SecurityIntelligenceDNSPolicy

Description

An object that defines the Security Intelligence DNS policy, including the rules that make up the policy. The policy contains separate Block or Do Not Block lists that define the action for the rules. (Note: The field level constraints listed here might not cover all the constraints on the field. Additional constraints might exist.)

Model Properties

Property	Required	Type	Description
version	False	string	A unique string version assigned by the system when the object is created or modified. No assumption can be made on the format or content of this identifier. The identifier must be provided whenever attempting to modify/delete an existing object. As the version will change every time the object is modified, the value provided in this identifier must match exactly what is present in the system or the request will be rejected.
name	False	string	A string that represents the name of the object
whitelistRules	False	[object]	The set of DNS rules that exempt domain names that would otherwise match rules in the Block list. This list defines names that should not be blocked by this policy, but connections to these names might subsequently be blocked by access control rules, intrusion rules, or other firewall policies.
blacklistRules	False	[object]	The set of DNS rules that define the names in the Block list, which includes rules that have the actions DROP, DOMAIN_NOT_FOUND, or MONITOR.
id	False	string	A unique string identifier assigned by the system when the object is created. No assumption can be made on the format or content of this identifier. The identifier must be provided whenever attempting to modify/delete (or reference) an existing object. Field level constraints: must match pattern ^((?!;).)*$. (Note: Additional constraints might exist)
type	True	string	A UTF8 string, all letters lower-case, that represents the class-type. This corresponds to the class name.