Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Cisco Catalyst SD-WAN Provider
  3. API Docs
  4. ZoneBasedFirewallPolicyDefinition
Cisco Catalyst SD-WAN v0.3.0 published on Friday, Mar 28, 2025 by Pulumi
pulumi/pulumi-sdwan

sdwan.ZoneBasedFirewallPolicyDefinition

Explore with Pulumi AI

sdwan logo
Cisco Catalyst SD-WAN v0.3.0 published on Friday, Mar 28, 2025 by Pulumi
pulumi/pulumi-sdwan

    This resource can manage a Zone Based Firewall Policy Definition .

    Example Usage

    Coming soon!

    Coming soon!

    Coming soon!

    Coming soon!

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.sdwan.ZoneBasedFirewallPolicyDefinition;
import com.pulumi.sdwan.ZoneBasedFirewallPolicyDefinitionArgs;
import com.pulumi.sdwan.inputs.ZoneBasedFirewallPolicyDefinitionApplyZonePairArgs;
import com.pulumi.sdwan.inputs.ZoneBasedFirewallPolicyDefinitionRuleArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new ZoneBasedFirewallPolicyDefinition("example", ZoneBasedFirewallPolicyDefinitionArgs.builder()
            .name("Example")
            .description("My description")
            .mode("security")
            .applyZonePairs(ZoneBasedFirewallPolicyDefinitionApplyZonePairArgs.builder()
                .source_zone("self")
                .destination_zone("0d26a366-4a11-4942-a5ea-82af9502889f")
                .build())
            .defaultAction("pass")
            .rules(ZoneBasedFirewallPolicyDefinitionRuleArgs.builder()
                .rule_order(1)
                .rule_name("RULE_1")
                .base_action("inspect")
                .match_entries(%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference))
                .action_entries(%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference))
                .build())
            .build());

    }
}

    resources:
  example:
    type: sdwan:ZoneBasedFirewallPolicyDefinition
    properties:
      name: Example
      description: My description
      mode: security
      applyZonePairs:
        - source_zone: self
          destination_zone: 0d26a366-4a11-4942-a5ea-82af9502889f
      defaultAction: pass
      rules:
        - rule_order: 1
          rule_name: RULE_1
          base_action: inspect
          match_entries:
            - type: sourceGeoLocationList
              policyId: 0d26a366-4a11-4942-a5ea-82af9502889f
          action_entries:
            - type: log

    Create ZoneBasedFirewallPolicyDefinition Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new ZoneBasedFirewallPolicyDefinition(name: string, args: ZoneBasedFirewallPolicyDefinitionArgs, opts?: CustomResourceOptions);
    @overload
def ZoneBasedFirewallPolicyDefinition(resource_name: str,
                                      args: ZoneBasedFirewallPolicyDefinitionArgs,
                                      opts: Optional[ResourceOptions] = None)

@overload
def ZoneBasedFirewallPolicyDefinition(resource_name: str,
                                      opts: Optional[ResourceOptions] = None,
                                      default_action: Optional[str] = None,
                                      description: Optional[str] = None,
                                      mode: Optional[str] = None,
                                      rules: Optional[Sequence[ZoneBasedFirewallPolicyDefinitionRuleArgs]] = None,
                                      apply_zone_pairs: Optional[Sequence[ZoneBasedFirewallPolicyDefinitionApplyZonePairArgs]] = None,
                                      name: Optional[str] = None)
    func NewZoneBasedFirewallPolicyDefinition(ctx *Context, name string, args ZoneBasedFirewallPolicyDefinitionArgs, opts ...ResourceOption) (*ZoneBasedFirewallPolicyDefinition, error)
    public ZoneBasedFirewallPolicyDefinition(string name, ZoneBasedFirewallPolicyDefinitionArgs args, CustomResourceOptions? opts = null)
    public ZoneBasedFirewallPolicyDefinition(String name, ZoneBasedFirewallPolicyDefinitionArgs args)
public ZoneBasedFirewallPolicyDefinition(String name, ZoneBasedFirewallPolicyDefinitionArgs args, CustomResourceOptions options)

    type: sdwan:ZoneBasedFirewallPolicyDefinition
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args ZoneBasedFirewallPolicyDefinitionArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args ZoneBasedFirewallPolicyDefinitionArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args ZoneBasedFirewallPolicyDefinitionArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args ZoneBasedFirewallPolicyDefinitionArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args ZoneBasedFirewallPolicyDefinitionArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var zoneBasedFirewallPolicyDefinitionResource = new Sdwan.ZoneBasedFirewallPolicyDefinition("zoneBasedFirewallPolicyDefinitionResource", new()
{
    DefaultAction = "string",
    Description = "string",
    Mode = "string",
    Rules = new[]
    {
        new Sdwan.Inputs.ZoneBasedFirewallPolicyDefinitionRuleArgs
        {
            BaseAction = "string",
            RuleName = "string",
            RuleOrder = 0,
            ActionEntries = new[]
            {
                new Sdwan.Inputs.ZoneBasedFirewallPolicyDefinitionRuleActionEntryArgs
                {
                    Type = "string",
                },
            },
            MatchEntries = new[]
            {
                new Sdwan.Inputs.ZoneBasedFirewallPolicyDefinitionRuleMatchEntryArgs
                {
                    Type = "string",
                    PolicyId = "string",
                    ProtocolType = "string",
                    Value = "string",
                    ValueVariable = "string",
                },
            },
        },
    },
    ApplyZonePairs = new[]
    {
        new Sdwan.Inputs.ZoneBasedFirewallPolicyDefinitionApplyZonePairArgs
        {
            DestinationZone = "string",
            SourceZone = "string",
        },
    },
    Name = "string",
});

    example, err := sdwan.NewZoneBasedFirewallPolicyDefinition(ctx, "zoneBasedFirewallPolicyDefinitionResource", &sdwan.ZoneBasedFirewallPolicyDefinitionArgs{
	DefaultAction: pulumi.String("string"),
	Description:   pulumi.String("string"),
	Mode:          pulumi.String("string"),
	Rules: sdwan.ZoneBasedFirewallPolicyDefinitionRuleArray{
		&sdwan.ZoneBasedFirewallPolicyDefinitionRuleArgs{
			BaseAction: pulumi.String("string"),
			RuleName:   pulumi.String("string"),
			RuleOrder:  pulumi.Int(0),
			ActionEntries: sdwan.ZoneBasedFirewallPolicyDefinitionRuleActionEntryArray{
				&sdwan.ZoneBasedFirewallPolicyDefinitionRuleActionEntryArgs{
					Type: pulumi.String("string"),
				},
			},
			MatchEntries: sdwan.ZoneBasedFirewallPolicyDefinitionRuleMatchEntryArray{
				&sdwan.ZoneBasedFirewallPolicyDefinitionRuleMatchEntryArgs{
					Type:          pulumi.String("string"),
					PolicyId:      pulumi.String("string"),
					ProtocolType:  pulumi.String("string"),
					Value:         pulumi.String("string"),
					ValueVariable: pulumi.String("string"),
				},
			},
		},
	},
	ApplyZonePairs: sdwan.ZoneBasedFirewallPolicyDefinitionApplyZonePairArray{
		&sdwan.ZoneBasedFirewallPolicyDefinitionApplyZonePairArgs{
			DestinationZone: pulumi.String("string"),
			SourceZone:      pulumi.String("string"),
		},
	},
	Name: pulumi.String("string"),
})

    var zoneBasedFirewallPolicyDefinitionResource = new ZoneBasedFirewallPolicyDefinition("zoneBasedFirewallPolicyDefinitionResource", ZoneBasedFirewallPolicyDefinitionArgs.builder()
    .defaultAction("string")
    .description("string")
    .mode("string")
    .rules(ZoneBasedFirewallPolicyDefinitionRuleArgs.builder()
        .baseAction("string")
        .ruleName("string")
        .ruleOrder(0)
        .actionEntries(ZoneBasedFirewallPolicyDefinitionRuleActionEntryArgs.builder()
            .type("string")
            .build())
        .matchEntries(ZoneBasedFirewallPolicyDefinitionRuleMatchEntryArgs.builder()
            .type("string")
            .policyId("string")
            .protocolType("string")
            .value("string")
            .valueVariable("string")
            .build())
        .build())
    .applyZonePairs(ZoneBasedFirewallPolicyDefinitionApplyZonePairArgs.builder()
        .destinationZone("string")
        .sourceZone("string")
        .build())
    .name("string")
    .build());

    zone_based_firewall_policy_definition_resource = sdwan.ZoneBasedFirewallPolicyDefinition("zoneBasedFirewallPolicyDefinitionResource",
    default_action="string",
    description="string",
    mode="string",
    rules=[{
        "base_action": "string",
        "rule_name": "string",
        "rule_order": 0,
        "action_entries": [{
            "type": "string",
        }],
        "match_entries": [{
            "type": "string",
            "policy_id": "string",
            "protocol_type": "string",
            "value": "string",
            "value_variable": "string",
        }],
    }],
    apply_zone_pairs=[{
        "destination_zone": "string",
        "source_zone": "string",
    }],
    name="string")

    const zoneBasedFirewallPolicyDefinitionResource = new sdwan.ZoneBasedFirewallPolicyDefinition("zoneBasedFirewallPolicyDefinitionResource", {
    defaultAction: "string",
    description: "string",
    mode: "string",
    rules: [{
        baseAction: "string",
        ruleName: "string",
        ruleOrder: 0,
        actionEntries: [{
            type: "string",
        }],
        matchEntries: [{
            type: "string",
            policyId: "string",
            protocolType: "string",
            value: "string",
            valueVariable: "string",
        }],
    }],
    applyZonePairs: [{
        destinationZone: "string",
        sourceZone: "string",
    }],
    name: "string",
});

    type: sdwan:ZoneBasedFirewallPolicyDefinition
properties:
    applyZonePairs:
        - destinationZone: string
          sourceZone: string
    defaultAction: string
    description: string
    mode: string
    name: string
    rules:
        - actionEntries:
            - type: string
          baseAction: string
          matchEntries:
            - policyId: string
              protocolType: string
              type: string
              value: string
              valueVariable: string
          ruleName: string
          ruleOrder: 0

    ZoneBasedFirewallPolicyDefinition Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The ZoneBasedFirewallPolicyDefinition resource accepts the following input properties:

    DefaultAction string
    Default Action - Choices: pass, drop
    Description string
    The description of the policy definition
    Mode string
    The policy mode - Choices: security, unified
    Rules List<ZoneBasedFirewallPolicyDefinitionRule>
    ApplyZonePairs List<ZoneBasedFirewallPolicyDefinitionApplyZonePair>
    , Attribute conditional on mode being equal to security
    Name string
    The name of the policy definition
    DefaultAction string
    Default Action - Choices: pass, drop
    Description string
    The description of the policy definition
    Mode string
    The policy mode - Choices: security, unified
    Rules []ZoneBasedFirewallPolicyDefinitionRuleArgs
    ApplyZonePairs []ZoneBasedFirewallPolicyDefinitionApplyZonePairArgs
    , Attribute conditional on mode being equal to security
    Name string
    The name of the policy definition
    defaultAction String
    Default Action - Choices: pass, drop
    description String
    The description of the policy definition
    mode String
    The policy mode - Choices: security, unified
    rules List<ZoneBasedFirewallPolicyDefinitionRule>
    applyZonePairs List<ZoneBasedFirewallPolicyDefinitionApplyZonePair>
    , Attribute conditional on mode being equal to security
    name String
    The name of the policy definition
    defaultAction string
    Default Action - Choices: pass, drop
    description string
    The description of the policy definition
    mode string
    The policy mode - Choices: security, unified
    rules ZoneBasedFirewallPolicyDefinitionRule[]
    applyZonePairs ZoneBasedFirewallPolicyDefinitionApplyZonePair[]
    , Attribute conditional on mode being equal to security
    name string
    The name of the policy definition
    default_action str
    Default Action - Choices: pass, drop
    description str
    The description of the policy definition
    mode str
    The policy mode - Choices: security, unified
    rules Sequence[ZoneBasedFirewallPolicyDefinitionRuleArgs]
    apply_zone_pairs Sequence[ZoneBasedFirewallPolicyDefinitionApplyZonePairArgs]
    , Attribute conditional on mode being equal to security
    name str
    The name of the policy definition
    defaultAction String
    Default Action - Choices: pass, drop
    description String
    The description of the policy definition
    mode String
    The policy mode - Choices: security, unified
    rules List<Property Map>
    applyZonePairs List<Property Map>
    , Attribute conditional on mode being equal to security
    name String
    The name of the policy definition

    Outputs

    All input properties are implicitly available as output properties. Additionally, the ZoneBasedFirewallPolicyDefinition resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Version int
    The version of the object
    Id string
    The provider-assigned unique ID for this managed resource.
    Version int
    The version of the object
    id String
    The provider-assigned unique ID for this managed resource.
    version Integer
    The version of the object
    id string
    The provider-assigned unique ID for this managed resource.
    version number
    The version of the object
    id str
    The provider-assigned unique ID for this managed resource.
    version int
    The version of the object
    id String
    The provider-assigned unique ID for this managed resource.
    version Number
    The version of the object

    Look up Existing ZoneBasedFirewallPolicyDefinition Resource

    Get an existing ZoneBasedFirewallPolicyDefinition resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: ZoneBasedFirewallPolicyDefinitionState, opts?: CustomResourceOptions): ZoneBasedFirewallPolicyDefinition
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        apply_zone_pairs: Optional[Sequence[ZoneBasedFirewallPolicyDefinitionApplyZonePairArgs]] = None,
        default_action: Optional[str] = None,
        description: Optional[str] = None,
        mode: Optional[str] = None,
        name: Optional[str] = None,
        rules: Optional[Sequence[ZoneBasedFirewallPolicyDefinitionRuleArgs]] = None,
        version: Optional[int] = None) -> ZoneBasedFirewallPolicyDefinition
    func GetZoneBasedFirewallPolicyDefinition(ctx *Context, name string, id IDInput, state *ZoneBasedFirewallPolicyDefinitionState, opts ...ResourceOption) (*ZoneBasedFirewallPolicyDefinition, error)
    public static ZoneBasedFirewallPolicyDefinition Get(string name, Input<string> id, ZoneBasedFirewallPolicyDefinitionState? state, CustomResourceOptions? opts = null)
    public static ZoneBasedFirewallPolicyDefinition get(String name, Output<String> id, ZoneBasedFirewallPolicyDefinitionState state, CustomResourceOptions options)
    resources:  _:    type: sdwan:ZoneBasedFirewallPolicyDefinition    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    ApplyZonePairs List<ZoneBasedFirewallPolicyDefinitionApplyZonePair>
    , Attribute conditional on mode being equal to security
    DefaultAction string
    Default Action - Choices: pass, drop
    Description string
    The description of the policy definition
    Mode string
    The policy mode - Choices: security, unified
    Name string
    The name of the policy definition
    Rules List<ZoneBasedFirewallPolicyDefinitionRule>
    Version int
    The version of the object
    ApplyZonePairs []ZoneBasedFirewallPolicyDefinitionApplyZonePairArgs
    , Attribute conditional on mode being equal to security
    DefaultAction string
    Default Action - Choices: pass, drop
    Description string
    The description of the policy definition
    Mode string
    The policy mode - Choices: security, unified
    Name string
    The name of the policy definition
    Rules []ZoneBasedFirewallPolicyDefinitionRuleArgs
    Version int
    The version of the object
    applyZonePairs List<ZoneBasedFirewallPolicyDefinitionApplyZonePair>
    , Attribute conditional on mode being equal to security
    defaultAction String
    Default Action - Choices: pass, drop
    description String
    The description of the policy definition
    mode String
    The policy mode - Choices: security, unified
    name String
    The name of the policy definition
    rules List<ZoneBasedFirewallPolicyDefinitionRule>
    version Integer
    The version of the object
    applyZonePairs ZoneBasedFirewallPolicyDefinitionApplyZonePair[]
    , Attribute conditional on mode being equal to security
    defaultAction string
    Default Action - Choices: pass, drop
    description string
    The description of the policy definition
    mode string
    The policy mode - Choices: security, unified
    name string
    The name of the policy definition
    rules ZoneBasedFirewallPolicyDefinitionRule[]
    version number
    The version of the object
    apply_zone_pairs Sequence[ZoneBasedFirewallPolicyDefinitionApplyZonePairArgs]
    , Attribute conditional on mode being equal to security
    default_action str
    Default Action - Choices: pass, drop
    description str
    The description of the policy definition
    mode str
    The policy mode - Choices: security, unified
    name str
    The name of the policy definition
    rules Sequence[ZoneBasedFirewallPolicyDefinitionRuleArgs]
    version int
    The version of the object
    applyZonePairs List<Property Map>
    , Attribute conditional on mode being equal to security
    defaultAction String
    Default Action - Choices: pass, drop
    description String
    The description of the policy definition
    mode String
    The policy mode - Choices: security, unified
    name String
    The name of the policy definition
    rules List<Property Map>
    version Number
    The version of the object

    Supporting Types

    ZoneBasedFirewallPolicyDefinitionApplyZonePair, ZoneBasedFirewallPolicyDefinitionApplyZonePairArgs

    DestinationZone string
    Destination Zone
    SourceZone string
    Source Zone
    DestinationZone string
    Destination Zone
    SourceZone string
    Source Zone
    destinationZone String
    Destination Zone
    sourceZone String
    Source Zone
    destinationZone string
    Destination Zone
    sourceZone string
    Source Zone
    destination_zone str
    Destination Zone
    source_zone str
    Source Zone
    destinationZone String
    Destination Zone
    sourceZone String
    Source Zone

    ZoneBasedFirewallPolicyDefinitionRule, ZoneBasedFirewallPolicyDefinitionRuleArgs

    BaseAction string
    Base action

    • Choices: pass, drop, inspect
    RuleName string
    Rule name
    RuleOrder int
    Rule
    ActionEntries List<ZoneBasedFirewallPolicyDefinitionRuleActionEntry>
    List of actions entries
    MatchEntries List<ZoneBasedFirewallPolicyDefinitionRuleMatchEntry>
    List of match entries
    BaseAction string
    Base action

    • Choices: pass, drop, inspect
    RuleName string
    Rule name
    RuleOrder int
    Rule
    ActionEntries []ZoneBasedFirewallPolicyDefinitionRuleActionEntry
    List of actions entries
    MatchEntries []ZoneBasedFirewallPolicyDefinitionRuleMatchEntry
    List of match entries
    baseAction String
    Base action

    • Choices: pass, drop, inspect
    ruleName String
    Rule name
    ruleOrder Integer
    Rule
    actionEntries List<ZoneBasedFirewallPolicyDefinitionRuleActionEntry>
    List of actions entries
    matchEntries List<ZoneBasedFirewallPolicyDefinitionRuleMatchEntry>
    List of match entries
    baseAction string
    Base action

    • Choices: pass, drop, inspect
    ruleName string
    Rule name
    ruleOrder number
    Rule
    actionEntries ZoneBasedFirewallPolicyDefinitionRuleActionEntry[]
    List of actions entries
    matchEntries ZoneBasedFirewallPolicyDefinitionRuleMatchEntry[]
    List of match entries
    baseAction String
    Base action

    • Choices: pass, drop, inspect
    ruleName String
    Rule name
    ruleOrder Number
    Rule
    actionEntries List<Property Map>
    List of actions entries
    matchEntries List<Property Map>
    List of match entries

    ZoneBasedFirewallPolicyDefinitionRuleActionEntry, ZoneBasedFirewallPolicyDefinitionRuleActionEntryArgs

    Type string
    Type of action entry

    • Choices: log, connectionEvents, advancedInspectionProfile
    Type string
    Type of action entry

    • Choices: log, connectionEvents, advancedInspectionProfile
    type String
    Type of action entry

    • Choices: log, connectionEvents, advancedInspectionProfile
    type string
    Type of action entry

    • Choices: log, connectionEvents, advancedInspectionProfile
    type str
    Type of action entry

    • Choices: log, connectionEvents, advancedInspectionProfile
    type String
    Type of action entry

    • Choices: log, connectionEvents, advancedInspectionProfile

    ZoneBasedFirewallPolicyDefinitionRuleMatchEntry, ZoneBasedFirewallPolicyDefinitionRuleMatchEntryArgs

    Type string
    Type of match entry

    • Choices: sourceFqdnList, sourceDataPrefixList, sourceGeoLocationList, sourcePortList, destinationFqdnList, destinationDataPrefixList, destinationGeoLocationList, destinationPortList, appList, protocolNameList, sourceIp, sourcePort, sourceFqdn, destinationIp, destinationFqdn, destinationPort, sourceGeoLocation, destinationGeoLocation, protocolName, protocol, app, ruleSetList
    PolicyId string
    policy id for selected match entry
    ProtocolType string
    Should be included with additionally entries for destinationPort and protocol whenever the type protocolName is used.
    Value string
    value for selected match entry
    ValueVariable string
    variable value for selected match entry if it has variable option (sourceIp & destinationIp)
    Type string
    Type of match entry

    • Choices: sourceFqdnList, sourceDataPrefixList, sourceGeoLocationList, sourcePortList, destinationFqdnList, destinationDataPrefixList, destinationGeoLocationList, destinationPortList, appList, protocolNameList, sourceIp, sourcePort, sourceFqdn, destinationIp, destinationFqdn, destinationPort, sourceGeoLocation, destinationGeoLocation, protocolName, protocol, app, ruleSetList
    PolicyId string
    policy id for selected match entry
    ProtocolType string
    Should be included with additionally entries for destinationPort and protocol whenever the type protocolName is used.
    Value string
    value for selected match entry
    ValueVariable string
    variable value for selected match entry if it has variable option (sourceIp & destinationIp)
    type String
    Type of match entry

    • Choices: sourceFqdnList, sourceDataPrefixList, sourceGeoLocationList, sourcePortList, destinationFqdnList, destinationDataPrefixList, destinationGeoLocationList, destinationPortList, appList, protocolNameList, sourceIp, sourcePort, sourceFqdn, destinationIp, destinationFqdn, destinationPort, sourceGeoLocation, destinationGeoLocation, protocolName, protocol, app, ruleSetList
    policyId String
    policy id for selected match entry
    protocolType String
    Should be included with additionally entries for destinationPort and protocol whenever the type protocolName is used.
    value String
    value for selected match entry
    valueVariable String
    variable value for selected match entry if it has variable option (sourceIp & destinationIp)
    type string
    Type of match entry

    • Choices: sourceFqdnList, sourceDataPrefixList, sourceGeoLocationList, sourcePortList, destinationFqdnList, destinationDataPrefixList, destinationGeoLocationList, destinationPortList, appList, protocolNameList, sourceIp, sourcePort, sourceFqdn, destinationIp, destinationFqdn, destinationPort, sourceGeoLocation, destinationGeoLocation, protocolName, protocol, app, ruleSetList
    policyId string
    policy id for selected match entry
    protocolType string
    Should be included with additionally entries for destinationPort and protocol whenever the type protocolName is used.
    value string
    value for selected match entry
    valueVariable string
    variable value for selected match entry if it has variable option (sourceIp & destinationIp)
    type str
    Type of match entry

    • Choices: sourceFqdnList, sourceDataPrefixList, sourceGeoLocationList, sourcePortList, destinationFqdnList, destinationDataPrefixList, destinationGeoLocationList, destinationPortList, appList, protocolNameList, sourceIp, sourcePort, sourceFqdn, destinationIp, destinationFqdn, destinationPort, sourceGeoLocation, destinationGeoLocation, protocolName, protocol, app, ruleSetList
    policy_id str
    policy id for selected match entry
    protocol_type str
    Should be included with additionally entries for destinationPort and protocol whenever the type protocolName is used.
    value str
    value for selected match entry
    value_variable str
    variable value for selected match entry if it has variable option (sourceIp & destinationIp)
    type String
    Type of match entry

    • Choices: sourceFqdnList, sourceDataPrefixList, sourceGeoLocationList, sourcePortList, destinationFqdnList, destinationDataPrefixList, destinationGeoLocationList, destinationPortList, appList, protocolNameList, sourceIp, sourcePort, sourceFqdn, destinationIp, destinationFqdn, destinationPort, sourceGeoLocation, destinationGeoLocation, protocolName, protocol, app, ruleSetList
    policyId String
    policy id for selected match entry
    protocolType String
    Should be included with additionally entries for destinationPort and protocol whenever the type protocolName is used.
    value String
    value for selected match entry
    valueVariable String
    variable value for selected match entry if it has variable option (sourceIp & destinationIp)

    Import

    $ pulumi import sdwan:index/zoneBasedFirewallPolicyDefinition:ZoneBasedFirewallPolicyDefinition example "f6b2c44c-693c-4763-b010-895aa3d236bd"

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    sdwan pulumi/pulumi-sdwan
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the sdwan Terraform Provider.
    sdwan logo
    Cisco Catalyst SD-WAN v0.3.0 published on Friday, Mar 28, 2025 by Pulumi
    pulumi/pulumi-sdwan