Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi IDP Pulumi Cloud Packages Tutorials
  1. Packages
  2. Zscaler Internet Access (ZIA)
  3. API Docs
  4. getFirewallDnsRule
Zscaler Internet Access v1.0.1 published on Friday, Jun 6, 2025 by Zscaler
zscaler/pulumi-zia

zia.getFirewallDnsRule

Explore with Pulumi AI

zia logo
Zscaler Internet Access v1.0.1 published on Friday, Jun 6, 2025 by Zscaler
zscaler/pulumi-zia
    Deprecated: zia.index/getfirewalldnsrule.getFirewallDnsRule has been deprecated in favor of zia.index/getfirewalldnsrules.getFirewallDNSRules

    Use the zia_firewall_dns_rule data source to get information about a cloud firewall DNS rule available in the Zscaler Internet Access.

    Example Usage

    # ZIA Firewall DNS Rule by name
data "zia_firewall_dns_rule" "this" {
    name = "Default Cloud IPS Rule"
}

    # ZIA Firewall DNS Rule by ID
data "zia_firewall_dns_rule" "this" {
    id = "12365478"
}

    Using getFirewallDnsRule

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getFirewallDnsRule(args: GetFirewallDnsRuleArgs, opts?: InvokeOptions): Promise<GetFirewallDnsRuleResult>
function getFirewallDnsRuleOutput(args: GetFirewallDnsRuleOutputArgs, opts?: InvokeOptions): Output<GetFirewallDnsRuleResult>
    def get_firewall_dns_rule(id: Optional[int] = None,
                          name: Optional[str] = None,
                          opts: Optional[InvokeOptions] = None) -> GetFirewallDnsRuleResult
def get_firewall_dns_rule_output(id: Optional[pulumi.Input[int]] = None,
                          name: Optional[pulumi.Input[str]] = None,
                          opts: Optional[InvokeOptions] = None) -> Output[GetFirewallDnsRuleResult]
    func GetFirewallDnsRule(ctx *Context, args *GetFirewallDnsRuleArgs, opts ...InvokeOption) (*GetFirewallDnsRuleResult, error)
func GetFirewallDnsRuleOutput(ctx *Context, args *GetFirewallDnsRuleOutputArgs, opts ...InvokeOption) GetFirewallDnsRuleResultOutput

    > Note: This function is named GetFirewallDnsRule in the Go SDK.

    public static class GetFirewallDnsRule 
{
    public static Task<GetFirewallDnsRuleResult> InvokeAsync(GetFirewallDnsRuleArgs args, InvokeOptions? opts = null)
    public static Output<GetFirewallDnsRuleResult> Invoke(GetFirewallDnsRuleInvokeArgs args, InvokeOptions? opts = null)
}
    public static CompletableFuture<GetFirewallDnsRuleResult> getFirewallDnsRule(GetFirewallDnsRuleArgs args, InvokeOptions options)
public static Output<GetFirewallDnsRuleResult> getFirewallDnsRule(GetFirewallDnsRuleArgs args, InvokeOptions options)

    fn::invoke:
  function: zia:index/getFirewallDnsRule:getFirewallDnsRule
  arguments:
    # arguments dictionary

    The following arguments are supported:

    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    id Integer
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule
    id number
    Unique identifier for the Firewall Filtering policy rule
    name string
    Name of the Firewall Filtering policy rule
    id int
    Unique identifier for the Firewall Filtering policy rule
    name str
    Name of the Firewall Filtering policy rule
    id Number
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule

    getFirewallDnsRule Result

    The following output properties are available:

    Action string
    (String) The action configured for the rule that must take place if the traffic matches the rule criteria, such as allowing or blocking the traffic or bypassing the rule. The following actions are accepted: ALLOW, BLOCK, REDIR_REQ, REDIR_RES, REDIR_ZPA, REDIR_REQ_DOH, REDIR_REQ_KEEP_SENDER, REDIR_REQ_TCP, REDIR_REQ_UDP, BLOCK_WITH_RESPONSE
    ApplicationGroups List<zscaler.PulumiPackage.Zia.Outputs.GetFirewallDnsRuleApplicationGroup>
    (List of Objects) DNS application groups to which the rule applies
    Applications List<string>
    (Set of Strings) DNS tunnels and network applications to which the rule applies. To retrieve the available list of DNS tunnels applications use the data source: zia.getCloudApplications with the app_class value DNS_OVER_HTTPS. See example:
    BlockResponseCode string
    (String) Specifies the DNS response code to be sent to the client when the action is configured to block and send response code. Supported values are: ANY, NONE, FORMERR, SERVFAIL, NXDOMAIN, NOTIMP, REFUSED, YXDOMAIN, YXRRSET, NXRRSET, NOTAUTH, NOTZONE, BADVERS, BADKEY, BADTIME, BADMODE, BADNAME, BADALG, BADTRUNC, UNSUPPORTED, BYPASS, INT_ERROR, SRV_TIMEOUT, EMPTY_RESP, REQ_BLOCKED, ADMIN_DROP, WCDN_TIMEOUT, IPS_BLOCK, FQDN_RESOLV_FAIL
    CapturePcap bool
    (Boolean) Value that indicates whether packet capture (PCAP) is enabled or not
    DefaultRule bool
    (Boolean) Value that indicates whether the rule is the Default Cloud DNS Rule or not
    Departments List<zscaler.PulumiPackage.Zia.Outputs.GetFirewallDnsRuleDepartment>
    (List of Objects) Apply to any number of departments When not used it implies Any to apply the rule to all departments.
    Description string
    (String) Enter additional notes or information. The description cannot exceed 10,240 characters.
    DestAddresses List<string>
    (Set of String) Destination IP addresses or FQDNs to which the rule applies. If not set, the rule is not restricted to a specific destination IP address. Each IP entry can be a single IP address, CIDR (e.g., 10.10.33.0/24), or an IP range (e.g., 10.10.33.1-10.10.33.10).
    DestCountries List<string>
    (Set of String) Identify destinations based on the location of a server, select Any to apply the rule to all countries or select the countries to which you want to control traffic. NOTE: Provide a 2 letter ISO3166 Alpha2 Country code. i.e "US", "CA"
    DestIpCategories List<string>
    (Set of String) identify destinations based on the URL category of the domain, select Any to apply the rule to all categories or select the specific categories you want to control.
    DestIpGroups List<zscaler.PulumiPackage.Zia.Outputs.GetFirewallDnsRuleDestIpGroup>
    ** - (List of Objects) Any number of destination IP address groups that you want to control with this rule.
    DestIpv6Groups List<zscaler.PulumiPackage.Zia.Outputs.GetFirewallDnsRuleDestIpv6Group>
    DeviceGroups List<zscaler.PulumiPackage.Zia.Outputs.GetFirewallDnsRuleDeviceGroup>
    (List of Objects) Device groups to which the rule applies. This field is applicable for devices that are managed using Zscaler Client Connector. If no value is set, this field is ignored during the policy evaluation.
    Devices List<zscaler.PulumiPackage.Zia.Outputs.GetFirewallDnsRuleDevice>
    (List of Objects) Devices to which the rule applies. This field is applicable for devices that are managed using Zscaler Client Connector. If no value is set, this field is ignored during the policy evaluation.
    DnsRuleRequestTypes List<string>
    (Set of Strings) DNS request types to which the rule applies. Supportedn values are: A, NS, MD, MF, CNAME, SOA, MB, MG, MR, NULL, WKS, PTR, HINFO, MINFO, MX, TXT, RP, AFSDB, X25, ISDN, RT, NSAP, NSAP_PTR, SIG, KEY, PX, GPOS, AAAA, LOC, NXT, EID, NIMLOC, SRV, ATMA, NAPTR, KX, CERT, A6, DNAME, SINK, OPT, APL, DS, SSHFP, PSECKEF, RRSIG, NSEC, DNSKEY, DHCID, NSEC3, NSEC3PARAM, TLSA, HIP, NINFO, RKEY, TALINK, CDS, CDNSKEY, OPENPGPKEY, CSYNC, ZONEMD, SVCB, HTTPS,
    Groups List<zscaler.PulumiPackage.Zia.Outputs.GetFirewallDnsRuleGroup>
    (List of Objects) You can manually select up to 8 groups. When not used it implies Any to apply the rule to all groups.
    Id int
    (Integer) Identifier that uniquely identifies an entity
    Labels List<zscaler.PulumiPackage.Zia.Outputs.GetFirewallDnsRuleLabel>
    (List of Objects) Labels that are applicable to the rule.
    LastModifiedBies List<zscaler.PulumiPackage.Zia.Outputs.GetFirewallDnsRuleLastModifiedBy>
    LastModifiedTime int
    LocationGroups List<zscaler.PulumiPackage.Zia.Outputs.GetFirewallDnsRuleLocationGroup>
    (List of Objects)You can manually select up to 32 location groups. When not used it implies Any to apply the rule to all location groups.
    Locations List<zscaler.PulumiPackage.Zia.Outputs.GetFirewallDnsRuleLocation>
    (List of Objects) You can manually select up to 8 locations. When not used it implies Any to apply the rule to all groups.
    Name string
    (string) The configured name of the entity
    Order int
    (Integer) Policy rules are evaluated in ascending numerical order (Rule 1 before Rule 2, and so on), and the Rule Order reflects this rule's place in the order.
    Predefined bool
    (Boolean) A Boolean field that indicates that the rule is predefined by using a true value
    Protocols List<string>
    (Set of Strings) The protocols to which the rules applies. Supported Values: ANY_RULE, SMRULEF_CASCADING_ALLOWED, TCP_RULE, UDP_RULE, DOHTTPS_RULE
    Rank int
    (Integer) By default, the admin ranking is disabled. To use this feature, you must enable admin rank. The default value is 7.
    RedirectIp string
    (String) The IP address to which the traffic will be redirected to when the DNAT rule is triggered. If not set, no redirection is done to specific IP addresses. Only supported when the action is REDIR_REQ
    ResCategories List<string>
    (Set of String) URL categories associated with resolved IP addresses to which the rule applies. If not set, the rule is not restricted to a specific URL category.
    SourceCountries List<string>
    (Set of String) The countries of origin of traffic for which the rule is applicable. If not set, the rule is not restricted to specific source countries. NOTE: Provide a 2 letter ISO3166 Alpha2 Country code. i.e "US", "CA"
    SrcIpGroups List<zscaler.PulumiPackage.Zia.Outputs.GetFirewallDnsRuleSrcIpGroup>
    (List of Objects)Source IP address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IP address group.
    SrcIps List<string>
    (Set of String) Source IP addresses or FQDNs to which the rule applies. If not set, the rule is not restricted to a specific source IP address. Each IP entry can be a single IP address, CIDR (e.g., 10.10.33.0/24), or an IP range (e.g., 10.10.33.1-10.10.33.10).
    SrcIpv6Groups List<zscaler.PulumiPackage.Zia.Outputs.GetFirewallDnsRuleSrcIpv6Group>
    (List of Objects) Source IPv6 address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IPv6 address group.
    State string
    (String) An enabled rule is actively enforced. A disabled rule is not actively enforced but does not lose its place in the Rule Order. The service skips it and moves to the next rule.
    TimeWindows List<zscaler.PulumiPackage.Zia.Outputs.GetFirewallDnsRuleTimeWindow>
    (List of Objects) You can manually select up to 1 time intervals. When not used it implies always to apply the rule to all time intervals.
    Users List<zscaler.PulumiPackage.Zia.Outputs.GetFirewallDnsRuleUser>
    (List of Objects) You can manually select up to 4 general and/or special users. When not used it implies Any to apply the rule to all users.
    Action string
    (String) The action configured for the rule that must take place if the traffic matches the rule criteria, such as allowing or blocking the traffic or bypassing the rule. The following actions are accepted: ALLOW, BLOCK, REDIR_REQ, REDIR_RES, REDIR_ZPA, REDIR_REQ_DOH, REDIR_REQ_KEEP_SENDER, REDIR_REQ_TCP, REDIR_REQ_UDP, BLOCK_WITH_RESPONSE
    ApplicationGroups []GetFirewallDnsRuleApplicationGroup
    (List of Objects) DNS application groups to which the rule applies
    Applications []string
    (Set of Strings) DNS tunnels and network applications to which the rule applies. To retrieve the available list of DNS tunnels applications use the data source: zia.getCloudApplications with the app_class value DNS_OVER_HTTPS. See example:
    BlockResponseCode string
    (String) Specifies the DNS response code to be sent to the client when the action is configured to block and send response code. Supported values are: ANY, NONE, FORMERR, SERVFAIL, NXDOMAIN, NOTIMP, REFUSED, YXDOMAIN, YXRRSET, NXRRSET, NOTAUTH, NOTZONE, BADVERS, BADKEY, BADTIME, BADMODE, BADNAME, BADALG, BADTRUNC, UNSUPPORTED, BYPASS, INT_ERROR, SRV_TIMEOUT, EMPTY_RESP, REQ_BLOCKED, ADMIN_DROP, WCDN_TIMEOUT, IPS_BLOCK, FQDN_RESOLV_FAIL
    CapturePcap bool
    (Boolean) Value that indicates whether packet capture (PCAP) is enabled or not
    DefaultRule bool
    (Boolean) Value that indicates whether the rule is the Default Cloud DNS Rule or not
    Departments []GetFirewallDnsRuleDepartment
    (List of Objects) Apply to any number of departments When not used it implies Any to apply the rule to all departments.
    Description string
    (String) Enter additional notes or information. The description cannot exceed 10,240 characters.
    DestAddresses []string
    (Set of String) Destination IP addresses or FQDNs to which the rule applies. If not set, the rule is not restricted to a specific destination IP address. Each IP entry can be a single IP address, CIDR (e.g., 10.10.33.0/24), or an IP range (e.g., 10.10.33.1-10.10.33.10).
    DestCountries []string
    (Set of String) Identify destinations based on the location of a server, select Any to apply the rule to all countries or select the countries to which you want to control traffic. NOTE: Provide a 2 letter ISO3166 Alpha2 Country code. i.e "US", "CA"
    DestIpCategories []string
    (Set of String) identify destinations based on the URL category of the domain, select Any to apply the rule to all categories or select the specific categories you want to control.
    DestIpGroups []GetFirewallDnsRuleDestIpGroup
    ** - (List of Objects) Any number of destination IP address groups that you want to control with this rule.
    DestIpv6Groups []GetFirewallDnsRuleDestIpv6Group
    DeviceGroups []GetFirewallDnsRuleDeviceGroup
    (List of Objects) Device groups to which the rule applies. This field is applicable for devices that are managed using Zscaler Client Connector. If no value is set, this field is ignored during the policy evaluation.
    Devices []GetFirewallDnsRuleDevice
    (List of Objects) Devices to which the rule applies. This field is applicable for devices that are managed using Zscaler Client Connector. If no value is set, this field is ignored during the policy evaluation.
    DnsRuleRequestTypes []string
    (Set of Strings) DNS request types to which the rule applies. Supportedn values are: A, NS, MD, MF, CNAME, SOA, MB, MG, MR, NULL, WKS, PTR, HINFO, MINFO, MX, TXT, RP, AFSDB, X25, ISDN, RT, NSAP, NSAP_PTR, SIG, KEY, PX, GPOS, AAAA, LOC, NXT, EID, NIMLOC, SRV, ATMA, NAPTR, KX, CERT, A6, DNAME, SINK, OPT, APL, DS, SSHFP, PSECKEF, RRSIG, NSEC, DNSKEY, DHCID, NSEC3, NSEC3PARAM, TLSA, HIP, NINFO, RKEY, TALINK, CDS, CDNSKEY, OPENPGPKEY, CSYNC, ZONEMD, SVCB, HTTPS,
    Groups []GetFirewallDnsRuleGroup
    (List of Objects) You can manually select up to 8 groups. When not used it implies Any to apply the rule to all groups.
    Id int
    (Integer) Identifier that uniquely identifies an entity
    Labels []GetFirewallDnsRuleLabel
    (List of Objects) Labels that are applicable to the rule.
    LastModifiedBies []GetFirewallDnsRuleLastModifiedBy
    LastModifiedTime int
    LocationGroups []GetFirewallDnsRuleLocationGroup
    (List of Objects)You can manually select up to 32 location groups. When not used it implies Any to apply the rule to all location groups.
    Locations []GetFirewallDnsRuleLocation
    (List of Objects) You can manually select up to 8 locations. When not used it implies Any to apply the rule to all groups.
    Name string
    (string) The configured name of the entity
    Order int
    (Integer) Policy rules are evaluated in ascending numerical order (Rule 1 before Rule 2, and so on), and the Rule Order reflects this rule's place in the order.
    Predefined bool
    (Boolean) A Boolean field that indicates that the rule is predefined by using a true value
    Protocols []string
    (Set of Strings) The protocols to which the rules applies. Supported Values: ANY_RULE, SMRULEF_CASCADING_ALLOWED, TCP_RULE, UDP_RULE, DOHTTPS_RULE
    Rank int
    (Integer) By default, the admin ranking is disabled. To use this feature, you must enable admin rank. The default value is 7.
    RedirectIp string
    (String) The IP address to which the traffic will be redirected to when the DNAT rule is triggered. If not set, no redirection is done to specific IP addresses. Only supported when the action is REDIR_REQ
    ResCategories []string
    (Set of String) URL categories associated with resolved IP addresses to which the rule applies. If not set, the rule is not restricted to a specific URL category.
    SourceCountries []string
    (Set of String) The countries of origin of traffic for which the rule is applicable. If not set, the rule is not restricted to specific source countries. NOTE: Provide a 2 letter ISO3166 Alpha2 Country code. i.e "US", "CA"
    SrcIpGroups []GetFirewallDnsRuleSrcIpGroup
    (List of Objects)Source IP address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IP address group.
    SrcIps []string
    (Set of String) Source IP addresses or FQDNs to which the rule applies. If not set, the rule is not restricted to a specific source IP address. Each IP entry can be a single IP address, CIDR (e.g., 10.10.33.0/24), or an IP range (e.g., 10.10.33.1-10.10.33.10).
    SrcIpv6Groups []GetFirewallDnsRuleSrcIpv6Group
    (List of Objects) Source IPv6 address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IPv6 address group.
    State string
    (String) An enabled rule is actively enforced. A disabled rule is not actively enforced but does not lose its place in the Rule Order. The service skips it and moves to the next rule.
    TimeWindows []GetFirewallDnsRuleTimeWindow
    (List of Objects) You can manually select up to 1 time intervals. When not used it implies always to apply the rule to all time intervals.
    Users []GetFirewallDnsRuleUser
    (List of Objects) You can manually select up to 4 general and/or special users. When not used it implies Any to apply the rule to all users.
    action String
    (String) The action configured for the rule that must take place if the traffic matches the rule criteria, such as allowing or blocking the traffic or bypassing the rule. The following actions are accepted: ALLOW, BLOCK, REDIR_REQ, REDIR_RES, REDIR_ZPA, REDIR_REQ_DOH, REDIR_REQ_KEEP_SENDER, REDIR_REQ_TCP, REDIR_REQ_UDP, BLOCK_WITH_RESPONSE
    applicationGroups List<GetFirewallDnsRuleApplicationGroup>
    (List of Objects) DNS application groups to which the rule applies
    applications List<String>
    (Set of Strings) DNS tunnels and network applications to which the rule applies. To retrieve the available list of DNS tunnels applications use the data source: zia.getCloudApplications with the app_class value DNS_OVER_HTTPS. See example:
    blockResponseCode String
    (String) Specifies the DNS response code to be sent to the client when the action is configured to block and send response code. Supported values are: ANY, NONE, FORMERR, SERVFAIL, NXDOMAIN, NOTIMP, REFUSED, YXDOMAIN, YXRRSET, NXRRSET, NOTAUTH, NOTZONE, BADVERS, BADKEY, BADTIME, BADMODE, BADNAME, BADALG, BADTRUNC, UNSUPPORTED, BYPASS, INT_ERROR, SRV_TIMEOUT, EMPTY_RESP, REQ_BLOCKED, ADMIN_DROP, WCDN_TIMEOUT, IPS_BLOCK, FQDN_RESOLV_FAIL
    capturePcap Boolean
    (Boolean) Value that indicates whether packet capture (PCAP) is enabled or not
    defaultRule Boolean
    (Boolean) Value that indicates whether the rule is the Default Cloud DNS Rule or not
    departments List<GetFirewallDnsRuleDepartment>
    (List of Objects) Apply to any number of departments When not used it implies Any to apply the rule to all departments.
    description String
    (String) Enter additional notes or information. The description cannot exceed 10,240 characters.
    destAddresses List<String>
    (Set of String) Destination IP addresses or FQDNs to which the rule applies. If not set, the rule is not restricted to a specific destination IP address. Each IP entry can be a single IP address, CIDR (e.g., 10.10.33.0/24), or an IP range (e.g., 10.10.33.1-10.10.33.10).
    destCountries List<String>
    (Set of String) Identify destinations based on the location of a server, select Any to apply the rule to all countries or select the countries to which you want to control traffic. NOTE: Provide a 2 letter ISO3166 Alpha2 Country code. i.e "US", "CA"
    destIpCategories List<String>
    (Set of String) identify destinations based on the URL category of the domain, select Any to apply the rule to all categories or select the specific categories you want to control.
    destIpGroups List<GetFirewallDnsRuleDestIpGroup>
    ** - (List of Objects) Any number of destination IP address groups that you want to control with this rule.
    destIpv6Groups List<GetFirewallDnsRuleDestIpv6Group>
    deviceGroups List<GetFirewallDnsRuleDeviceGroup>
    (List of Objects) Device groups to which the rule applies. This field is applicable for devices that are managed using Zscaler Client Connector. If no value is set, this field is ignored during the policy evaluation.
    devices List<GetFirewallDnsRuleDevice>
    (List of Objects) Devices to which the rule applies. This field is applicable for devices that are managed using Zscaler Client Connector. If no value is set, this field is ignored during the policy evaluation.
    dnsRuleRequestTypes List<String>
    (Set of Strings) DNS request types to which the rule applies. Supportedn values are: A, NS, MD, MF, CNAME, SOA, MB, MG, MR, NULL, WKS, PTR, HINFO, MINFO, MX, TXT, RP, AFSDB, X25, ISDN, RT, NSAP, NSAP_PTR, SIG, KEY, PX, GPOS, AAAA, LOC, NXT, EID, NIMLOC, SRV, ATMA, NAPTR, KX, CERT, A6, DNAME, SINK, OPT, APL, DS, SSHFP, PSECKEF, RRSIG, NSEC, DNSKEY, DHCID, NSEC3, NSEC3PARAM, TLSA, HIP, NINFO, RKEY, TALINK, CDS, CDNSKEY, OPENPGPKEY, CSYNC, ZONEMD, SVCB, HTTPS,
    groups List<GetFirewallDnsRuleGroup>
    (List of Objects) You can manually select up to 8 groups. When not used it implies Any to apply the rule to all groups.
    id Integer
    (Integer) Identifier that uniquely identifies an entity
    labels List<GetFirewallDnsRuleLabel>
    (List of Objects) Labels that are applicable to the rule.
    lastModifiedBies List<GetFirewallDnsRuleLastModifiedBy>
    lastModifiedTime Integer
    locationGroups List<GetFirewallDnsRuleLocationGroup>
    (List of Objects)You can manually select up to 32 location groups. When not used it implies Any to apply the rule to all location groups.
    locations List<GetFirewallDnsRuleLocation>
    (List of Objects) You can manually select up to 8 locations. When not used it implies Any to apply the rule to all groups.
    name String
    (string) The configured name of the entity
    order Integer
    (Integer) Policy rules are evaluated in ascending numerical order (Rule 1 before Rule 2, and so on), and the Rule Order reflects this rule's place in the order.
    predefined Boolean
    (Boolean) A Boolean field that indicates that the rule is predefined by using a true value
    protocols List<String>
    (Set of Strings) The protocols to which the rules applies. Supported Values: ANY_RULE, SMRULEF_CASCADING_ALLOWED, TCP_RULE, UDP_RULE, DOHTTPS_RULE
    rank Integer
    (Integer) By default, the admin ranking is disabled. To use this feature, you must enable admin rank. The default value is 7.
    redirectIp String
    (String) The IP address to which the traffic will be redirected to when the DNAT rule is triggered. If not set, no redirection is done to specific IP addresses. Only supported when the action is REDIR_REQ
    resCategories List<String>
    (Set of String) URL categories associated with resolved IP addresses to which the rule applies. If not set, the rule is not restricted to a specific URL category.
    sourceCountries List<String>
    (Set of String) The countries of origin of traffic for which the rule is applicable. If not set, the rule is not restricted to specific source countries. NOTE: Provide a 2 letter ISO3166 Alpha2 Country code. i.e "US", "CA"
    srcIpGroups List<GetFirewallDnsRuleSrcIpGroup>
    (List of Objects)Source IP address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IP address group.
    srcIps List<String>
    (Set of String) Source IP addresses or FQDNs to which the rule applies. If not set, the rule is not restricted to a specific source IP address. Each IP entry can be a single IP address, CIDR (e.g., 10.10.33.0/24), or an IP range (e.g., 10.10.33.1-10.10.33.10).
    srcIpv6Groups List<GetFirewallDnsRuleSrcIpv6Group>
    (List of Objects) Source IPv6 address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IPv6 address group.
    state String
    (String) An enabled rule is actively enforced. A disabled rule is not actively enforced but does not lose its place in the Rule Order. The service skips it and moves to the next rule.
    timeWindows List<GetFirewallDnsRuleTimeWindow>
    (List of Objects) You can manually select up to 1 time intervals. When not used it implies always to apply the rule to all time intervals.
    users List<GetFirewallDnsRuleUser>
    (List of Objects) You can manually select up to 4 general and/or special users. When not used it implies Any to apply the rule to all users.
    action string
    (String) The action configured for the rule that must take place if the traffic matches the rule criteria, such as allowing or blocking the traffic or bypassing the rule. The following actions are accepted: ALLOW, BLOCK, REDIR_REQ, REDIR_RES, REDIR_ZPA, REDIR_REQ_DOH, REDIR_REQ_KEEP_SENDER, REDIR_REQ_TCP, REDIR_REQ_UDP, BLOCK_WITH_RESPONSE
    applicationGroups GetFirewallDnsRuleApplicationGroup[]
    (List of Objects) DNS application groups to which the rule applies
    applications string[]
    (Set of Strings) DNS tunnels and network applications to which the rule applies. To retrieve the available list of DNS tunnels applications use the data source: zia.getCloudApplications with the app_class value DNS_OVER_HTTPS. See example:
    blockResponseCode string
    (String) Specifies the DNS response code to be sent to the client when the action is configured to block and send response code. Supported values are: ANY, NONE, FORMERR, SERVFAIL, NXDOMAIN, NOTIMP, REFUSED, YXDOMAIN, YXRRSET, NXRRSET, NOTAUTH, NOTZONE, BADVERS, BADKEY, BADTIME, BADMODE, BADNAME, BADALG, BADTRUNC, UNSUPPORTED, BYPASS, INT_ERROR, SRV_TIMEOUT, EMPTY_RESP, REQ_BLOCKED, ADMIN_DROP, WCDN_TIMEOUT, IPS_BLOCK, FQDN_RESOLV_FAIL
    capturePcap boolean
    (Boolean) Value that indicates whether packet capture (PCAP) is enabled or not
    defaultRule boolean
    (Boolean) Value that indicates whether the rule is the Default Cloud DNS Rule or not
    departments GetFirewallDnsRuleDepartment[]
    (List of Objects) Apply to any number of departments When not used it implies Any to apply the rule to all departments.
    description string
    (String) Enter additional notes or information. The description cannot exceed 10,240 characters.
    destAddresses string[]
    (Set of String) Destination IP addresses or FQDNs to which the rule applies. If not set, the rule is not restricted to a specific destination IP address. Each IP entry can be a single IP address, CIDR (e.g., 10.10.33.0/24), or an IP range (e.g., 10.10.33.1-10.10.33.10).
    destCountries string[]
    (Set of String) Identify destinations based on the location of a server, select Any to apply the rule to all countries or select the countries to which you want to control traffic. NOTE: Provide a 2 letter ISO3166 Alpha2 Country code. i.e "US", "CA"
    destIpCategories string[]
    (Set of String) identify destinations based on the URL category of the domain, select Any to apply the rule to all categories or select the specific categories you want to control.
    destIpGroups GetFirewallDnsRuleDestIpGroup[]
    ** - (List of Objects) Any number of destination IP address groups that you want to control with this rule.
    destIpv6Groups GetFirewallDnsRuleDestIpv6Group[]
    deviceGroups GetFirewallDnsRuleDeviceGroup[]
    (List of Objects) Device groups to which the rule applies. This field is applicable for devices that are managed using Zscaler Client Connector. If no value is set, this field is ignored during the policy evaluation.
    devices GetFirewallDnsRuleDevice[]
    (List of Objects) Devices to which the rule applies. This field is applicable for devices that are managed using Zscaler Client Connector. If no value is set, this field is ignored during the policy evaluation.
    dnsRuleRequestTypes string[]
    (Set of Strings) DNS request types to which the rule applies. Supportedn values are: A, NS, MD, MF, CNAME, SOA, MB, MG, MR, NULL, WKS, PTR, HINFO, MINFO, MX, TXT, RP, AFSDB, X25, ISDN, RT, NSAP, NSAP_PTR, SIG, KEY, PX, GPOS, AAAA, LOC, NXT, EID, NIMLOC, SRV, ATMA, NAPTR, KX, CERT, A6, DNAME, SINK, OPT, APL, DS, SSHFP, PSECKEF, RRSIG, NSEC, DNSKEY, DHCID, NSEC3, NSEC3PARAM, TLSA, HIP, NINFO, RKEY, TALINK, CDS, CDNSKEY, OPENPGPKEY, CSYNC, ZONEMD, SVCB, HTTPS,
    groups GetFirewallDnsRuleGroup[]
    (List of Objects) You can manually select up to 8 groups. When not used it implies Any to apply the rule to all groups.
    id number
    (Integer) Identifier that uniquely identifies an entity
    labels GetFirewallDnsRuleLabel[]
    (List of Objects) Labels that are applicable to the rule.
    lastModifiedBies GetFirewallDnsRuleLastModifiedBy[]
    lastModifiedTime number
    locationGroups GetFirewallDnsRuleLocationGroup[]
    (List of Objects)You can manually select up to 32 location groups. When not used it implies Any to apply the rule to all location groups.
    locations GetFirewallDnsRuleLocation[]
    (List of Objects) You can manually select up to 8 locations. When not used it implies Any to apply the rule to all groups.
    name string
    (string) The configured name of the entity
    order number
    (Integer) Policy rules are evaluated in ascending numerical order (Rule 1 before Rule 2, and so on), and the Rule Order reflects this rule's place in the order.
    predefined boolean
    (Boolean) A Boolean field that indicates that the rule is predefined by using a true value
    protocols string[]
    (Set of Strings) The protocols to which the rules applies. Supported Values: ANY_RULE, SMRULEF_CASCADING_ALLOWED, TCP_RULE, UDP_RULE, DOHTTPS_RULE
    rank number
    (Integer) By default, the admin ranking is disabled. To use this feature, you must enable admin rank. The default value is 7.
    redirectIp string
    (String) The IP address to which the traffic will be redirected to when the DNAT rule is triggered. If not set, no redirection is done to specific IP addresses. Only supported when the action is REDIR_REQ
    resCategories string[]
    (Set of String) URL categories associated with resolved IP addresses to which the rule applies. If not set, the rule is not restricted to a specific URL category.
    sourceCountries string[]
    (Set of String) The countries of origin of traffic for which the rule is applicable. If not set, the rule is not restricted to specific source countries. NOTE: Provide a 2 letter ISO3166 Alpha2 Country code. i.e "US", "CA"
    srcIpGroups GetFirewallDnsRuleSrcIpGroup[]
    (List of Objects)Source IP address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IP address group.
    srcIps string[]
    (Set of String) Source IP addresses or FQDNs to which the rule applies. If not set, the rule is not restricted to a specific source IP address. Each IP entry can be a single IP address, CIDR (e.g., 10.10.33.0/24), or an IP range (e.g., 10.10.33.1-10.10.33.10).
    srcIpv6Groups GetFirewallDnsRuleSrcIpv6Group[]
    (List of Objects) Source IPv6 address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IPv6 address group.
    state string
    (String) An enabled rule is actively enforced. A disabled rule is not actively enforced but does not lose its place in the Rule Order. The service skips it and moves to the next rule.
    timeWindows GetFirewallDnsRuleTimeWindow[]
    (List of Objects) You can manually select up to 1 time intervals. When not used it implies always to apply the rule to all time intervals.
    users GetFirewallDnsRuleUser[]
    (List of Objects) You can manually select up to 4 general and/or special users. When not used it implies Any to apply the rule to all users.
    action str
    (String) The action configured for the rule that must take place if the traffic matches the rule criteria, such as allowing or blocking the traffic or bypassing the rule. The following actions are accepted: ALLOW, BLOCK, REDIR_REQ, REDIR_RES, REDIR_ZPA, REDIR_REQ_DOH, REDIR_REQ_KEEP_SENDER, REDIR_REQ_TCP, REDIR_REQ_UDP, BLOCK_WITH_RESPONSE
    application_groups Sequence[GetFirewallDnsRuleApplicationGroup]
    (List of Objects) DNS application groups to which the rule applies
    applications Sequence[str]
    (Set of Strings) DNS tunnels and network applications to which the rule applies. To retrieve the available list of DNS tunnels applications use the data source: zia.getCloudApplications with the app_class value DNS_OVER_HTTPS. See example:
    block_response_code str
    (String) Specifies the DNS response code to be sent to the client when the action is configured to block and send response code. Supported values are: ANY, NONE, FORMERR, SERVFAIL, NXDOMAIN, NOTIMP, REFUSED, YXDOMAIN, YXRRSET, NXRRSET, NOTAUTH, NOTZONE, BADVERS, BADKEY, BADTIME, BADMODE, BADNAME, BADALG, BADTRUNC, UNSUPPORTED, BYPASS, INT_ERROR, SRV_TIMEOUT, EMPTY_RESP, REQ_BLOCKED, ADMIN_DROP, WCDN_TIMEOUT, IPS_BLOCK, FQDN_RESOLV_FAIL
    capture_pcap bool
    (Boolean) Value that indicates whether packet capture (PCAP) is enabled or not
    default_rule bool
    (Boolean) Value that indicates whether the rule is the Default Cloud DNS Rule or not
    departments Sequence[GetFirewallDnsRuleDepartment]
    (List of Objects) Apply to any number of departments When not used it implies Any to apply the rule to all departments.
    description str
    (String) Enter additional notes or information. The description cannot exceed 10,240 characters.
    dest_addresses Sequence[str]
    (Set of String) Destination IP addresses or FQDNs to which the rule applies. If not set, the rule is not restricted to a specific destination IP address. Each IP entry can be a single IP address, CIDR (e.g., 10.10.33.0/24), or an IP range (e.g., 10.10.33.1-10.10.33.10).
    dest_countries Sequence[str]
    (Set of String) Identify destinations based on the location of a server, select Any to apply the rule to all countries or select the countries to which you want to control traffic. NOTE: Provide a 2 letter ISO3166 Alpha2 Country code. i.e "US", "CA"
    dest_ip_categories Sequence[str]
    (Set of String) identify destinations based on the URL category of the domain, select Any to apply the rule to all categories or select the specific categories you want to control.
    dest_ip_groups Sequence[GetFirewallDnsRuleDestIpGroup]
    ** - (List of Objects) Any number of destination IP address groups that you want to control with this rule.
    dest_ipv6_groups Sequence[GetFirewallDnsRuleDestIpv6Group]
    device_groups Sequence[GetFirewallDnsRuleDeviceGroup]
    (List of Objects) Device groups to which the rule applies. This field is applicable for devices that are managed using Zscaler Client Connector. If no value is set, this field is ignored during the policy evaluation.
    devices Sequence[GetFirewallDnsRuleDevice]
    (List of Objects) Devices to which the rule applies. This field is applicable for devices that are managed using Zscaler Client Connector. If no value is set, this field is ignored during the policy evaluation.
    dns_rule_request_types Sequence[str]
    (Set of Strings) DNS request types to which the rule applies. Supportedn values are: A, NS, MD, MF, CNAME, SOA, MB, MG, MR, NULL, WKS, PTR, HINFO, MINFO, MX, TXT, RP, AFSDB, X25, ISDN, RT, NSAP, NSAP_PTR, SIG, KEY, PX, GPOS, AAAA, LOC, NXT, EID, NIMLOC, SRV, ATMA, NAPTR, KX, CERT, A6, DNAME, SINK, OPT, APL, DS, SSHFP, PSECKEF, RRSIG, NSEC, DNSKEY, DHCID, NSEC3, NSEC3PARAM, TLSA, HIP, NINFO, RKEY, TALINK, CDS, CDNSKEY, OPENPGPKEY, CSYNC, ZONEMD, SVCB, HTTPS,
    groups Sequence[GetFirewallDnsRuleGroup]
    (List of Objects) You can manually select up to 8 groups. When not used it implies Any to apply the rule to all groups.
    id int
    (Integer) Identifier that uniquely identifies an entity
    labels Sequence[GetFirewallDnsRuleLabel]
    (List of Objects) Labels that are applicable to the rule.
    last_modified_bies Sequence[GetFirewallDnsRuleLastModifiedBy]
    last_modified_time int
    location_groups Sequence[GetFirewallDnsRuleLocationGroup]
    (List of Objects)You can manually select up to 32 location groups. When not used it implies Any to apply the rule to all location groups.
    locations Sequence[GetFirewallDnsRuleLocation]
    (List of Objects) You can manually select up to 8 locations. When not used it implies Any to apply the rule to all groups.
    name str
    (string) The configured name of the entity
    order int
    (Integer) Policy rules are evaluated in ascending numerical order (Rule 1 before Rule 2, and so on), and the Rule Order reflects this rule's place in the order.
    predefined bool
    (Boolean) A Boolean field that indicates that the rule is predefined by using a true value
    protocols Sequence[str]
    (Set of Strings) The protocols to which the rules applies. Supported Values: ANY_RULE, SMRULEF_CASCADING_ALLOWED, TCP_RULE, UDP_RULE, DOHTTPS_RULE
    rank int
    (Integer) By default, the admin ranking is disabled. To use this feature, you must enable admin rank. The default value is 7.
    redirect_ip str
    (String) The IP address to which the traffic will be redirected to when the DNAT rule is triggered. If not set, no redirection is done to specific IP addresses. Only supported when the action is REDIR_REQ
    res_categories Sequence[str]
    (Set of String) URL categories associated with resolved IP addresses to which the rule applies. If not set, the rule is not restricted to a specific URL category.
    source_countries Sequence[str]
    (Set of String) The countries of origin of traffic for which the rule is applicable. If not set, the rule is not restricted to specific source countries. NOTE: Provide a 2 letter ISO3166 Alpha2 Country code. i.e "US", "CA"
    src_ip_groups Sequence[GetFirewallDnsRuleSrcIpGroup]
    (List of Objects)Source IP address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IP address group.
    src_ips Sequence[str]
    (Set of String) Source IP addresses or FQDNs to which the rule applies. If not set, the rule is not restricted to a specific source IP address. Each IP entry can be a single IP address, CIDR (e.g., 10.10.33.0/24), or an IP range (e.g., 10.10.33.1-10.10.33.10).
    src_ipv6_groups Sequence[GetFirewallDnsRuleSrcIpv6Group]
    (List of Objects) Source IPv6 address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IPv6 address group.
    state str
    (String) An enabled rule is actively enforced. A disabled rule is not actively enforced but does not lose its place in the Rule Order. The service skips it and moves to the next rule.
    time_windows Sequence[GetFirewallDnsRuleTimeWindow]
    (List of Objects) You can manually select up to 1 time intervals. When not used it implies always to apply the rule to all time intervals.
    users Sequence[GetFirewallDnsRuleUser]
    (List of Objects) You can manually select up to 4 general and/or special users. When not used it implies Any to apply the rule to all users.
    action String
    (String) The action configured for the rule that must take place if the traffic matches the rule criteria, such as allowing or blocking the traffic or bypassing the rule. The following actions are accepted: ALLOW, BLOCK, REDIR_REQ, REDIR_RES, REDIR_ZPA, REDIR_REQ_DOH, REDIR_REQ_KEEP_SENDER, REDIR_REQ_TCP, REDIR_REQ_UDP, BLOCK_WITH_RESPONSE
    applicationGroups List<Property Map>
    (List of Objects) DNS application groups to which the rule applies
    applications List<String>
    (Set of Strings) DNS tunnels and network applications to which the rule applies. To retrieve the available list of DNS tunnels applications use the data source: zia.getCloudApplications with the app_class value DNS_OVER_HTTPS. See example:
    blockResponseCode String
    (String) Specifies the DNS response code to be sent to the client when the action is configured to block and send response code. Supported values are: ANY, NONE, FORMERR, SERVFAIL, NXDOMAIN, NOTIMP, REFUSED, YXDOMAIN, YXRRSET, NXRRSET, NOTAUTH, NOTZONE, BADVERS, BADKEY, BADTIME, BADMODE, BADNAME, BADALG, BADTRUNC, UNSUPPORTED, BYPASS, INT_ERROR, SRV_TIMEOUT, EMPTY_RESP, REQ_BLOCKED, ADMIN_DROP, WCDN_TIMEOUT, IPS_BLOCK, FQDN_RESOLV_FAIL
    capturePcap Boolean
    (Boolean) Value that indicates whether packet capture (PCAP) is enabled or not
    defaultRule Boolean
    (Boolean) Value that indicates whether the rule is the Default Cloud DNS Rule or not
    departments List<Property Map>
    (List of Objects) Apply to any number of departments When not used it implies Any to apply the rule to all departments.
    description String
    (String) Enter additional notes or information. The description cannot exceed 10,240 characters.
    destAddresses List<String>
    (Set of String) Destination IP addresses or FQDNs to which the rule applies. If not set, the rule is not restricted to a specific destination IP address. Each IP entry can be a single IP address, CIDR (e.g., 10.10.33.0/24), or an IP range (e.g., 10.10.33.1-10.10.33.10).
    destCountries List<String>
    (Set of String) Identify destinations based on the location of a server, select Any to apply the rule to all countries or select the countries to which you want to control traffic. NOTE: Provide a 2 letter ISO3166 Alpha2 Country code. i.e "US", "CA"
    destIpCategories List<String>
    (Set of String) identify destinations based on the URL category of the domain, select Any to apply the rule to all categories or select the specific categories you want to control.
    destIpGroups List<Property Map>
    ** - (List of Objects) Any number of destination IP address groups that you want to control with this rule.
    destIpv6Groups List<Property Map>
    deviceGroups List<Property Map>
    (List of Objects) Device groups to which the rule applies. This field is applicable for devices that are managed using Zscaler Client Connector. If no value is set, this field is ignored during the policy evaluation.
    devices List<Property Map>
    (List of Objects) Devices to which the rule applies. This field is applicable for devices that are managed using Zscaler Client Connector. If no value is set, this field is ignored during the policy evaluation.
    dnsRuleRequestTypes List<String>
    (Set of Strings) DNS request types to which the rule applies. Supportedn values are: A, NS, MD, MF, CNAME, SOA, MB, MG, MR, NULL, WKS, PTR, HINFO, MINFO, MX, TXT, RP, AFSDB, X25, ISDN, RT, NSAP, NSAP_PTR, SIG, KEY, PX, GPOS, AAAA, LOC, NXT, EID, NIMLOC, SRV, ATMA, NAPTR, KX, CERT, A6, DNAME, SINK, OPT, APL, DS, SSHFP, PSECKEF, RRSIG, NSEC, DNSKEY, DHCID, NSEC3, NSEC3PARAM, TLSA, HIP, NINFO, RKEY, TALINK, CDS, CDNSKEY, OPENPGPKEY, CSYNC, ZONEMD, SVCB, HTTPS,
    groups List<Property Map>
    (List of Objects) You can manually select up to 8 groups. When not used it implies Any to apply the rule to all groups.
    id Number
    (Integer) Identifier that uniquely identifies an entity
    labels List<Property Map>
    (List of Objects) Labels that are applicable to the rule.
    lastModifiedBies List<Property Map>
    lastModifiedTime Number
    locationGroups List<Property Map>
    (List of Objects)You can manually select up to 32 location groups. When not used it implies Any to apply the rule to all location groups.
    locations List<Property Map>
    (List of Objects) You can manually select up to 8 locations. When not used it implies Any to apply the rule to all groups.
    name String
    (string) The configured name of the entity
    order Number
    (Integer) Policy rules are evaluated in ascending numerical order (Rule 1 before Rule 2, and so on), and the Rule Order reflects this rule's place in the order.
    predefined Boolean
    (Boolean) A Boolean field that indicates that the rule is predefined by using a true value
    protocols List<String>
    (Set of Strings) The protocols to which the rules applies. Supported Values: ANY_RULE, SMRULEF_CASCADING_ALLOWED, TCP_RULE, UDP_RULE, DOHTTPS_RULE
    rank Number
    (Integer) By default, the admin ranking is disabled. To use this feature, you must enable admin rank. The default value is 7.
    redirectIp String
    (String) The IP address to which the traffic will be redirected to when the DNAT rule is triggered. If not set, no redirection is done to specific IP addresses. Only supported when the action is REDIR_REQ
    resCategories List<String>
    (Set of String) URL categories associated with resolved IP addresses to which the rule applies. If not set, the rule is not restricted to a specific URL category.
    sourceCountries List<String>
    (Set of String) The countries of origin of traffic for which the rule is applicable. If not set, the rule is not restricted to specific source countries. NOTE: Provide a 2 letter ISO3166 Alpha2 Country code. i.e "US", "CA"
    srcIpGroups List<Property Map>
    (List of Objects)Source IP address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IP address group.
    srcIps List<String>
    (Set of String) Source IP addresses or FQDNs to which the rule applies. If not set, the rule is not restricted to a specific source IP address. Each IP entry can be a single IP address, CIDR (e.g., 10.10.33.0/24), or an IP range (e.g., 10.10.33.1-10.10.33.10).
    srcIpv6Groups List<Property Map>
    (List of Objects) Source IPv6 address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IPv6 address group.
    state String
    (String) An enabled rule is actively enforced. A disabled rule is not actively enforced but does not lose its place in the Rule Order. The service skips it and moves to the next rule.
    timeWindows List<Property Map>
    (List of Objects) You can manually select up to 1 time intervals. When not used it implies always to apply the rule to all time intervals.
    users List<Property Map>
    (List of Objects) You can manually select up to 4 general and/or special users. When not used it implies Any to apply the rule to all users.

    Supporting Types

    GetFirewallDnsRuleApplicationGroup

    Extensions Dictionary<string, string>
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    Extensions map[string]string
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    extensions Map<String,String>
    id Integer
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule
    extensions {[key: string]: string}
    id number
    Unique identifier for the Firewall Filtering policy rule
    name string
    Name of the Firewall Filtering policy rule
    extensions Mapping[str, str]
    id int
    Unique identifier for the Firewall Filtering policy rule
    name str
    Name of the Firewall Filtering policy rule
    extensions Map<String>
    id Number
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule

    GetFirewallDnsRuleDepartment

    Extensions Dictionary<string, string>
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    Extensions map[string]string
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    extensions Map<String,String>
    id Integer
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule
    extensions {[key: string]: string}
    id number
    Unique identifier for the Firewall Filtering policy rule
    name string
    Name of the Firewall Filtering policy rule
    extensions Mapping[str, str]
    id int
    Unique identifier for the Firewall Filtering policy rule
    name str
    Name of the Firewall Filtering policy rule
    extensions Map<String>
    id Number
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule

    GetFirewallDnsRuleDestIpGroup

    Extensions Dictionary<string, string>
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    Extensions map[string]string
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    extensions Map<String,String>
    id Integer
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule
    extensions {[key: string]: string}
    id number
    Unique identifier for the Firewall Filtering policy rule
    name string
    Name of the Firewall Filtering policy rule
    extensions Mapping[str, str]
    id int
    Unique identifier for the Firewall Filtering policy rule
    name str
    Name of the Firewall Filtering policy rule
    extensions Map<String>
    id Number
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule

    GetFirewallDnsRuleDestIpv6Group

    Extensions Dictionary<string, string>
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    Extensions map[string]string
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    extensions Map<String,String>
    id Integer
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule
    extensions {[key: string]: string}
    id number
    Unique identifier for the Firewall Filtering policy rule
    name string
    Name of the Firewall Filtering policy rule
    extensions Mapping[str, str]
    id int
    Unique identifier for the Firewall Filtering policy rule
    name str
    Name of the Firewall Filtering policy rule
    extensions Map<String>
    id Number
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule

    GetFirewallDnsRuleDevice

    Extensions Dictionary<string, string>
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    Extensions map[string]string
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    extensions Map<String,String>
    id Integer
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule
    extensions {[key: string]: string}
    id number
    Unique identifier for the Firewall Filtering policy rule
    name string
    Name of the Firewall Filtering policy rule
    extensions Mapping[str, str]
    id int
    Unique identifier for the Firewall Filtering policy rule
    name str
    Name of the Firewall Filtering policy rule
    extensions Map<String>
    id Number
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule

    GetFirewallDnsRuleDeviceGroup

    Extensions Dictionary<string, string>
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    Extensions map[string]string
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    extensions Map<String,String>
    id Integer
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule
    extensions {[key: string]: string}
    id number
    Unique identifier for the Firewall Filtering policy rule
    name string
    Name of the Firewall Filtering policy rule
    extensions Mapping[str, str]
    id int
    Unique identifier for the Firewall Filtering policy rule
    name str
    Name of the Firewall Filtering policy rule
    extensions Map<String>
    id Number
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule

    GetFirewallDnsRuleGroup

    Extensions Dictionary<string, string>
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    Extensions map[string]string
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    extensions Map<String,String>
    id Integer
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule
    extensions {[key: string]: string}
    id number
    Unique identifier for the Firewall Filtering policy rule
    name string
    Name of the Firewall Filtering policy rule
    extensions Mapping[str, str]
    id int
    Unique identifier for the Firewall Filtering policy rule
    name str
    Name of the Firewall Filtering policy rule
    extensions Map<String>
    id Number
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule

    GetFirewallDnsRuleLabel

    Extensions Dictionary<string, string>
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    Extensions map[string]string
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    extensions Map<String,String>
    id Integer
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule
    extensions {[key: string]: string}
    id number
    Unique identifier for the Firewall Filtering policy rule
    name string
    Name of the Firewall Filtering policy rule
    extensions Mapping[str, str]
    id int
    Unique identifier for the Firewall Filtering policy rule
    name str
    Name of the Firewall Filtering policy rule
    extensions Map<String>
    id Number
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule

    GetFirewallDnsRuleLastModifiedBy

    Extensions Dictionary<string, string>
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    Extensions map[string]string
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    extensions Map<String,String>
    id Integer
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule
    extensions {[key: string]: string}
    id number
    Unique identifier for the Firewall Filtering policy rule
    name string
    Name of the Firewall Filtering policy rule
    extensions Mapping[str, str]
    id int
    Unique identifier for the Firewall Filtering policy rule
    name str
    Name of the Firewall Filtering policy rule
    extensions Map<String>
    id Number
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule

    GetFirewallDnsRuleLocation

    Extensions Dictionary<string, string>
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    Extensions map[string]string
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    extensions Map<String,String>
    id Integer
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule
    extensions {[key: string]: string}
    id number
    Unique identifier for the Firewall Filtering policy rule
    name string
    Name of the Firewall Filtering policy rule
    extensions Mapping[str, str]
    id int
    Unique identifier for the Firewall Filtering policy rule
    name str
    Name of the Firewall Filtering policy rule
    extensions Map<String>
    id Number
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule

    GetFirewallDnsRuleLocationGroup

    Extensions Dictionary<string, string>
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    Extensions map[string]string
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    extensions Map<String,String>
    id Integer
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule
    extensions {[key: string]: string}
    id number
    Unique identifier for the Firewall Filtering policy rule
    name string
    Name of the Firewall Filtering policy rule
    extensions Mapping[str, str]
    id int
    Unique identifier for the Firewall Filtering policy rule
    name str
    Name of the Firewall Filtering policy rule
    extensions Map<String>
    id Number
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule

    GetFirewallDnsRuleSrcIpGroup

    Extensions Dictionary<string, string>
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    Extensions map[string]string
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    extensions Map<String,String>
    id Integer
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule
    extensions {[key: string]: string}
    id number
    Unique identifier for the Firewall Filtering policy rule
    name string
    Name of the Firewall Filtering policy rule
    extensions Mapping[str, str]
    id int
    Unique identifier for the Firewall Filtering policy rule
    name str
    Name of the Firewall Filtering policy rule
    extensions Map<String>
    id Number
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule

    GetFirewallDnsRuleSrcIpv6Group

    Extensions Dictionary<string, string>
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    Extensions map[string]string
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    extensions Map<String,String>
    id Integer
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule
    extensions {[key: string]: string}
    id number
    Unique identifier for the Firewall Filtering policy rule
    name string
    Name of the Firewall Filtering policy rule
    extensions Mapping[str, str]
    id int
    Unique identifier for the Firewall Filtering policy rule
    name str
    Name of the Firewall Filtering policy rule
    extensions Map<String>
    id Number
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule

    GetFirewallDnsRuleTimeWindow

    Extensions Dictionary<string, string>
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    Extensions map[string]string
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    extensions Map<String,String>
    id Integer
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule
    extensions {[key: string]: string}
    id number
    Unique identifier for the Firewall Filtering policy rule
    name string
    Name of the Firewall Filtering policy rule
    extensions Mapping[str, str]
    id int
    Unique identifier for the Firewall Filtering policy rule
    name str
    Name of the Firewall Filtering policy rule
    extensions Map<String>
    id Number
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule

    GetFirewallDnsRuleUser

    Extensions Dictionary<string, string>
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    Extensions map[string]string
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    extensions Map<String,String>
    id Integer
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule
    extensions {[key: string]: string}
    id number
    Unique identifier for the Firewall Filtering policy rule
    name string
    Name of the Firewall Filtering policy rule
    extensions Mapping[str, str]
    id int
    Unique identifier for the Firewall Filtering policy rule
    name str
    Name of the Firewall Filtering policy rule
    extensions Map<String>
    id Number
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule

    Package Details

    Repository
    zia zscaler/pulumi-zia
    License
    MIT
    Notes
    This Pulumi package is based on the zia Terraform Provider.
    zia logo
    Zscaler Internet Access v1.0.1 published on Friday, Jun 6, 2025 by Zscaler
    zscaler/pulumi-zia