for the ATP settings.
    id String
    The provider-assigned unique ID for this managed resource.
    resourceId String
    The internal resource identifier for the ATP settings.

    Package Details

    Repository
    zia zscaler/pulumi-zia
    License
    zia logo
    Viewing docs for pulumi-resource-zia v1.3.8
    published on Friday, Mar 13, 2026 by Zscaler
      Try Pulumi Cloud free. Your team will thank you.