ApplicationFilter
Description
Application filters are used to select applications by name or property for action in an access control rule. Some filters are system-defined, others can be created by the user. Application filters select applications using the following components:
Applications: System-defined objects that represent a type of well-known traffic that can be recognized by the system. When an application is detected, the action associated with the rule is triggered, regardless of what other applications and conditions are included in the filter.
Conditions: A collection of filter items may be specified to match groups of one or more applications based on name, risk, business relevance, tag, and category. (Note: The field level constraints listed here might not cover all the constraints on the field. Additional constraints might exist.)
Supported Operations
- addApplicationFilter
- getApplicationFilterList
- editApplicationFilter
- getApplicationFilter
- deleteApplicationFilter
- upsertApplicationFilter
Model Properties
Property | Required | Type | Description | |||
---|---|---|---|---|---|---|
version | False | string | A unique string version assigned by the system when the object is created or modified. No assumption can be made on the format or content of this identifier. The identifier must be provided whenever attempting to modify/delete an existing object. As the version will change every time the object is modified, the value provided in this identifier must match exactly what is present in the system or the request will be rejected. | |||
name | True | string | Unique name of the application filter. | |||
applications | False | [object] | A list of applications. Allowed types are: [Application] |
|||
isSystemDefined | False | boolean | A Boolean value, TRUE or FALSE (the default). The TRUE value indicates that the filter is system defined and cannot be modified by the user. | |||
id | False | string | A unique string identifier assigned by the system when the object is created. No assumption can be made on the format or content of this identifier. The identifier must be provided whenever attempting to modify/delete (or reference) an existing object. Field level constraints: must match pattern ^((?!;).)*$. (Note: Additional constraints might exist) |
|||
conditions | False | [object] | A list of application filter conditions. | |||
type | True | string | A UTF8 string, all letters lower-case, that represents the class-type. This corresponds to the class name. |