IntrusionPolicy
Description
An IntrusionPolicy holds a group of IntrusionRules, and it can be associated with an AccessPolicy. This model is read-only and any rule updates need to be processed through IntrusionPolicyRuleUpdate. (Note: The field level constraints listed here might not cover all the constraints on the field. Additional constraints might exist.)
Supported Operations
- getIntrusionPolicyList
- addIntrusionPolicy
- getIntrusionPolicy
- editIntrusionPolicy
- deleteIntrusionPolicy
- upsertIntrusionPolicy
Model Properties
| Property | Required | Type | Description | |||
|---|---|---|---|---|---|---|
| version | False | string | A unique string version assigned by the system when the object is created or modified. No assumption can be made on the format or content of this identifier. The identifier must be provided whenever attempting to modify/delete an existing object. As the version will change every time the object is modified, the value provided in this identifier must match exactly what is present in the system or the request will be rejected. | |||
| name | True | string | A mandatory Unicode alphanumeric string containing the name of the policy, from 1 to 65 characters. The string cannot include HTML tags. | |||
| description | False | string | A mandatory Unicode alphanumeric string containing the name of the group policy, from 1 to 65 characters. The string cannot include HTML tags. Field level constraints: must match pattern ^((?!;).)*$. (Note: Additional constraints might exist) |
|||
| basePolicy | False | object | In snort 3, a mandatory field for user created policy referring to a system defined policy; for system defined policies it will be null. In snort 2, this field is not used and is set to null. Allowed types are: [IntrusionPolicy] |
|||
| rules | False | object | A reference link is provided here to fetch the IntrusionRule(s) separately. | |||
| ruleGroups | False | object | A reference link is provided here to fetch the IntrusionRuleGroup(s) separately. | |||
| inspectionMode | False | string | A enum value (DETECTION or PREVENTION(default)) that controls IPS inspection mode. In DETECTION mode, rules set to DROP are configured to ALERT result in alerts only. In PREVENTION mode, they apply as configured. | |||
| isSystemDefined | False | boolean | A boolean value that indicates if the current policy is system defined or not | |||
| id | False | string | A unique string identifier assigned by the system when the object is created. No assumption can be made on the format or content of this identifier. The identifier must be provided whenever attempting to modify/delete (or reference) an existing object. Field level constraints: must match pattern ^((?!;).)*$. (Note: Additional constraints might exist) |
|||
| type | True | string | A UTF8 string, all letters lower-case, that represents the class-type. This corresponds to the class name. | |||