published on Friday, Mar 13, 2026 by Zscaler
published on Friday, Mar 13, 2026 by Zscaler
The zia_atp_settings resource manages Advanced Threat Protection (ATP) settings in the Zscaler Internet Access (ZIA) cloud service. ATP settings control which threat categories are blocked or captured (logged) for packet capture analysis. This is a singleton resource.
For more information, see the ZIA Advanced Threat Protection documentation.
This is a singleton resource. Import is not applicable.
Example Usage
Configure ATP Settings
Example coming soon!
Example coming soon!
Example coming soon!
import * as zia from "@bdzscaler/pulumi-zia";
const example = new zia.AtpSettings("example", {
malwareSitesBlocked: true,
malwareSitesCapture: true,
knownPhishingSitesBlocked: true,
knownPhishingSitesCapture: true,
cmdCtlServerBlocked: true,
cryptoMiningBlocked: true,
torBlocked: true,
riskTolerance: 0,
});
import zscaler_pulumi_zia as zia
example = zia.AtpSettings("example",
malware_sites_blocked=True,
malware_sites_capture=True,
known_phishing_sites_blocked=True,
known_phishing_sites_capture=True,
cmd_ctl_server_blocked=True,
crypto_mining_blocked=True,
tor_blocked=True,
risk_tolerance=0,
)
resources:
example:
type: zia:AtpSettings
properties:
malwareSitesBlocked: true
malwareSitesCapture: true
knownPhishingSitesBlocked: true
knownPhishingSitesCapture: true
cmdCtlServerBlocked: true
cryptoMiningBlocked: true
torBlocked: true
riskTolerance: 0
Create AtpSettings Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new AtpSettings(name: string, args?: AtpSettingsArgs, opts?: CustomResourceOptions);@overload
def AtpSettings(resource_name: str,
args: Optional[AtpSettingsArgs] = None,
opts: Optional[ResourceOptions] = None)
@overload
def AtpSettings(resource_name: str,
opts: Optional[ResourceOptions] = None,
activex_blocked: Optional[bool] = None,
activex_capture: Optional[bool] = None,
ad_spyware_sites_blocked: Optional[bool] = None,
ad_spyware_sites_capture: Optional[bool] = None,
alert_for_unknown_suspicious_c2_traffic: Optional[bool] = None,
anonymizer_blocked: Optional[bool] = None,
anonymizer_capture: Optional[bool] = None,
bit_torrent_blocked: Optional[bool] = None,
bit_torrent_capture: Optional[bool] = None,
block_countries_capture: Optional[bool] = None,
blocked_countries: Optional[Sequence[str]] = None,
browser_exploits_blocked: Optional[bool] = None,
browser_exploits_capture: Optional[bool] = None,
cmd_ctl_server_blocked: Optional[bool] = None,
cmd_ctl_server_capture: Optional[bool] = None,
cmd_ctl_traffic_blocked: Optional[bool] = None,
cmd_ctl_traffic_capture: Optional[bool] = None,
cookie_stealing_blocked: Optional[bool] = None,
cookie_stealing_pcap_enabled: Optional[bool] = None,
crypto_mining_blocked: Optional[bool] = None,
crypto_mining_capture: Optional[bool] = None,
dga_domains_blocked: Optional[bool] = None,
dga_domains_capture: Optional[bool] = None,
file_format_vunerabilites_blocked: Optional[bool] = None,
file_format_vunerabilites_capture: Optional[bool] = None,
google_talk_blocked: Optional[bool] = None,
google_talk_capture: Optional[bool] = None,
irc_tunnelling_blocked: Optional[bool] = None,
irc_tunnelling_capture: Optional[bool] = None,
known_phishing_sites_blocked: Optional[bool] = None,
known_phishing_sites_capture: Optional[bool] = None,
malicious_urls_capture: Optional[bool] = None,
malware_sites_blocked: Optional[bool] = None,
malware_sites_capture: Optional[bool] = None,
potential_malicious_requests_blocked: Optional[bool] = None,
potential_malicious_requests_capture: Optional[bool] = None,
risk_tolerance: Optional[int] = None,
risk_tolerance_capture: Optional[bool] = None,
ssh_tunnelling_blocked: Optional[bool] = None,
ssh_tunnelling_capture: Optional[bool] = None,
suspect_adware_spyware_sites_blocked: Optional[bool] = None,
suspect_adware_spyware_sites_capture: Optional[bool] = None,
suspected_phishing_sites_blocked: Optional[bool] = None,
suspected_phishing_sites_capture: Optional[bool] = None,
tor_blocked: Optional[bool] = None,
tor_capture: Optional[bool] = None,
web_spam_blocked: Optional[bool] = None,
web_spam_capture: Optional[bool] = None)func NewAtpSettings(ctx *Context, name string, args *AtpSettingsArgs, opts ...ResourceOption) (*AtpSettings, error)public AtpSettings(string name, AtpSettingsArgs? args = null, CustomResourceOptions? opts = null)
public AtpSettings(String name, AtpSettingsArgs args)
public AtpSettings(String name, AtpSettingsArgs args, CustomResourceOptions options)
type: zia:AtpSettings
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args AtpSettingsArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args AtpSettingsArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args AtpSettingsArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args AtpSettingsArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args AtpSettingsArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var atpSettingsResource = new Zia.AtpSettings("atpSettingsResource", new()
{
ActivexBlocked = false,
ActivexCapture = false,
AdSpywareSitesBlocked = false,
AdSpywareSitesCapture = false,
AlertForUnknownSuspiciousC2Traffic = false,
AnonymizerBlocked = false,
AnonymizerCapture = false,
BitTorrentBlocked = false,
BitTorrentCapture = false,
BlockCountriesCapture = false,
BlockedCountries = new[]
{
"string",
},
BrowserExploitsBlocked = false,
BrowserExploitsCapture = false,
CmdCtlServerBlocked = false,
CmdCtlServerCapture = false,
CmdCtlTrafficBlocked = false,
CmdCtlTrafficCapture = false,
CookieStealingBlocked = false,
CookieStealingPcapEnabled = false,
CryptoMiningBlocked = false,
CryptoMiningCapture = false,
DgaDomainsBlocked = false,
DgaDomainsCapture = false,
FileFormatVunerabilitesBlocked = false,
FileFormatVunerabilitesCapture = false,
GoogleTalkBlocked = false,
GoogleTalkCapture = false,
IrcTunnellingBlocked = false,
IrcTunnellingCapture = false,
KnownPhishingSitesBlocked = false,
KnownPhishingSitesCapture = false,
MaliciousUrlsCapture = false,
MalwareSitesBlocked = false,
MalwareSitesCapture = false,
PotentialMaliciousRequestsBlocked = false,
PotentialMaliciousRequestsCapture = false,
RiskTolerance = 0,
RiskToleranceCapture = false,
SshTunnellingBlocked = false,
SshTunnellingCapture = false,
SuspectAdwareSpywareSitesBlocked = false,
SuspectAdwareSpywareSitesCapture = false,
SuspectedPhishingSitesBlocked = false,
SuspectedPhishingSitesCapture = false,
TorBlocked = false,
TorCapture = false,
WebSpamBlocked = false,
WebSpamCapture = false,
});
example, err := zia.NewAtpSettings(ctx, "atpSettingsResource", &zia.AtpSettingsArgs{
ActivexBlocked: pulumi.Bool(false),
ActivexCapture: pulumi.Bool(false),
AdSpywareSitesBlocked: pulumi.Bool(false),
AdSpywareSitesCapture: pulumi.Bool(false),
AlertForUnknownSuspiciousC2Traffic: pulumi.Bool(false),
AnonymizerBlocked: pulumi.Bool(false),
AnonymizerCapture: pulumi.Bool(false),
BitTorrentBlocked: pulumi.Bool(false),
BitTorrentCapture: pulumi.Bool(false),
BlockCountriesCapture: pulumi.Bool(false),
BlockedCountries: pulumi.StringArray{
pulumi.String("string"),
},
BrowserExploitsBlocked: pulumi.Bool(false),
BrowserExploitsCapture: pulumi.Bool(false),
CmdCtlServerBlocked: pulumi.Bool(false),
CmdCtlServerCapture: pulumi.Bool(false),
CmdCtlTrafficBlocked: pulumi.Bool(false),
CmdCtlTrafficCapture: pulumi.Bool(false),
CookieStealingBlocked: pulumi.Bool(false),
CookieStealingPcapEnabled: pulumi.Bool(false),
CryptoMiningBlocked: pulumi.Bool(false),
CryptoMiningCapture: pulumi.Bool(false),
DgaDomainsBlocked: pulumi.Bool(false),
DgaDomainsCapture: pulumi.Bool(false),
FileFormatVunerabilitesBlocked: pulumi.Bool(false),
FileFormatVunerabilitesCapture: pulumi.Bool(false),
GoogleTalkBlocked: pulumi.Bool(false),
GoogleTalkCapture: pulumi.Bool(false),
IrcTunnellingBlocked: pulumi.Bool(false),
IrcTunnellingCapture: pulumi.Bool(false),
KnownPhishingSitesBlocked: pulumi.Bool(false),
KnownPhishingSitesCapture: pulumi.Bool(false),
MaliciousUrlsCapture: pulumi.Bool(false),
MalwareSitesBlocked: pulumi.Bool(false),
MalwareSitesCapture: pulumi.Bool(false),
PotentialMaliciousRequestsBlocked: pulumi.Bool(false),
PotentialMaliciousRequestsCapture: pulumi.Bool(false),
RiskTolerance: pulumi.Int(0),
RiskToleranceCapture: pulumi.Bool(false),
SshTunnellingBlocked: pulumi.Bool(false),
SshTunnellingCapture: pulumi.Bool(false),
SuspectAdwareSpywareSitesBlocked: pulumi.Bool(false),
SuspectAdwareSpywareSitesCapture: pulumi.Bool(false),
SuspectedPhishingSitesBlocked: pulumi.Bool(false),
SuspectedPhishingSitesCapture: pulumi.Bool(false),
TorBlocked: pulumi.Bool(false),
TorCapture: pulumi.Bool(false),
WebSpamBlocked: pulumi.Bool(false),
WebSpamCapture: pulumi.Bool(false),
})
var atpSettingsResource = new AtpSettings("atpSettingsResource", AtpSettingsArgs.builder()
.activexBlocked(false)
.activexCapture(false)
.adSpywareSitesBlocked(false)
.adSpywareSitesCapture(false)
.alertForUnknownSuspiciousC2Traffic(false)
.anonymizerBlocked(false)
.anonymizerCapture(false)
.bitTorrentBlocked(false)
.bitTorrentCapture(false)
.blockCountriesCapture(false)
.blockedCountries("string")
.browserExploitsBlocked(false)
.browserExploitsCapture(false)
.cmdCtlServerBlocked(false)
.cmdCtlServerCapture(false)
.cmdCtlTrafficBlocked(false)
.cmdCtlTrafficCapture(false)
.cookieStealingBlocked(false)
.cookieStealingPcapEnabled(false)
.cryptoMiningBlocked(false)
.cryptoMiningCapture(false)
.dgaDomainsBlocked(false)
.dgaDomainsCapture(false)
.fileFormatVunerabilitesBlocked(false)
.fileFormatVunerabilitesCapture(false)
.googleTalkBlocked(false)
.googleTalkCapture(false)
.ircTunnellingBlocked(false)
.ircTunnellingCapture(false)
.knownPhishingSitesBlocked(false)
.knownPhishingSitesCapture(false)
.maliciousUrlsCapture(false)
.malwareSitesBlocked(false)
.malwareSitesCapture(false)
.potentialMaliciousRequestsBlocked(false)
.potentialMaliciousRequestsCapture(false)
.riskTolerance(0)
.riskToleranceCapture(false)
.sshTunnellingBlocked(false)
.sshTunnellingCapture(false)
.suspectAdwareSpywareSitesBlocked(false)
.suspectAdwareSpywareSitesCapture(false)
.suspectedPhishingSitesBlocked(false)
.suspectedPhishingSitesCapture(false)
.torBlocked(false)
.torCapture(false)
.webSpamBlocked(false)
.webSpamCapture(false)
.build());
atp_settings_resource = zia.AtpSettings("atpSettingsResource",
activex_blocked=False,
activex_capture=False,
ad_spyware_sites_blocked=False,
ad_spyware_sites_capture=False,
alert_for_unknown_suspicious_c2_traffic=False,
anonymizer_blocked=False,
anonymizer_capture=False,
bit_torrent_blocked=False,
bit_torrent_capture=False,
block_countries_capture=False,
blocked_countries=["string"],
browser_exploits_blocked=False,
browser_exploits_capture=False,
cmd_ctl_server_blocked=False,
cmd_ctl_server_capture=False,
cmd_ctl_traffic_blocked=False,
cmd_ctl_traffic_capture=False,
cookie_stealing_blocked=False,
cookie_stealing_pcap_enabled=False,
crypto_mining_blocked=False,
crypto_mining_capture=False,
dga_domains_blocked=False,
dga_domains_capture=False,
file_format_vunerabilites_blocked=False,
file_format_vunerabilites_capture=False,
google_talk_blocked=False,
google_talk_capture=False,
irc_tunnelling_blocked=False,
irc_tunnelling_capture=False,
known_phishing_sites_blocked=False,
known_phishing_sites_capture=False,
malicious_urls_capture=False,
malware_sites_blocked=False,
malware_sites_capture=False,
potential_malicious_requests_blocked=False,
potential_malicious_requests_capture=False,
risk_tolerance=0,
risk_tolerance_capture=False,
ssh_tunnelling_blocked=False,
ssh_tunnelling_capture=False,
suspect_adware_spyware_sites_blocked=False,
suspect_adware_spyware_sites_capture=False,
suspected_phishing_sites_blocked=False,
suspected_phishing_sites_capture=False,
tor_blocked=False,
tor_capture=False,
web_spam_blocked=False,
web_spam_capture=False)
const atpSettingsResource = new zia.AtpSettings("atpSettingsResource", {
activexBlocked: false,
activexCapture: false,
adSpywareSitesBlocked: false,
adSpywareSitesCapture: false,
alertForUnknownSuspiciousC2Traffic: false,
anonymizerBlocked: false,
anonymizerCapture: false,
bitTorrentBlocked: false,
bitTorrentCapture: false,
blockCountriesCapture: false,
blockedCountries: ["string"],
browserExploitsBlocked: false,
browserExploitsCapture: false,
cmdCtlServerBlocked: false,
cmdCtlServerCapture: false,
cmdCtlTrafficBlocked: false,
cmdCtlTrafficCapture: false,
cookieStealingBlocked: false,
cookieStealingPcapEnabled: false,
cryptoMiningBlocked: false,
cryptoMiningCapture: false,
dgaDomainsBlocked: false,
dgaDomainsCapture: false,
fileFormatVunerabilitesBlocked: false,
fileFormatVunerabilitesCapture: false,
googleTalkBlocked: false,
googleTalkCapture: false,
ircTunnellingBlocked: false,
ircTunnellingCapture: false,
knownPhishingSitesBlocked: false,
knownPhishingSitesCapture: false,
maliciousUrlsCapture: false,
malwareSitesBlocked: false,
malwareSitesCapture: false,
potentialMaliciousRequestsBlocked: false,
potentialMaliciousRequestsCapture: false,
riskTolerance: 0,
riskToleranceCapture: false,
sshTunnellingBlocked: false,
sshTunnellingCapture: false,
suspectAdwareSpywareSitesBlocked: false,
suspectAdwareSpywareSitesCapture: false,
suspectedPhishingSitesBlocked: false,
suspectedPhishingSitesCapture: false,
torBlocked: false,
torCapture: false,
webSpamBlocked: false,
webSpamCapture: false,
});
type: zia:AtpSettings
properties:
activexBlocked: false
activexCapture: false
adSpywareSitesBlocked: false
adSpywareSitesCapture: false
alertForUnknownSuspiciousC2Traffic: false
anonymizerBlocked: false
anonymizerCapture: false
bitTorrentBlocked: false
bitTorrentCapture: false
blockCountriesCapture: false
blockedCountries:
- string
browserExploitsBlocked: false
browserExploitsCapture: false
cmdCtlServerBlocked: false
cmdCtlServerCapture: false
cmdCtlTrafficBlocked: false
cmdCtlTrafficCapture: false
cookieStealingBlocked: false
cookieStealingPcapEnabled: false
cryptoMiningBlocked: false
cryptoMiningCapture: false
dgaDomainsBlocked: false
dgaDomainsCapture: false
fileFormatVunerabilitesBlocked: false
fileFormatVunerabilitesCapture: false
googleTalkBlocked: false
googleTalkCapture: false
ircTunnellingBlocked: false
ircTunnellingCapture: false
knownPhishingSitesBlocked: false
knownPhishingSitesCapture: false
maliciousUrlsCapture: false
malwareSitesBlocked: false
malwareSitesCapture: false
potentialMaliciousRequestsBlocked: false
potentialMaliciousRequestsCapture: false
riskTolerance: 0
riskToleranceCapture: false
sshTunnellingBlocked: false
sshTunnellingCapture: false
suspectAdwareSpywareSitesBlocked: false
suspectAdwareSpywareSitesCapture: false
suspectedPhishingSitesBlocked: false
suspectedPhishingSitesCapture: false
torBlocked: false
torCapture: false
webSpamBlocked: false
webSpamCapture: false
AtpSettings Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The AtpSettings resource accepts the following input properties:
- Activex
Blocked bool - Block ActiveX controls.
- Activex
Capture bool - Enable packet capture for ActiveX events.
- Ad
Spyware boolSites Blocked - Block adware/spyware sites.
- Ad
Spyware boolSites Capture - Enable packet capture for adware/spyware site events.
- Alert
For boolUnknown Suspicious C2Traffic - Enable alerts for unknown or suspicious C2 traffic.
- Anonymizer
Blocked bool - Block anonymizers.
- Anonymizer
Capture bool - Enable packet capture for anonymizer events.
- Bit
Torrent boolBlocked - Block BitTorrent traffic.
- Bit
Torrent boolCapture - Enable packet capture for BitTorrent events.
- Block
Countries boolCapture - Enable packet capture for blocked countries events.
- Blocked
Countries List<string> - List of countries (ISO 3166-1 alpha-2 codes) to block.
- Browser
Exploits boolBlocked - Block browser exploits.
- Browser
Exploits boolCapture - Enable packet capture for browser exploit events.
- Cmd
Ctl boolServer Blocked - Block known command-and-control servers.
- Cmd
Ctl boolServer Capture - Enable packet capture for command-and-control server events.
- Cmd
Ctl boolTraffic Blocked - Block command-and-control traffic.
- Cmd
Ctl boolTraffic Capture - Enable packet capture for command-and-control traffic events.
- bool
- Block cookie stealing attempts.
- bool
- Enable packet capture for cookie stealing events.
- Crypto
Mining boolBlocked - Block crypto mining traffic.
- Crypto
Mining boolCapture - Enable packet capture for crypto mining events.
- Dga
Domains boolBlocked - Block domain generation algorithm (DGA) domains.
- Dga
Domains boolCapture - Enable packet capture for DGA domain events.
- File
Format boolVunerabilites Blocked - Block file format vulnerabilities.
- File
Format boolVunerabilites Capture - Enable packet capture for file format vulnerability events.
- Google
Talk boolBlocked - Block Google Talk traffic.
- Google
Talk boolCapture - Enable packet capture for Google Talk events.
- Irc
Tunnelling boolBlocked - Block IRC tunnelling.
- Irc
Tunnelling boolCapture - Enable packet capture for IRC tunnelling events.
- Known
Phishing boolSites Blocked - Block known phishing sites.
- Known
Phishing boolSites Capture - Enable packet capture for known phishing site events.
- Malicious
Urls boolCapture - Enable packet capture for malicious URL events.
- Malware
Sites boolBlocked - Block known malware sites.
- Malware
Sites boolCapture - Enable packet capture for malware site events.
- Potential
Malicious boolRequests Blocked - Block potentially malicious requests.
- Potential
Malicious boolRequests Capture - Enable packet capture for potentially malicious request events.
- Risk
Tolerance int - Risk tolerance level. Controls the sensitivity for detecting threats.
- Risk
Tolerance boolCapture - Enable packet capture for risk tolerance events.
- Ssh
Tunnelling boolBlocked - Block SSH tunnelling.
- Ssh
Tunnelling boolCapture - Enable packet capture for SSH tunnelling events.
- Suspect
Adware boolSpyware Sites Blocked - Block suspect adware/spyware sites.
- Suspect
Adware boolSpyware Sites Capture - Enable packet capture for suspect adware/spyware site events.
- Suspected
Phishing boolSites Blocked - Block suspected phishing sites.
- Suspected
Phishing boolSites Capture - Enable packet capture for suspected phishing site events.
- Tor
Blocked bool - Block Tor traffic.
- Tor
Capture bool - Enable packet capture for Tor events.
- Web
Spam boolBlocked - Block web spam.
- Web
Spam boolCapture - Enable packet capture for web spam events.
- Activex
Blocked bool - Block ActiveX controls.
- Activex
Capture bool - Enable packet capture for ActiveX events.
- Ad
Spyware boolSites Blocked - Block adware/spyware sites.
- Ad
Spyware boolSites Capture - Enable packet capture for adware/spyware site events.
- Alert
For boolUnknown Suspicious C2Traffic - Enable alerts for unknown or suspicious C2 traffic.
- Anonymizer
Blocked bool - Block anonymizers.
- Anonymizer
Capture bool - Enable packet capture for anonymizer events.
- Bit
Torrent boolBlocked - Block BitTorrent traffic.
- Bit
Torrent boolCapture - Enable packet capture for BitTorrent events.
- Block
Countries boolCapture - Enable packet capture for blocked countries events.
- Blocked
Countries []string - List of countries (ISO 3166-1 alpha-2 codes) to block.
- Browser
Exploits boolBlocked - Block browser exploits.
- Browser
Exploits boolCapture - Enable packet capture for browser exploit events.
- Cmd
Ctl boolServer Blocked - Block known command-and-control servers.
- Cmd
Ctl boolServer Capture - Enable packet capture for command-and-control server events.
- Cmd
Ctl boolTraffic Blocked - Block command-and-control traffic.
- Cmd
Ctl boolTraffic Capture - Enable packet capture for command-and-control traffic events.
- bool
- Block cookie stealing attempts.
- bool
- Enable packet capture for cookie stealing events.
- Crypto
Mining boolBlocked - Block crypto mining traffic.
- Crypto
Mining boolCapture - Enable packet capture for crypto mining events.
- Dga
Domains boolBlocked - Block domain generation algorithm (DGA) domains.
- Dga
Domains boolCapture - Enable packet capture for DGA domain events.
- File
Format boolVunerabilites Blocked - Block file format vulnerabilities.
- File
Format boolVunerabilites Capture - Enable packet capture for file format vulnerability events.
- Google
Talk boolBlocked - Block Google Talk traffic.
- Google
Talk boolCapture - Enable packet capture for Google Talk events.
- Irc
Tunnelling boolBlocked - Block IRC tunnelling.
- Irc
Tunnelling boolCapture - Enable packet capture for IRC tunnelling events.
- Known
Phishing boolSites Blocked - Block known phishing sites.
- Known
Phishing boolSites Capture - Enable packet capture for known phishing site events.
- Malicious
Urls boolCapture - Enable packet capture for malicious URL events.
- Malware
Sites boolBlocked - Block known malware sites.
- Malware
Sites boolCapture - Enable packet capture for malware site events.
- Potential
Malicious boolRequests Blocked - Block potentially malicious requests.
- Potential
Malicious boolRequests Capture - Enable packet capture for potentially malicious request events.
- Risk
Tolerance int - Risk tolerance level. Controls the sensitivity for detecting threats.
- Risk
Tolerance boolCapture - Enable packet capture for risk tolerance events.
- Ssh
Tunnelling boolBlocked - Block SSH tunnelling.
- Ssh
Tunnelling boolCapture - Enable packet capture for SSH tunnelling events.
- Suspect
Adware boolSpyware Sites Blocked - Block suspect adware/spyware sites.
- Suspect
Adware boolSpyware Sites Capture - Enable packet capture for suspect adware/spyware site events.
- Suspected
Phishing boolSites Blocked - Block suspected phishing sites.
- Suspected
Phishing boolSites Capture - Enable packet capture for suspected phishing site events.
- Tor
Blocked bool - Block Tor traffic.
- Tor
Capture bool - Enable packet capture for Tor events.
- Web
Spam boolBlocked - Block web spam.
- Web
Spam boolCapture - Enable packet capture for web spam events.
- activex
Blocked Boolean - Block ActiveX controls.
- activex
Capture Boolean - Enable packet capture for ActiveX events.
- ad
Spyware BooleanSites Blocked - Block adware/spyware sites.
- ad
Spyware BooleanSites Capture - Enable packet capture for adware/spyware site events.
- alert
For BooleanUnknown Suspicious C2Traffic - Enable alerts for unknown or suspicious C2 traffic.
- anonymizer
Blocked Boolean - Block anonymizers.
- anonymizer
Capture Boolean - Enable packet capture for anonymizer events.
- bit
Torrent BooleanBlocked - Block BitTorrent traffic.
- bit
Torrent BooleanCapture - Enable packet capture for BitTorrent events.
- block
Countries BooleanCapture - Enable packet capture for blocked countries events.
- blocked
Countries List<String> - List of countries (ISO 3166-1 alpha-2 codes) to block.
- browser
Exploits BooleanBlocked - Block browser exploits.
- browser
Exploits BooleanCapture - Enable packet capture for browser exploit events.
- cmd
Ctl BooleanServer Blocked - Block known command-and-control servers.
- cmd
Ctl BooleanServer Capture - Enable packet capture for command-and-control server events.
- cmd
Ctl BooleanTraffic Blocked - Block command-and-control traffic.
- cmd
Ctl BooleanTraffic Capture - Enable packet capture for command-and-control traffic events.
- Boolean
- Block cookie stealing attempts.
- Boolean
- Enable packet capture for cookie stealing events.
- crypto
Mining BooleanBlocked - Block crypto mining traffic.
- crypto
Mining BooleanCapture - Enable packet capture for crypto mining events.
- dga
Domains BooleanBlocked - Block domain generation algorithm (DGA) domains.
- dga
Domains BooleanCapture - Enable packet capture for DGA domain events.
- file
Format BooleanVunerabilites Blocked - Block file format vulnerabilities.
- file
Format BooleanVunerabilites Capture - Enable packet capture for file format vulnerability events.
- google
Talk BooleanBlocked - Block Google Talk traffic.
- google
Talk BooleanCapture - Enable packet capture for Google Talk events.
- irc
Tunnelling BooleanBlocked - Block IRC tunnelling.
- irc
Tunnelling BooleanCapture - Enable packet capture for IRC tunnelling events.
- known
Phishing BooleanSites Blocked - Block known phishing sites.
- known
Phishing BooleanSites Capture - Enable packet capture for known phishing site events.
- malicious
Urls BooleanCapture - Enable packet capture for malicious URL events.
- malware
Sites BooleanBlocked - Block known malware sites.
- malware
Sites BooleanCapture - Enable packet capture for malware site events.
- potential
Malicious BooleanRequests Blocked - Block potentially malicious requests.
- potential
Malicious BooleanRequests Capture - Enable packet capture for potentially malicious request events.
- risk
Tolerance Integer - Risk tolerance level. Controls the sensitivity for detecting threats.
- risk
Tolerance BooleanCapture - Enable packet capture for risk tolerance events.
- ssh
Tunnelling BooleanBlocked - Block SSH tunnelling.
- ssh
Tunnelling BooleanCapture - Enable packet capture for SSH tunnelling events.
- suspect
Adware BooleanSpyware Sites Blocked - Block suspect adware/spyware sites.
- suspect
Adware BooleanSpyware Sites Capture - Enable packet capture for suspect adware/spyware site events.
- suspected
Phishing BooleanSites Blocked - Block suspected phishing sites.
- suspected
Phishing BooleanSites Capture - Enable packet capture for suspected phishing site events.
- tor
Blocked Boolean - Block Tor traffic.
- tor
Capture Boolean - Enable packet capture for Tor events.
- web
Spam BooleanBlocked - Block web spam.
- web
Spam BooleanCapture - Enable packet capture for web spam events.
- activex
Blocked boolean - Block ActiveX controls.
- activex
Capture boolean - Enable packet capture for ActiveX events.
- ad
Spyware booleanSites Blocked - Block adware/spyware sites.
- ad
Spyware booleanSites Capture - Enable packet capture for adware/spyware site events.
- alert
For booleanUnknown Suspicious C2Traffic - Enable alerts for unknown or suspicious C2 traffic.
- anonymizer
Blocked boolean - Block anonymizers.
- anonymizer
Capture boolean - Enable packet capture for anonymizer events.
- bit
Torrent booleanBlocked - Block BitTorrent traffic.
- bit
Torrent booleanCapture - Enable packet capture for BitTorrent events.
- block
Countries booleanCapture - Enable packet capture for blocked countries events.
- blocked
Countries string[] - List of countries (ISO 3166-1 alpha-2 codes) to block.
- browser
Exploits booleanBlocked - Block browser exploits.
- browser
Exploits booleanCapture - Enable packet capture for browser exploit events.
- cmd
Ctl booleanServer Blocked - Block known command-and-control servers.
- cmd
Ctl booleanServer Capture - Enable packet capture for command-and-control server events.
- cmd
Ctl booleanTraffic Blocked - Block command-and-control traffic.
- cmd
Ctl booleanTraffic Capture - Enable packet capture for command-and-control traffic events.
- boolean
- Block cookie stealing attempts.
- boolean
- Enable packet capture for cookie stealing events.
- crypto
Mining booleanBlocked - Block crypto mining traffic.
- crypto
Mining booleanCapture - Enable packet capture for crypto mining events.
- dga
Domains booleanBlocked - Block domain generation algorithm (DGA) domains.
- dga
Domains booleanCapture - Enable packet capture for DGA domain events.
- file
Format booleanVunerabilites Blocked - Block file format vulnerabilities.
- file
Format booleanVunerabilites Capture - Enable packet capture for file format vulnerability events.
- google
Talk booleanBlocked - Block Google Talk traffic.
- google
Talk booleanCapture - Enable packet capture for Google Talk events.
- irc
Tunnelling booleanBlocked - Block IRC tunnelling.
- irc
Tunnelling booleanCapture - Enable packet capture for IRC tunnelling events.
- known
Phishing booleanSites Blocked - Block known phishing sites.
- known
Phishing booleanSites Capture - Enable packet capture for known phishing site events.
- malicious
Urls booleanCapture - Enable packet capture for malicious URL events.
- malware
Sites booleanBlocked - Block known malware sites.
- malware
Sites booleanCapture - Enable packet capture for malware site events.
- potential
Malicious booleanRequests Blocked - Block potentially malicious requests.
- potential
Malicious booleanRequests Capture - Enable packet capture for potentially malicious request events.
- risk
Tolerance number - Risk tolerance level. Controls the sensitivity for detecting threats.
- risk
Tolerance booleanCapture - Enable packet capture for risk tolerance events.
- ssh
Tunnelling booleanBlocked - Block SSH tunnelling.
- ssh
Tunnelling booleanCapture - Enable packet capture for SSH tunnelling events.
- suspect
Adware booleanSpyware Sites Blocked - Block suspect adware/spyware sites.
- suspect
Adware booleanSpyware Sites Capture - Enable packet capture for suspect adware/spyware site events.
- suspected
Phishing booleanSites Blocked - Block suspected phishing sites.
- suspected
Phishing booleanSites Capture - Enable packet capture for suspected phishing site events.
- tor
Blocked boolean - Block Tor traffic.
- tor
Capture boolean - Enable packet capture for Tor events.
- web
Spam booleanBlocked - Block web spam.
- web
Spam booleanCapture - Enable packet capture for web spam events.
- activex_
blocked bool - Block ActiveX controls.
- activex_
capture bool - Enable packet capture for ActiveX events.
- ad_
spyware_ boolsites_ blocked - Block adware/spyware sites.
- ad_
spyware_ boolsites_ capture - Enable packet capture for adware/spyware site events.
- alert_
for_ boolunknown_ suspicious_ c2_ traffic - Enable alerts for unknown or suspicious C2 traffic.
- anonymizer_
blocked bool - Block anonymizers.
- anonymizer_
capture bool - Enable packet capture for anonymizer events.
- bit_
torrent_ boolblocked - Block BitTorrent traffic.
- bit_
torrent_ boolcapture - Enable packet capture for BitTorrent events.
- block_
countries_ boolcapture - Enable packet capture for blocked countries events.
- blocked_
countries Sequence[str] - List of countries (ISO 3166-1 alpha-2 codes) to block.
- browser_
exploits_ boolblocked - Block browser exploits.
- browser_
exploits_ boolcapture - Enable packet capture for browser exploit events.
- cmd_
ctl_ boolserver_ blocked - Block known command-and-control servers.
- cmd_
ctl_ boolserver_ capture - Enable packet capture for command-and-control server events.
- cmd_
ctl_ booltraffic_ blocked - Block command-and-control traffic.
- cmd_
ctl_ booltraffic_ capture - Enable packet capture for command-and-control traffic events.
- bool
- Block cookie stealing attempts.
- bool
- Enable packet capture for cookie stealing events.
- crypto_
mining_ boolblocked - Block crypto mining traffic.
- crypto_
mining_ boolcapture - Enable packet capture for crypto mining events.
- dga_
domains_ boolblocked - Block domain generation algorithm (DGA) domains.
- dga_
domains_ boolcapture - Enable packet capture for DGA domain events.
- file_
format_ boolvunerabilites_ blocked - Block file format vulnerabilities.
- file_
format_ boolvunerabilites_ capture - Enable packet capture for file format vulnerability events.
- google_
talk_ boolblocked - Block Google Talk traffic.
- google_
talk_ boolcapture - Enable packet capture for Google Talk events.
- irc_
tunnelling_ boolblocked - Block IRC tunnelling.
- irc_
tunnelling_ boolcapture - Enable packet capture for IRC tunnelling events.
- known_
phishing_ boolsites_ blocked - Block known phishing sites.
- known_
phishing_ boolsites_ capture - Enable packet capture for known phishing site events.
- malicious_
urls_ boolcapture - Enable packet capture for malicious URL events.
- malware_
sites_ boolblocked - Block known malware sites.
- malware_
sites_ boolcapture - Enable packet capture for malware site events.
- potential_
malicious_ boolrequests_ blocked - Block potentially malicious requests.
- potential_
malicious_ boolrequests_ capture - Enable packet capture for potentially malicious request events.
- risk_
tolerance int - Risk tolerance level. Controls the sensitivity for detecting threats.
- risk_
tolerance_ boolcapture - Enable packet capture for risk tolerance events.
- ssh_
tunnelling_ boolblocked - Block SSH tunnelling.
- ssh_
tunnelling_ boolcapture - Enable packet capture for SSH tunnelling events.
- suspect_
adware_ boolspyware_ sites_ blocked - Block suspect adware/spyware sites.
- suspect_
adware_ boolspyware_ sites_ capture - Enable packet capture for suspect adware/spyware site events.
- suspected_
phishing_ boolsites_ blocked - Block suspected phishing sites.
- suspected_
phishing_ boolsites_ capture - Enable packet capture for suspected phishing site events.
- tor_
blocked bool - Block Tor traffic.
- tor_
capture bool - Enable packet capture for Tor events.
- web_
spam_ boolblocked - Block web spam.
- web_
spam_ boolcapture - Enable packet capture for web spam events.
- activex
Blocked Boolean - Block ActiveX controls.
- activex
Capture Boolean - Enable packet capture for ActiveX events.
- ad
Spyware BooleanSites Blocked - Block adware/spyware sites.
- ad
Spyware BooleanSites Capture - Enable packet capture for adware/spyware site events.
- alert
For BooleanUnknown Suspicious C2Traffic - Enable alerts for unknown or suspicious C2 traffic.
- anonymizer
Blocked Boolean - Block anonymizers.
- anonymizer
Capture Boolean - Enable packet capture for anonymizer events.
- bit
Torrent BooleanBlocked - Block BitTorrent traffic.
- bit
Torrent BooleanCapture - Enable packet capture for BitTorrent events.
- block
Countries BooleanCapture - Enable packet capture for blocked countries events.
- blocked
Countries List<String> - List of countries (ISO 3166-1 alpha-2 codes) to block.
- browser
Exploits BooleanBlocked - Block browser exploits.
- browser
Exploits BooleanCapture - Enable packet capture for browser exploit events.
- cmd
Ctl BooleanServer Blocked - Block known command-and-control servers.
- cmd
Ctl BooleanServer Capture - Enable packet capture for command-and-control server events.
- cmd
Ctl BooleanTraffic Blocked - Block command-and-control traffic.
- cmd
Ctl BooleanTraffic Capture - Enable packet capture for command-and-control traffic events.
- Boolean
- Block cookie stealing attempts.
- Boolean
- Enable packet capture for cookie stealing events.
- crypto
Mining BooleanBlocked - Block crypto mining traffic.
- crypto
Mining BooleanCapture - Enable packet capture for crypto mining events.
- dga
Domains BooleanBlocked - Block domain generation algorithm (DGA) domains.
- dga
Domains BooleanCapture - Enable packet capture for DGA domain events.
- file
Format BooleanVunerabilites Blocked - Block file format vulnerabilities.
- file
Format BooleanVunerabilites Capture - Enable packet capture for file format vulnerability events.
- google
Talk BooleanBlocked - Block Google Talk traffic.
- google
Talk BooleanCapture - Enable packet capture for Google Talk events.
- irc
Tunnelling BooleanBlocked - Block IRC tunnelling.
- irc
Tunnelling BooleanCapture - Enable packet capture for IRC tunnelling events.
- known
Phishing BooleanSites Blocked - Block known phishing sites.
- known
Phishing BooleanSites Capture - Enable packet capture for known phishing site events.
- malicious
Urls BooleanCapture - Enable packet capture for malicious URL events.
- malware
Sites BooleanBlocked - Block known malware sites.
- malware
Sites BooleanCapture - Enable packet capture for malware site events.
- potential
Malicious BooleanRequests Blocked - Block potentially malicious requests.
- potential
Malicious BooleanRequests Capture - Enable packet capture for potentially malicious request events.
- risk
Tolerance Number - Risk tolerance level. Controls the sensitivity for detecting threats.
- risk
Tolerance BooleanCapture - Enable packet capture for risk tolerance events.
- ssh
Tunnelling BooleanBlocked - Block SSH tunnelling.
- ssh
Tunnelling BooleanCapture - Enable packet capture for SSH tunnelling events.
- suspect
Adware BooleanSpyware Sites Blocked - Block suspect adware/spyware sites.
- suspect
Adware BooleanSpyware Sites Capture - Enable packet capture for suspect adware/spyware site events.
- suspected
Phishing BooleanSites Blocked - Block suspected phishing sites.
- suspected
Phishing BooleanSites Capture - Enable packet capture for suspected phishing site events.
- tor
Blocked Boolean - Block Tor traffic.
- tor
Capture Boolean - Enable packet capture for Tor events.
- web
Spam BooleanBlocked - Block web spam.
- web
Spam BooleanCapture - Enable packet capture for web spam events.
Outputs
All input properties are implicitly available as output properties. Additionally, the AtpSettings resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Resource
Id string - The internal resource identifier for the ATP settings.
- Id string
- The provider-assigned unique ID for this managed resource.
- Resource
Id string - The internal resource identifier for the ATP settings.
- id String
- The provider-assigned unique ID for this managed resource.
- resource
Id String - The internal resource identifier for the ATP settings.
- id string
- The provider-assigned unique ID for this managed resource.
- resource
Id string - The internal resource identifier for the ATP settings.
- id str
- The provider-assigned unique ID for this managed resource.
- resource_
id str - The internal resource identifier for the ATP settings.
- id String
- The provider-assigned unique ID for this managed resource.
- resource
Id String - The internal resource identifier for the ATP settings.
Package Details
- Repository
- zia zscaler/pulumi-zia
- License
published on Friday, Mar 13, 2026 by Zscaler
