Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi IDP Pulumi Cloud Packages Tutorials
  1. Packages
  2. Zscaler Internet Access (ZIA)
  3. API Docs
  4. getIPSFirewallRule
Zscaler Internet Access v1.0.1 published on Friday, Jun 6, 2025 by Zscaler
zscaler/pulumi-zia

zia.getIPSFirewallRule

Explore with Pulumi AI

zia logo
Zscaler Internet Access v1.0.1 published on Friday, Jun 6, 2025 by Zscaler
zscaler/pulumi-zia

    Use the zia_firewall_ips_rule data source to get information about a cloud firewall IPS rule available in the Zscaler Internet Access.

    Example Usage

    # ZIA Firewall IPS Rule by name
data "zia_firewall_ips_rule" "this" {
    name = "Default Cloud IPS Rule"
}

    # ZIA Firewall IPS Rule by ID
data "zia_firewall_ips_rule" "this" {
    id = "12365478"
}

    Using getIPSFirewallRule

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getIPSFirewallRule(args: GetIPSFirewallRuleArgs, opts?: InvokeOptions): Promise<GetIPSFirewallRuleResult>
function getIPSFirewallRuleOutput(args: GetIPSFirewallRuleOutputArgs, opts?: InvokeOptions): Output<GetIPSFirewallRuleResult>
    def get_ips_firewall_rule(id: Optional[int] = None,
                          name: Optional[str] = None,
                          opts: Optional[InvokeOptions] = None) -> GetIPSFirewallRuleResult
def get_ips_firewall_rule_output(id: Optional[pulumi.Input[int]] = None,
                          name: Optional[pulumi.Input[str]] = None,
                          opts: Optional[InvokeOptions] = None) -> Output[GetIPSFirewallRuleResult]
    func LookupIPSFirewallRule(ctx *Context, args *LookupIPSFirewallRuleArgs, opts ...InvokeOption) (*LookupIPSFirewallRuleResult, error)
func LookupIPSFirewallRuleOutput(ctx *Context, args *LookupIPSFirewallRuleOutputArgs, opts ...InvokeOption) LookupIPSFirewallRuleResultOutput

    > Note: This function is named LookupIPSFirewallRule in the Go SDK.

    public static class GetIPSFirewallRule 
{
    public static Task<GetIPSFirewallRuleResult> InvokeAsync(GetIPSFirewallRuleArgs args, InvokeOptions? opts = null)
    public static Output<GetIPSFirewallRuleResult> Invoke(GetIPSFirewallRuleInvokeArgs args, InvokeOptions? opts = null)
}
    public static CompletableFuture<GetIPSFirewallRuleResult> getIPSFirewallRule(GetIPSFirewallRuleArgs args, InvokeOptions options)
public static Output<GetIPSFirewallRuleResult> getIPSFirewallRule(GetIPSFirewallRuleArgs args, InvokeOptions options)

    fn::invoke:
  function: zia:index/getIPSFirewallRule:getIPSFirewallRule
  arguments:
    # arguments dictionary

    The following arguments are supported:

    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    id Integer
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule
    id number
    Unique identifier for the Firewall Filtering policy rule
    name string
    Name of the Firewall Filtering policy rule
    id int
    Unique identifier for the Firewall Filtering policy rule
    name str
    Name of the Firewall Filtering policy rule
    id Number
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule

    getIPSFirewallRule Result

    The following output properties are available:

    Action string
    (String) The action configured for the rule that must take place if the traffic matches the rule criteria, such as allowing or blocking the traffic or bypassing the rule. The following actions are accepted: ALLOW, BLOCK_DROP, BLOCK_RESET, BYPASS_IPS
    CapturePcap bool
    (Boolean) Value that indicates whether packet capture (PCAP) is enabled or not
    DefaultRule bool
    (Boolean) Value that indicates whether the rule is the Default Cloud IPS Rule or not
    Departments List<zscaler.PulumiPackage.Zia.Outputs.GetIPSFirewallRuleDepartment>
    (List of Objects) Apply to any number of departments When not used it implies Any to apply the rule to all departments.
    Description string
    (String) Enter additional notes or information. The description cannot exceed 10,240 characters.
    DestAddresses List<string>
    (Set of String) Destination IP addresses or FQDNs to which the rule applies. If not set, the rule is not restricted to a specific destination IP address. Each IP entry can be a single IP address, CIDR (e.g., 10.10.33.0/24), or an IP range (e.g., 10.10.33.1-10.10.33.10).
    DestCountries List<string>
    (Set of String) Identify destinations based on the location of a server, select Any to apply the rule to all countries or select the countries to which you want to control traffic. NOTE: Provide a 2 letter ISO3166 Alpha2 Country code. i.e "US", "CA"
    DestIpCategories List<string>
    (Set of String) identify destinations based on the URL category of the domain, select Any to apply the rule to all categories or select the specific categories you want to control.
    DestIpGroups List<zscaler.PulumiPackage.Zia.Outputs.GetIPSFirewallRuleDestIpGroup>
    ** - (List of Objects) Any number of destination IP address groups that you want to control with this rule.
    DestIpv6Groups List<zscaler.PulumiPackage.Zia.Outputs.GetIPSFirewallRuleDestIpv6Group>
    DeviceGroups List<zscaler.PulumiPackage.Zia.Outputs.GetIPSFirewallRuleDeviceGroup>
    (List of Objects) Device groups to which the rule applies. This field is applicable for devices that are managed using Zscaler Client Connector. If no value is set, this field is ignored during the policy evaluation.
    Devices List<zscaler.PulumiPackage.Zia.Outputs.GetIPSFirewallRuleDevice>
    (List of Objects) Devices to which the rule applies. This field is applicable for devices that are managed using Zscaler Client Connector. If no value is set, this field is ignored during the policy evaluation.
    EnableFullLogging bool
    (Integer) A Boolean value that indicates whether full logging is enabled. A true value indicates that full logging is enabled, whereas a false value indicates that aggregate logging is enabled.
    Groups List<zscaler.PulumiPackage.Zia.Outputs.GetIPSFirewallRuleGroup>
    (List of Objects) You can manually select up to 8 groups. When not used it implies Any to apply the rule to all groups.
    Id int
    (Integer) Identifier that uniquely identifies an entity
    Labels List<zscaler.PulumiPackage.Zia.Outputs.GetIPSFirewallRuleLabel>
    (List of Objects) Labels that are applicable to the rule.
    LastModifiedBies List<zscaler.PulumiPackage.Zia.Outputs.GetIPSFirewallRuleLastModifiedBy>
    LastModifiedTime int
    LocationGroups List<zscaler.PulumiPackage.Zia.Outputs.GetIPSFirewallRuleLocationGroup>
    (List of Objects)You can manually select up to 32 location groups. When not used it implies Any to apply the rule to all location groups.
    Locations List<zscaler.PulumiPackage.Zia.Outputs.GetIPSFirewallRuleLocation>
    (List of Objects) You can manually select up to 8 locations. When not used it implies Any to apply the rule to all groups.
    Name string
    (String) The configured name of the entity
    NwServiceGroups List<zscaler.PulumiPackage.Zia.Outputs.GetIPSFirewallRuleNwServiceGroup>
    (List of Objects) Any number of predefined or custom network service groups to which the rule applies.
    NwServices List<zscaler.PulumiPackage.Zia.Outputs.GetIPSFirewallRuleNwService>
    (List of Objects) When not used it applies the rule to all network services or you can select specific network services. The Zscaler firewall has predefined services and you can configure up to 1,024 additional custom services.
    Order int
    (Integer) Policy rules are evaluated in ascending numerical order (Rule 1 before Rule 2, and so on), and the Rule Order reflects this rule's place in the order.
    Predefined bool
    (Boolean) A Boolean field that indicates that the rule is predefined by using a true value
    Rank int
    (Integer) By default, the admin ranking is disabled. To use this feature, you must enable admin rank. The default value is 7.
    ResCategories List<string>
    (Set of String) URL categories associated with resolved IP addresses to which the rule applies. If not set, the rule is not restricted to a specific URL category.
    SourceCountries List<string>
    (Set of String) The countries of origin of traffic for which the rule is applicable. If not set, the rule is not restricted to specific source countries. NOTE: Provide a 2 letter ISO3166 Alpha2 Country code. i.e "US", "CA"
    SrcIpGroups List<zscaler.PulumiPackage.Zia.Outputs.GetIPSFirewallRuleSrcIpGroup>
    (List of Objects)Source IP address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IP address group.
    SrcIps List<string>
    (Set of String) Source IP addresses or FQDNs to which the rule applies. If not set, the rule is not restricted to a specific source IP address. Each IP entry can be a single IP address, CIDR (e.g., 10.10.33.0/24), or an IP range (e.g., 10.10.33.1-10.10.33.10).
    SrcIpv6Groups List<zscaler.PulumiPackage.Zia.Outputs.GetIPSFirewallRuleSrcIpv6Group>
    (List of Objects) Source IPv6 address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IPv6 address group.
    State string
    (String) An enabled rule is actively enforced. A disabled rule is not actively enforced but does not lose its place in the Rule Order. The service skips it and moves to the next rule.
    ThreatCategories List<zscaler.PulumiPackage.Zia.Outputs.GetIPSFirewallRuleThreatCategory>
    (List of Objects) Advanced threat categories to which the rule applies
    TimeWindows List<zscaler.PulumiPackage.Zia.Outputs.GetIPSFirewallRuleTimeWindow>
    (List of Objects) You can manually select up to 1 time intervals. When not used it implies always to apply the rule to all time intervals.
    Users List<zscaler.PulumiPackage.Zia.Outputs.GetIPSFirewallRuleUser>
    (List of Objects) You can manually select up to 4 general and/or special users. When not used it implies Any to apply the rule to all users.
    ZpaAppSegments List<zscaler.PulumiPackage.Zia.Outputs.GetIPSFirewallRuleZpaAppSegment>
    (List of Objects) The ZPA application segments to which the rule applies
    Action string
    (String) The action configured for the rule that must take place if the traffic matches the rule criteria, such as allowing or blocking the traffic or bypassing the rule. The following actions are accepted: ALLOW, BLOCK_DROP, BLOCK_RESET, BYPASS_IPS
    CapturePcap bool
    (Boolean) Value that indicates whether packet capture (PCAP) is enabled or not
    DefaultRule bool
    (Boolean) Value that indicates whether the rule is the Default Cloud IPS Rule or not
    Departments []GetIPSFirewallRuleDepartment
    (List of Objects) Apply to any number of departments When not used it implies Any to apply the rule to all departments.
    Description string
    (String) Enter additional notes or information. The description cannot exceed 10,240 characters.
    DestAddresses []string
    (Set of String) Destination IP addresses or FQDNs to which the rule applies. If not set, the rule is not restricted to a specific destination IP address. Each IP entry can be a single IP address, CIDR (e.g., 10.10.33.0/24), or an IP range (e.g., 10.10.33.1-10.10.33.10).
    DestCountries []string
    (Set of String) Identify destinations based on the location of a server, select Any to apply the rule to all countries or select the countries to which you want to control traffic. NOTE: Provide a 2 letter ISO3166 Alpha2 Country code. i.e "US", "CA"
    DestIpCategories []string
    (Set of String) identify destinations based on the URL category of the domain, select Any to apply the rule to all categories or select the specific categories you want to control.
    DestIpGroups []GetIPSFirewallRuleDestIpGroup
    ** - (List of Objects) Any number of destination IP address groups that you want to control with this rule.
    DestIpv6Groups []GetIPSFirewallRuleDestIpv6Group
    DeviceGroups []GetIPSFirewallRuleDeviceGroup
    (List of Objects) Device groups to which the rule applies. This field is applicable for devices that are managed using Zscaler Client Connector. If no value is set, this field is ignored during the policy evaluation.
    Devices []GetIPSFirewallRuleDevice
    (List of Objects) Devices to which the rule applies. This field is applicable for devices that are managed using Zscaler Client Connector. If no value is set, this field is ignored during the policy evaluation.
    EnableFullLogging bool
    (Integer) A Boolean value that indicates whether full logging is enabled. A true value indicates that full logging is enabled, whereas a false value indicates that aggregate logging is enabled.
    Groups []GetIPSFirewallRuleGroup
    (List of Objects) You can manually select up to 8 groups. When not used it implies Any to apply the rule to all groups.
    Id int
    (Integer) Identifier that uniquely identifies an entity
    Labels []GetIPSFirewallRuleLabel
    (List of Objects) Labels that are applicable to the rule.
    LastModifiedBies []GetIPSFirewallRuleLastModifiedBy
    LastModifiedTime int
    LocationGroups []GetIPSFirewallRuleLocationGroup
    (List of Objects)You can manually select up to 32 location groups. When not used it implies Any to apply the rule to all location groups.
    Locations []GetIPSFirewallRuleLocation
    (List of Objects) You can manually select up to 8 locations. When not used it implies Any to apply the rule to all groups.
    Name string
    (String) The configured name of the entity
    NwServiceGroups []GetIPSFirewallRuleNwServiceGroup
    (List of Objects) Any number of predefined or custom network service groups to which the rule applies.
    NwServices []GetIPSFirewallRuleNwService
    (List of Objects) When not used it applies the rule to all network services or you can select specific network services. The Zscaler firewall has predefined services and you can configure up to 1,024 additional custom services.
    Order int
    (Integer) Policy rules are evaluated in ascending numerical order (Rule 1 before Rule 2, and so on), and the Rule Order reflects this rule's place in the order.
    Predefined bool
    (Boolean) A Boolean field that indicates that the rule is predefined by using a true value
    Rank int
    (Integer) By default, the admin ranking is disabled. To use this feature, you must enable admin rank. The default value is 7.
    ResCategories []string
    (Set of String) URL categories associated with resolved IP addresses to which the rule applies. If not set, the rule is not restricted to a specific URL category.
    SourceCountries []string
    (Set of String) The countries of origin of traffic for which the rule is applicable. If not set, the rule is not restricted to specific source countries. NOTE: Provide a 2 letter ISO3166 Alpha2 Country code. i.e "US", "CA"
    SrcIpGroups []GetIPSFirewallRuleSrcIpGroup
    (List of Objects)Source IP address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IP address group.
    SrcIps []string
    (Set of String) Source IP addresses or FQDNs to which the rule applies. If not set, the rule is not restricted to a specific source IP address. Each IP entry can be a single IP address, CIDR (e.g., 10.10.33.0/24), or an IP range (e.g., 10.10.33.1-10.10.33.10).
    SrcIpv6Groups []GetIPSFirewallRuleSrcIpv6Group
    (List of Objects) Source IPv6 address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IPv6 address group.
    State string
    (String) An enabled rule is actively enforced. A disabled rule is not actively enforced but does not lose its place in the Rule Order. The service skips it and moves to the next rule.
    ThreatCategories []GetIPSFirewallRuleThreatCategory
    (List of Objects) Advanced threat categories to which the rule applies
    TimeWindows []GetIPSFirewallRuleTimeWindow
    (List of Objects) You can manually select up to 1 time intervals. When not used it implies always to apply the rule to all time intervals.
    Users []GetIPSFirewallRuleUser
    (List of Objects) You can manually select up to 4 general and/or special users. When not used it implies Any to apply the rule to all users.
    ZpaAppSegments []GetIPSFirewallRuleZpaAppSegment
    (List of Objects) The ZPA application segments to which the rule applies
    action String
    (String) The action configured for the rule that must take place if the traffic matches the rule criteria, such as allowing or blocking the traffic or bypassing the rule. The following actions are accepted: ALLOW, BLOCK_DROP, BLOCK_RESET, BYPASS_IPS
    capturePcap Boolean
    (Boolean) Value that indicates whether packet capture (PCAP) is enabled or not
    defaultRule Boolean
    (Boolean) Value that indicates whether the rule is the Default Cloud IPS Rule or not
    departments List<GetIPSFirewallRuleDepartment>
    (List of Objects) Apply to any number of departments When not used it implies Any to apply the rule to all departments.
    description String
    (String) Enter additional notes or information. The description cannot exceed 10,240 characters.
    destAddresses List<String>
    (Set of String) Destination IP addresses or FQDNs to which the rule applies. If not set, the rule is not restricted to a specific destination IP address. Each IP entry can be a single IP address, CIDR (e.g., 10.10.33.0/24), or an IP range (e.g., 10.10.33.1-10.10.33.10).
    destCountries List<String>
    (Set of String) Identify destinations based on the location of a server, select Any to apply the rule to all countries or select the countries to which you want to control traffic. NOTE: Provide a 2 letter ISO3166 Alpha2 Country code. i.e "US", "CA"
    destIpCategories List<String>
    (Set of String) identify destinations based on the URL category of the domain, select Any to apply the rule to all categories or select the specific categories you want to control.
    destIpGroups List<GetIPSFirewallRuleDestIpGroup>
    ** - (List of Objects) Any number of destination IP address groups that you want to control with this rule.
    destIpv6Groups List<GetIPSFirewallRuleDestIpv6Group>
    deviceGroups List<GetIPSFirewallRuleDeviceGroup>
    (List of Objects) Device groups to which the rule applies. This field is applicable for devices that are managed using Zscaler Client Connector. If no value is set, this field is ignored during the policy evaluation.
    devices List<GetIPSFirewallRuleDevice>
    (List of Objects) Devices to which the rule applies. This field is applicable for devices that are managed using Zscaler Client Connector. If no value is set, this field is ignored during the policy evaluation.
    enableFullLogging Boolean
    (Integer) A Boolean value that indicates whether full logging is enabled. A true value indicates that full logging is enabled, whereas a false value indicates that aggregate logging is enabled.
    groups List<GetIPSFirewallRuleGroup>
    (List of Objects) You can manually select up to 8 groups. When not used it implies Any to apply the rule to all groups.
    id Integer
    (Integer) Identifier that uniquely identifies an entity
    labels List<GetIPSFirewallRuleLabel>
    (List of Objects) Labels that are applicable to the rule.
    lastModifiedBies List<GetIPSFirewallRuleLastModifiedBy>
    lastModifiedTime Integer
    locationGroups List<GetIPSFirewallRuleLocationGroup>
    (List of Objects)You can manually select up to 32 location groups. When not used it implies Any to apply the rule to all location groups.
    locations List<GetIPSFirewallRuleLocation>
    (List of Objects) You can manually select up to 8 locations. When not used it implies Any to apply the rule to all groups.
    name String
    (String) The configured name of the entity
    nwServiceGroups List<GetIPSFirewallRuleNwServiceGroup>
    (List of Objects) Any number of predefined or custom network service groups to which the rule applies.
    nwServices List<GetIPSFirewallRuleNwService>
    (List of Objects) When not used it applies the rule to all network services or you can select specific network services. The Zscaler firewall has predefined services and you can configure up to 1,024 additional custom services.
    order Integer
    (Integer) Policy rules are evaluated in ascending numerical order (Rule 1 before Rule 2, and so on), and the Rule Order reflects this rule's place in the order.
    predefined Boolean
    (Boolean) A Boolean field that indicates that the rule is predefined by using a true value
    rank Integer
    (Integer) By default, the admin ranking is disabled. To use this feature, you must enable admin rank. The default value is 7.
    resCategories List<String>
    (Set of String) URL categories associated with resolved IP addresses to which the rule applies. If not set, the rule is not restricted to a specific URL category.
    sourceCountries List<String>
    (Set of String) The countries of origin of traffic for which the rule is applicable. If not set, the rule is not restricted to specific source countries. NOTE: Provide a 2 letter ISO3166 Alpha2 Country code. i.e "US", "CA"
    srcIpGroups List<GetIPSFirewallRuleSrcIpGroup>
    (List of Objects)Source IP address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IP address group.
    srcIps List<String>
    (Set of String) Source IP addresses or FQDNs to which the rule applies. If not set, the rule is not restricted to a specific source IP address. Each IP entry can be a single IP address, CIDR (e.g., 10.10.33.0/24), or an IP range (e.g., 10.10.33.1-10.10.33.10).
    srcIpv6Groups List<GetIPSFirewallRuleSrcIpv6Group>
    (List of Objects) Source IPv6 address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IPv6 address group.
    state String
    (String) An enabled rule is actively enforced. A disabled rule is not actively enforced but does not lose its place in the Rule Order. The service skips it and moves to the next rule.
    threatCategories List<GetIPSFirewallRuleThreatCategory>
    (List of Objects) Advanced threat categories to which the rule applies
    timeWindows List<GetIPSFirewallRuleTimeWindow>
    (List of Objects) You can manually select up to 1 time intervals. When not used it implies always to apply the rule to all time intervals.
    users List<GetIPSFirewallRuleUser>
    (List of Objects) You can manually select up to 4 general and/or special users. When not used it implies Any to apply the rule to all users.
    zpaAppSegments List<GetIPSFirewallRuleZpaAppSegment>
    (List of Objects) The ZPA application segments to which the rule applies
    action string
    (String) The action configured for the rule that must take place if the traffic matches the rule criteria, such as allowing or blocking the traffic or bypassing the rule. The following actions are accepted: ALLOW, BLOCK_DROP, BLOCK_RESET, BYPASS_IPS
    capturePcap boolean
    (Boolean) Value that indicates whether packet capture (PCAP) is enabled or not
    defaultRule boolean
    (Boolean) Value that indicates whether the rule is the Default Cloud IPS Rule or not
    departments GetIPSFirewallRuleDepartment[]
    (List of Objects) Apply to any number of departments When not used it implies Any to apply the rule to all departments.
    description string
    (String) Enter additional notes or information. The description cannot exceed 10,240 characters.
    destAddresses string[]
    (Set of String) Destination IP addresses or FQDNs to which the rule applies. If not set, the rule is not restricted to a specific destination IP address. Each IP entry can be a single IP address, CIDR (e.g., 10.10.33.0/24), or an IP range (e.g., 10.10.33.1-10.10.33.10).
    destCountries string[]
    (Set of String) Identify destinations based on the location of a server, select Any to apply the rule to all countries or select the countries to which you want to control traffic. NOTE: Provide a 2 letter ISO3166 Alpha2 Country code. i.e "US", "CA"
    destIpCategories string[]
    (Set of String) identify destinations based on the URL category of the domain, select Any to apply the rule to all categories or select the specific categories you want to control.
    destIpGroups GetIPSFirewallRuleDestIpGroup[]
    ** - (List of Objects) Any number of destination IP address groups that you want to control with this rule.
    destIpv6Groups GetIPSFirewallRuleDestIpv6Group[]
    deviceGroups GetIPSFirewallRuleDeviceGroup[]
    (List of Objects) Device groups to which the rule applies. This field is applicable for devices that are managed using Zscaler Client Connector. If no value is set, this field is ignored during the policy evaluation.
    devices GetIPSFirewallRuleDevice[]
    (List of Objects) Devices to which the rule applies. This field is applicable for devices that are managed using Zscaler Client Connector. If no value is set, this field is ignored during the policy evaluation.
    enableFullLogging boolean
    (Integer) A Boolean value that indicates whether full logging is enabled. A true value indicates that full logging is enabled, whereas a false value indicates that aggregate logging is enabled.
    groups GetIPSFirewallRuleGroup[]
    (List of Objects) You can manually select up to 8 groups. When not used it implies Any to apply the rule to all groups.
    id number
    (Integer) Identifier that uniquely identifies an entity
    labels GetIPSFirewallRuleLabel[]
    (List of Objects) Labels that are applicable to the rule.
    lastModifiedBies GetIPSFirewallRuleLastModifiedBy[]
    lastModifiedTime number
    locationGroups GetIPSFirewallRuleLocationGroup[]
    (List of Objects)You can manually select up to 32 location groups. When not used it implies Any to apply the rule to all location groups.
    locations GetIPSFirewallRuleLocation[]
    (List of Objects) You can manually select up to 8 locations. When not used it implies Any to apply the rule to all groups.
    name string
    (String) The configured name of the entity
    nwServiceGroups GetIPSFirewallRuleNwServiceGroup[]
    (List of Objects) Any number of predefined or custom network service groups to which the rule applies.
    nwServices GetIPSFirewallRuleNwService[]
    (List of Objects) When not used it applies the rule to all network services or you can select specific network services. The Zscaler firewall has predefined services and you can configure up to 1,024 additional custom services.
    order number
    (Integer) Policy rules are evaluated in ascending numerical order (Rule 1 before Rule 2, and so on), and the Rule Order reflects this rule's place in the order.
    predefined boolean
    (Boolean) A Boolean field that indicates that the rule is predefined by using a true value
    rank number
    (Integer) By default, the admin ranking is disabled. To use this feature, you must enable admin rank. The default value is 7.
    resCategories string[]
    (Set of String) URL categories associated with resolved IP addresses to which the rule applies. If not set, the rule is not restricted to a specific URL category.
    sourceCountries string[]
    (Set of String) The countries of origin of traffic for which the rule is applicable. If not set, the rule is not restricted to specific source countries. NOTE: Provide a 2 letter ISO3166 Alpha2 Country code. i.e "US", "CA"
    srcIpGroups GetIPSFirewallRuleSrcIpGroup[]
    (List of Objects)Source IP address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IP address group.
    srcIps string[]
    (Set of String) Source IP addresses or FQDNs to which the rule applies. If not set, the rule is not restricted to a specific source IP address. Each IP entry can be a single IP address, CIDR (e.g., 10.10.33.0/24), or an IP range (e.g., 10.10.33.1-10.10.33.10).
    srcIpv6Groups GetIPSFirewallRuleSrcIpv6Group[]
    (List of Objects) Source IPv6 address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IPv6 address group.
    state string
    (String) An enabled rule is actively enforced. A disabled rule is not actively enforced but does not lose its place in the Rule Order. The service skips it and moves to the next rule.
    threatCategories GetIPSFirewallRuleThreatCategory[]
    (List of Objects) Advanced threat categories to which the rule applies
    timeWindows GetIPSFirewallRuleTimeWindow[]
    (List of Objects) You can manually select up to 1 time intervals. When not used it implies always to apply the rule to all time intervals.
    users GetIPSFirewallRuleUser[]
    (List of Objects) You can manually select up to 4 general and/or special users. When not used it implies Any to apply the rule to all users.
    zpaAppSegments GetIPSFirewallRuleZpaAppSegment[]
    (List of Objects) The ZPA application segments to which the rule applies
    action str
    (String) The action configured for the rule that must take place if the traffic matches the rule criteria, such as allowing or blocking the traffic or bypassing the rule. The following actions are accepted: ALLOW, BLOCK_DROP, BLOCK_RESET, BYPASS_IPS
    capture_pcap bool
    (Boolean) Value that indicates whether packet capture (PCAP) is enabled or not
    default_rule bool
    (Boolean) Value that indicates whether the rule is the Default Cloud IPS Rule or not
    departments Sequence[GetIPSFirewallRuleDepartment]
    (List of Objects) Apply to any number of departments When not used it implies Any to apply the rule to all departments.
    description str
    (String) Enter additional notes or information. The description cannot exceed 10,240 characters.
    dest_addresses Sequence[str]
    (Set of String) Destination IP addresses or FQDNs to which the rule applies. If not set, the rule is not restricted to a specific destination IP address. Each IP entry can be a single IP address, CIDR (e.g., 10.10.33.0/24), or an IP range (e.g., 10.10.33.1-10.10.33.10).
    dest_countries Sequence[str]
    (Set of String) Identify destinations based on the location of a server, select Any to apply the rule to all countries or select the countries to which you want to control traffic. NOTE: Provide a 2 letter ISO3166 Alpha2 Country code. i.e "US", "CA"
    dest_ip_categories Sequence[str]
    (Set of String) identify destinations based on the URL category of the domain, select Any to apply the rule to all categories or select the specific categories you want to control.
    dest_ip_groups Sequence[GetIPSFirewallRuleDestIpGroup]
    ** - (List of Objects) Any number of destination IP address groups that you want to control with this rule.
    dest_ipv6_groups Sequence[GetIPSFirewallRuleDestIpv6Group]
    device_groups Sequence[GetIPSFirewallRuleDeviceGroup]
    (List of Objects) Device groups to which the rule applies. This field is applicable for devices that are managed using Zscaler Client Connector. If no value is set, this field is ignored during the policy evaluation.
    devices Sequence[GetIPSFirewallRuleDevice]
    (List of Objects) Devices to which the rule applies. This field is applicable for devices that are managed using Zscaler Client Connector. If no value is set, this field is ignored during the policy evaluation.
    enable_full_logging bool
    (Integer) A Boolean value that indicates whether full logging is enabled. A true value indicates that full logging is enabled, whereas a false value indicates that aggregate logging is enabled.
    groups Sequence[GetIPSFirewallRuleGroup]
    (List of Objects) You can manually select up to 8 groups. When not used it implies Any to apply the rule to all groups.
    id int
    (Integer) Identifier that uniquely identifies an entity
    labels Sequence[GetIPSFirewallRuleLabel]
    (List of Objects) Labels that are applicable to the rule.
    last_modified_bies Sequence[GetIPSFirewallRuleLastModifiedBy]
    last_modified_time int
    location_groups Sequence[GetIPSFirewallRuleLocationGroup]
    (List of Objects)You can manually select up to 32 location groups. When not used it implies Any to apply the rule to all location groups.
    locations Sequence[GetIPSFirewallRuleLocation]
    (List of Objects) You can manually select up to 8 locations. When not used it implies Any to apply the rule to all groups.
    name str
    (String) The configured name of the entity
    nw_service_groups Sequence[GetIPSFirewallRuleNwServiceGroup]
    (List of Objects) Any number of predefined or custom network service groups to which the rule applies.
    nw_services Sequence[GetIPSFirewallRuleNwService]
    (List of Objects) When not used it applies the rule to all network services or you can select specific network services. The Zscaler firewall has predefined services and you can configure up to 1,024 additional custom services.
    order int
    (Integer) Policy rules are evaluated in ascending numerical order (Rule 1 before Rule 2, and so on), and the Rule Order reflects this rule's place in the order.
    predefined bool
    (Boolean) A Boolean field that indicates that the rule is predefined by using a true value
    rank int
    (Integer) By default, the admin ranking is disabled. To use this feature, you must enable admin rank. The default value is 7.
    res_categories Sequence[str]
    (Set of String) URL categories associated with resolved IP addresses to which the rule applies. If not set, the rule is not restricted to a specific URL category.
    source_countries Sequence[str]
    (Set of String) The countries of origin of traffic for which the rule is applicable. If not set, the rule is not restricted to specific source countries. NOTE: Provide a 2 letter ISO3166 Alpha2 Country code. i.e "US", "CA"
    src_ip_groups Sequence[GetIPSFirewallRuleSrcIpGroup]
    (List of Objects)Source IP address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IP address group.
    src_ips Sequence[str]
    (Set of String) Source IP addresses or FQDNs to which the rule applies. If not set, the rule is not restricted to a specific source IP address. Each IP entry can be a single IP address, CIDR (e.g., 10.10.33.0/24), or an IP range (e.g., 10.10.33.1-10.10.33.10).
    src_ipv6_groups Sequence[GetIPSFirewallRuleSrcIpv6Group]
    (List of Objects) Source IPv6 address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IPv6 address group.
    state str
    (String) An enabled rule is actively enforced. A disabled rule is not actively enforced but does not lose its place in the Rule Order. The service skips it and moves to the next rule.
    threat_categories Sequence[GetIPSFirewallRuleThreatCategory]
    (List of Objects) Advanced threat categories to which the rule applies
    time_windows Sequence[GetIPSFirewallRuleTimeWindow]
    (List of Objects) You can manually select up to 1 time intervals. When not used it implies always to apply the rule to all time intervals.
    users Sequence[GetIPSFirewallRuleUser]
    (List of Objects) You can manually select up to 4 general and/or special users. When not used it implies Any to apply the rule to all users.
    zpa_app_segments Sequence[GetIPSFirewallRuleZpaAppSegment]
    (List of Objects) The ZPA application segments to which the rule applies
    action String
    (String) The action configured for the rule that must take place if the traffic matches the rule criteria, such as allowing or blocking the traffic or bypassing the rule. The following actions are accepted: ALLOW, BLOCK_DROP, BLOCK_RESET, BYPASS_IPS
    capturePcap Boolean
    (Boolean) Value that indicates whether packet capture (PCAP) is enabled or not
    defaultRule Boolean
    (Boolean) Value that indicates whether the rule is the Default Cloud IPS Rule or not
    departments List<Property Map>
    (List of Objects) Apply to any number of departments When not used it implies Any to apply the rule to all departments.
    description String
    (String) Enter additional notes or information. The description cannot exceed 10,240 characters.
    destAddresses List<String>
    (Set of String) Destination IP addresses or FQDNs to which the rule applies. If not set, the rule is not restricted to a specific destination IP address. Each IP entry can be a single IP address, CIDR (e.g., 10.10.33.0/24), or an IP range (e.g., 10.10.33.1-10.10.33.10).
    destCountries List<String>
    (Set of String) Identify destinations based on the location of a server, select Any to apply the rule to all countries or select the countries to which you want to control traffic. NOTE: Provide a 2 letter ISO3166 Alpha2 Country code. i.e "US", "CA"
    destIpCategories List<String>
    (Set of String) identify destinations based on the URL category of the domain, select Any to apply the rule to all categories or select the specific categories you want to control.
    destIpGroups List<Property Map>
    ** - (List of Objects) Any number of destination IP address groups that you want to control with this rule.
    destIpv6Groups List<Property Map>
    deviceGroups List<Property Map>
    (List of Objects) Device groups to which the rule applies. This field is applicable for devices that are managed using Zscaler Client Connector. If no value is set, this field is ignored during the policy evaluation.
    devices List<Property Map>
    (List of Objects) Devices to which the rule applies. This field is applicable for devices that are managed using Zscaler Client Connector. If no value is set, this field is ignored during the policy evaluation.
    enableFullLogging Boolean
    (Integer) A Boolean value that indicates whether full logging is enabled. A true value indicates that full logging is enabled, whereas a false value indicates that aggregate logging is enabled.
    groups List<Property Map>
    (List of Objects) You can manually select up to 8 groups. When not used it implies Any to apply the rule to all groups.
    id Number
    (Integer) Identifier that uniquely identifies an entity
    labels List<Property Map>
    (List of Objects) Labels that are applicable to the rule.
    lastModifiedBies List<Property Map>
    lastModifiedTime Number
    locationGroups List<Property Map>
    (List of Objects)You can manually select up to 32 location groups. When not used it implies Any to apply the rule to all location groups.
    locations List<Property Map>
    (List of Objects) You can manually select up to 8 locations. When not used it implies Any to apply the rule to all groups.
    name String
    (String) The configured name of the entity
    nwServiceGroups List<Property Map>
    (List of Objects) Any number of predefined or custom network service groups to which the rule applies.
    nwServices List<Property Map>
    (List of Objects) When not used it applies the rule to all network services or you can select specific network services. The Zscaler firewall has predefined services and you can configure up to 1,024 additional custom services.
    order Number
    (Integer) Policy rules are evaluated in ascending numerical order (Rule 1 before Rule 2, and so on), and the Rule Order reflects this rule's place in the order.
    predefined Boolean
    (Boolean) A Boolean field that indicates that the rule is predefined by using a true value
    rank Number
    (Integer) By default, the admin ranking is disabled. To use this feature, you must enable admin rank. The default value is 7.
    resCategories List<String>
    (Set of String) URL categories associated with resolved IP addresses to which the rule applies. If not set, the rule is not restricted to a specific URL category.
    sourceCountries List<String>
    (Set of String) The countries of origin of traffic for which the rule is applicable. If not set, the rule is not restricted to specific source countries. NOTE: Provide a 2 letter ISO3166 Alpha2 Country code. i.e "US", "CA"
    srcIpGroups List<Property Map>
    (List of Objects)Source IP address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IP address group.
    srcIps List<String>
    (Set of String) Source IP addresses or FQDNs to which the rule applies. If not set, the rule is not restricted to a specific source IP address. Each IP entry can be a single IP address, CIDR (e.g., 10.10.33.0/24), or an IP range (e.g., 10.10.33.1-10.10.33.10).
    srcIpv6Groups List<Property Map>
    (List of Objects) Source IPv6 address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IPv6 address group.
    state String
    (String) An enabled rule is actively enforced. A disabled rule is not actively enforced but does not lose its place in the Rule Order. The service skips it and moves to the next rule.
    threatCategories List<Property Map>
    (List of Objects) Advanced threat categories to which the rule applies
    timeWindows List<Property Map>
    (List of Objects) You can manually select up to 1 time intervals. When not used it implies always to apply the rule to all time intervals.
    users List<Property Map>
    (List of Objects) You can manually select up to 4 general and/or special users. When not used it implies Any to apply the rule to all users.
    zpaAppSegments List<Property Map>
    (List of Objects) The ZPA application segments to which the rule applies

    Supporting Types

    GetIPSFirewallRuleDepartment

    Extensions Dictionary<string, string>
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    Extensions map[string]string
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    extensions Map<String,String>
    id Integer
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule
    extensions {[key: string]: string}
    id number
    Unique identifier for the Firewall Filtering policy rule
    name string
    Name of the Firewall Filtering policy rule
    extensions Mapping[str, str]
    id int
    Unique identifier for the Firewall Filtering policy rule
    name str
    Name of the Firewall Filtering policy rule
    extensions Map<String>
    id Number
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule

    GetIPSFirewallRuleDestIpGroup

    Extensions Dictionary<string, string>
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    Extensions map[string]string
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    extensions Map<String,String>
    id Integer
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule
    extensions {[key: string]: string}
    id number
    Unique identifier for the Firewall Filtering policy rule
    name string
    Name of the Firewall Filtering policy rule
    extensions Mapping[str, str]
    id int
    Unique identifier for the Firewall Filtering policy rule
    name str
    Name of the Firewall Filtering policy rule
    extensions Map<String>
    id Number
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule

    GetIPSFirewallRuleDestIpv6Group

    Extensions Dictionary<string, string>
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    Extensions map[string]string
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    extensions Map<String,String>
    id Integer
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule
    extensions {[key: string]: string}
    id number
    Unique identifier for the Firewall Filtering policy rule
    name string
    Name of the Firewall Filtering policy rule
    extensions Mapping[str, str]
    id int
    Unique identifier for the Firewall Filtering policy rule
    name str
    Name of the Firewall Filtering policy rule
    extensions Map<String>
    id Number
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule

    GetIPSFirewallRuleDevice

    Extensions Dictionary<string, string>
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    Extensions map[string]string
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    extensions Map<String,String>
    id Integer
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule
    extensions {[key: string]: string}
    id number
    Unique identifier for the Firewall Filtering policy rule
    name string
    Name of the Firewall Filtering policy rule
    extensions Mapping[str, str]
    id int
    Unique identifier for the Firewall Filtering policy rule
    name str
    Name of the Firewall Filtering policy rule
    extensions Map<String>
    id Number
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule

    GetIPSFirewallRuleDeviceGroup

    Extensions Dictionary<string, string>
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    Extensions map[string]string
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    extensions Map<String,String>
    id Integer
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule
    extensions {[key: string]: string}
    id number
    Unique identifier for the Firewall Filtering policy rule
    name string
    Name of the Firewall Filtering policy rule
    extensions Mapping[str, str]
    id int
    Unique identifier for the Firewall Filtering policy rule
    name str
    Name of the Firewall Filtering policy rule
    extensions Map<String>
    id Number
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule

    GetIPSFirewallRuleGroup

    Extensions Dictionary<string, string>
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    Extensions map[string]string
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    extensions Map<String,String>
    id Integer
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule
    extensions {[key: string]: string}
    id number
    Unique identifier for the Firewall Filtering policy rule
    name string
    Name of the Firewall Filtering policy rule
    extensions Mapping[str, str]
    id int
    Unique identifier for the Firewall Filtering policy rule
    name str
    Name of the Firewall Filtering policy rule
    extensions Map<String>
    id Number
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule

    GetIPSFirewallRuleLabel

    Extensions Dictionary<string, string>
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    Extensions map[string]string
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    extensions Map<String,String>
    id Integer
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule
    extensions {[key: string]: string}
    id number
    Unique identifier for the Firewall Filtering policy rule
    name string
    Name of the Firewall Filtering policy rule
    extensions Mapping[str, str]
    id int
    Unique identifier for the Firewall Filtering policy rule
    name str
    Name of the Firewall Filtering policy rule
    extensions Map<String>
    id Number
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule

    GetIPSFirewallRuleLastModifiedBy

    Extensions Dictionary<string, string>
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    Extensions map[string]string
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    extensions Map<String,String>
    id Integer
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule
    extensions {[key: string]: string}
    id number
    Unique identifier for the Firewall Filtering policy rule
    name string
    Name of the Firewall Filtering policy rule
    extensions Mapping[str, str]
    id int
    Unique identifier for the Firewall Filtering policy rule
    name str
    Name of the Firewall Filtering policy rule
    extensions Map<String>
    id Number
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule

    GetIPSFirewallRuleLocation

    Extensions Dictionary<string, string>
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    Extensions map[string]string
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    extensions Map<String,String>
    id Integer
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule
    extensions {[key: string]: string}
    id number
    Unique identifier for the Firewall Filtering policy rule
    name string
    Name of the Firewall Filtering policy rule
    extensions Mapping[str, str]
    id int
    Unique identifier for the Firewall Filtering policy rule
    name str
    Name of the Firewall Filtering policy rule
    extensions Map<String>
    id Number
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule

    GetIPSFirewallRuleLocationGroup

    Extensions Dictionary<string, string>
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    Extensions map[string]string
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    extensions Map<String,String>
    id Integer
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule
    extensions {[key: string]: string}
    id number
    Unique identifier for the Firewall Filtering policy rule
    name string
    Name of the Firewall Filtering policy rule
    extensions Mapping[str, str]
    id int
    Unique identifier for the Firewall Filtering policy rule
    name str
    Name of the Firewall Filtering policy rule
    extensions Map<String>
    id Number
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule

    GetIPSFirewallRuleNwService

    Extensions Dictionary<string, string>
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    Extensions map[string]string
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    extensions Map<String,String>
    id Integer
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule
    extensions {[key: string]: string}
    id number
    Unique identifier for the Firewall Filtering policy rule
    name string
    Name of the Firewall Filtering policy rule
    extensions Mapping[str, str]
    id int
    Unique identifier for the Firewall Filtering policy rule
    name str
    Name of the Firewall Filtering policy rule
    extensions Map<String>
    id Number
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule

    GetIPSFirewallRuleNwServiceGroup

    Extensions Dictionary<string, string>
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    Extensions map[string]string
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    extensions Map<String,String>
    id Integer
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule
    extensions {[key: string]: string}
    id number
    Unique identifier for the Firewall Filtering policy rule
    name string
    Name of the Firewall Filtering policy rule
    extensions Mapping[str, str]
    id int
    Unique identifier for the Firewall Filtering policy rule
    name str
    Name of the Firewall Filtering policy rule
    extensions Map<String>
    id Number
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule

    GetIPSFirewallRuleSrcIpGroup

    Extensions Dictionary<string, string>
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    Extensions map[string]string
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    extensions Map<String,String>
    id Integer
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule
    extensions {[key: string]: string}
    id number
    Unique identifier for the Firewall Filtering policy rule
    name string
    Name of the Firewall Filtering policy rule
    extensions Mapping[str, str]
    id int
    Unique identifier for the Firewall Filtering policy rule
    name str
    Name of the Firewall Filtering policy rule
    extensions Map<String>
    id Number
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule

    GetIPSFirewallRuleSrcIpv6Group

    Extensions Dictionary<string, string>
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    Extensions map[string]string
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    extensions Map<String,String>
    id Integer
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule
    extensions {[key: string]: string}
    id number
    Unique identifier for the Firewall Filtering policy rule
    name string
    Name of the Firewall Filtering policy rule
    extensions Mapping[str, str]
    id int
    Unique identifier for the Firewall Filtering policy rule
    name str
    Name of the Firewall Filtering policy rule
    extensions Map<String>
    id Number
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule

    GetIPSFirewallRuleThreatCategory

    Extensions Dictionary<string, string>
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    Extensions map[string]string
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    extensions Map<String,String>
    id Integer
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule
    extensions {[key: string]: string}
    id number
    Unique identifier for the Firewall Filtering policy rule
    name string
    Name of the Firewall Filtering policy rule
    extensions Mapping[str, str]
    id int
    Unique identifier for the Firewall Filtering policy rule
    name str
    Name of the Firewall Filtering policy rule
    extensions Map<String>
    id Number
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule

    GetIPSFirewallRuleTimeWindow

    Extensions Dictionary<string, string>
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    Extensions map[string]string
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    extensions Map<String,String>
    id Integer
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule
    extensions {[key: string]: string}
    id number
    Unique identifier for the Firewall Filtering policy rule
    name string
    Name of the Firewall Filtering policy rule
    extensions Mapping[str, str]
    id int
    Unique identifier for the Firewall Filtering policy rule
    name str
    Name of the Firewall Filtering policy rule
    extensions Map<String>
    id Number
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule

    GetIPSFirewallRuleUser

    Extensions Dictionary<string, string>
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    Extensions map[string]string
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    extensions Map<String,String>
    id Integer
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule
    extensions {[key: string]: string}
    id number
    Unique identifier for the Firewall Filtering policy rule
    name string
    Name of the Firewall Filtering policy rule
    extensions Mapping[str, str]
    id int
    Unique identifier for the Firewall Filtering policy rule
    name str
    Name of the Firewall Filtering policy rule
    extensions Map<String>
    id Number
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule

    GetIPSFirewallRuleZpaAppSegment

    ExternalId string
    Indicates the external ID. Applicable only when this reference is of an external entity.
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    ExternalId string
    Indicates the external ID. Applicable only when this reference is of an external entity.
    Id int
    Unique identifier for the Firewall Filtering policy rule
    Name string
    Name of the Firewall Filtering policy rule
    externalId String
    Indicates the external ID. Applicable only when this reference is of an external entity.
    id Integer
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule
    externalId string
    Indicates the external ID. Applicable only when this reference is of an external entity.
    id number
    Unique identifier for the Firewall Filtering policy rule
    name string
    Name of the Firewall Filtering policy rule
    external_id str
    Indicates the external ID. Applicable only when this reference is of an external entity.
    id int
    Unique identifier for the Firewall Filtering policy rule
    name str
    Name of the Firewall Filtering policy rule
    externalId String
    Indicates the external ID. Applicable only when this reference is of an external entity.
    id Number
    Unique identifier for the Firewall Filtering policy rule
    name String
    Name of the Firewall Filtering policy rule

    Package Details

    Repository
    zia zscaler/pulumi-zia
    License
    MIT
    Notes
    This Pulumi package is based on the zia Terraform Provider.
    zia logo
    Zscaler Internet Access v1.0.1 published on Friday, Jun 6, 2025 by Zscaler
    zscaler/pulumi-zia