PolicyRule¶
Represents a single security rule in a Policy.
It is recommended to use a descriptive name to best identify a PolicyRule, otherwise the string representation of the PolicyRule if the UUID for the instance.
Attributes¶
- Name (optional, string)
- Status (FK to Status)
- Tags (M2M to Tag)
- Source User (M2M to UserObject)
- Source User Group (M2M to UserObjectGroup)
- Source Address (M2M to AddressObject)
- Source Address Group (M2M to AddressObjectGroup)
- Source Zone (FK to Zone)
- Destination Address (M2M to AddressObject)
- Destination Address Group (M2M to AddressObjectGroup)
- Source Zone (FK to Zone)
- Service (M2M to ServiceObject)
- Service Group (M2M to ServiceObjectGroup)
- Action (string, choice of deny drop allow)
- Log (boolean)
- Request ID (optional, string)
- Meant to represent an upstream request (e.g. an service request from an ITSM solution).
- Index (optional, int)
- Sets the index of the PolicyRule in the Policy.
- Example
20 permit icmp host 1.1.1.1 anywould have an index of20. - Set as optional for now, will be set to required at a later date with default as the highest value + 10.
Examples¶
Example line in an access list that would translate to a Policy Rule: