Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Cisco Catalyst SD-WAN Provider
  3. API Docs
  4. SecurityPolicy
Cisco Catalyst SD-WAN v0.3.0 published on Friday, Mar 28, 2025 by Pulumi
pulumi/pulumi-sdwan

sdwan.SecurityPolicy

Explore with Pulumi AI

Cisco Catalyst SD-WAN v0.3.0 published on Friday, Mar 28, 2025 by Pulumi
pulumi/pulumi-sdwan

This resource can manage a Security Policy .

Example Usage

Coming soon!

Coming soon!

Coming soon!

Coming soon!

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.sdwan.SecurityPolicy;
import com.pulumi.sdwan.SecurityPolicyArgs;
import com.pulumi.sdwan.inputs.SecurityPolicyDefinitionArgs;
import com.pulumi.sdwan.inputs.SecurityPolicyLoggingArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new SecurityPolicy("example", SecurityPolicyArgs.builder()
            .name("Example")
            .description("Example")
            .mode("security")
            .useCase("custom")
            .definitions(SecurityPolicyDefinitionArgs.builder()
                .id("7d299c34-981c-4fb3-9167-6be44ab1691f")
                .type("urlFiltering")
                .build())
            .failureMode("close")
            .loggings(SecurityPolicyLoggingArgs.builder()
                .external_syslog_server_ip("10.0.0.1")
                .external_syslog_server_vpn("123")
                .build())
            .build());

    }
}
Copy
resources:
  example:
    type: sdwan:SecurityPolicy
    properties:
      name: Example
      description: Example
      mode: security
      useCase: custom
      definitions:
        - id: 7d299c34-981c-4fb3-9167-6be44ab1691f
          type: urlFiltering
      failureMode: close
      loggings:
        - external_syslog_server_ip: 10.0.0.1
          external_syslog_server_vpn: '123'
Copy

Create SecurityPolicy Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new SecurityPolicy(name: string, args: SecurityPolicyArgs, opts?: CustomResourceOptions);
@overload
def SecurityPolicy(resource_name: str,
                   args: SecurityPolicyArgs,
                   opts: Optional[ResourceOptions] = None)

@overload
def SecurityPolicy(resource_name: str,
                   opts: Optional[ResourceOptions] = None,
                   description: Optional[str] = None,
                   definitions: Optional[Sequence[SecurityPolicyDefinitionArgs]] = None,
                   loggings: Optional[Sequence[SecurityPolicyLoggingArgs]] = None,
                   direct_internet_applications: Optional[str] = None,
                   failure_mode: Optional[str] = None,
                   high_speed_logging_server_ip: Optional[str] = None,
                   high_speed_logging_server_port: Optional[str] = None,
                   high_speed_logging_server_source_interface: Optional[str] = None,
                   high_speed_logging_vpn: Optional[str] = None,
                   imcp_unreachable_allow: Optional[bool] = None,
                   audit_trail: Optional[str] = None,
                   match_statistics_per_filter: Optional[str] = None,
                   max_incomplete_icmp_limit: Optional[int] = None,
                   max_incomplete_tcp_limit: Optional[int] = None,
                   max_incomplete_udp_limit: Optional[int] = None,
                   mode: Optional[str] = None,
                   name: Optional[str] = None,
                   session_reclassify_allow: Optional[bool] = None,
                   tcp_syn_flood_limit: Optional[str] = None,
                   unified_logging: Optional[bool] = None,
                   use_case: Optional[str] = None)
func NewSecurityPolicy(ctx *Context, name string, args SecurityPolicyArgs, opts ...ResourceOption) (*SecurityPolicy, error)
public SecurityPolicy(string name, SecurityPolicyArgs args, CustomResourceOptions? opts = null)
public SecurityPolicy(String name, SecurityPolicyArgs args)
public SecurityPolicy(String name, SecurityPolicyArgs args, CustomResourceOptions options)

type: sdwan:SecurityPolicy
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args This property is required. SecurityPolicyArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args This property is required. SecurityPolicyArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args This property is required. SecurityPolicyArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args This property is required. SecurityPolicyArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. SecurityPolicyArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var securityPolicyResource = new Sdwan.SecurityPolicy("securityPolicyResource", new()
{
    Description = "string",
    Definitions = new[]
    {
        new Sdwan.Inputs.SecurityPolicyDefinitionArgs
        {
            Id = "string",
            Type = "string",
            DestinationZone = "string",
            SourceZone = "string",
            Version = 0,
        },
    },
    Loggings = new[]
    {
        new Sdwan.Inputs.SecurityPolicyLoggingArgs
        {
            ExternalSyslogServerIp = "string",
            ExternalSyslogServerSourceInterface = "string",
            ExternalSyslogServerVpn = "string",
        },
    },
    DirectInternetApplications = "string",
    FailureMode = "string",
    HighSpeedLoggingServerIp = "string",
    HighSpeedLoggingServerPort = "string",
    HighSpeedLoggingServerSourceInterface = "string",
    HighSpeedLoggingVpn = "string",
    ImcpUnreachableAllow = false,
    AuditTrail = "string",
    MatchStatisticsPerFilter = "string",
    MaxIncompleteIcmpLimit = 0,
    MaxIncompleteTcpLimit = 0,
    MaxIncompleteUdpLimit = 0,
    Mode = "string",
    Name = "string",
    SessionReclassifyAllow = false,
    TcpSynFloodLimit = "string",
    UnifiedLogging = false,
    UseCase = "string",
});
Copy
example, err := sdwan.NewSecurityPolicy(ctx, "securityPolicyResource", &sdwan.SecurityPolicyArgs{
	Description: pulumi.String("string"),
	Definitions: sdwan.SecurityPolicyDefinitionArray{
		&sdwan.SecurityPolicyDefinitionArgs{
			Id:              pulumi.String("string"),
			Type:            pulumi.String("string"),
			DestinationZone: pulumi.String("string"),
			SourceZone:      pulumi.String("string"),
			Version:         pulumi.Int(0),
		},
	},
	Loggings: sdwan.SecurityPolicyLoggingArray{
		&sdwan.SecurityPolicyLoggingArgs{
			ExternalSyslogServerIp:              pulumi.String("string"),
			ExternalSyslogServerSourceInterface: pulumi.String("string"),
			ExternalSyslogServerVpn:             pulumi.String("string"),
		},
	},
	DirectInternetApplications:            pulumi.String("string"),
	FailureMode:                           pulumi.String("string"),
	HighSpeedLoggingServerIp:              pulumi.String("string"),
	HighSpeedLoggingServerPort:            pulumi.String("string"),
	HighSpeedLoggingServerSourceInterface: pulumi.String("string"),
	HighSpeedLoggingVpn:                   pulumi.String("string"),
	ImcpUnreachableAllow:                  pulumi.Bool(false),
	AuditTrail:                            pulumi.String("string"),
	MatchStatisticsPerFilter:              pulumi.String("string"),
	MaxIncompleteIcmpLimit:                pulumi.Int(0),
	MaxIncompleteTcpLimit:                 pulumi.Int(0),
	MaxIncompleteUdpLimit:                 pulumi.Int(0),
	Mode:                                  pulumi.String("string"),
	Name:                                  pulumi.String("string"),
	SessionReclassifyAllow:                pulumi.Bool(false),
	TcpSynFloodLimit:                      pulumi.String("string"),
	UnifiedLogging:                        pulumi.Bool(false),
	UseCase:                               pulumi.String("string"),
})
Copy
var securityPolicyResource = new SecurityPolicy("securityPolicyResource", SecurityPolicyArgs.builder()
    .description("string")
    .definitions(SecurityPolicyDefinitionArgs.builder()
        .id("string")
        .type("string")
        .destinationZone("string")
        .sourceZone("string")
        .version(0)
        .build())
    .loggings(SecurityPolicyLoggingArgs.builder()
        .externalSyslogServerIp("string")
        .externalSyslogServerSourceInterface("string")
        .externalSyslogServerVpn("string")
        .build())
    .directInternetApplications("string")
    .failureMode("string")
    .highSpeedLoggingServerIp("string")
    .highSpeedLoggingServerPort("string")
    .highSpeedLoggingServerSourceInterface("string")
    .highSpeedLoggingVpn("string")
    .imcpUnreachableAllow(false)
    .auditTrail("string")
    .matchStatisticsPerFilter("string")
    .maxIncompleteIcmpLimit(0)
    .maxIncompleteTcpLimit(0)
    .maxIncompleteUdpLimit(0)
    .mode("string")
    .name("string")
    .sessionReclassifyAllow(false)
    .tcpSynFloodLimit("string")
    .unifiedLogging(false)
    .useCase("string")
    .build());
Copy
security_policy_resource = sdwan.SecurityPolicy("securityPolicyResource",
    description="string",
    definitions=[{
        "id": "string",
        "type": "string",
        "destination_zone": "string",
        "source_zone": "string",
        "version": 0,
    }],
    loggings=[{
        "external_syslog_server_ip": "string",
        "external_syslog_server_source_interface": "string",
        "external_syslog_server_vpn": "string",
    }],
    direct_internet_applications="string",
    failure_mode="string",
    high_speed_logging_server_ip="string",
    high_speed_logging_server_port="string",
    high_speed_logging_server_source_interface="string",
    high_speed_logging_vpn="string",
    imcp_unreachable_allow=False,
    audit_trail="string",
    match_statistics_per_filter="string",
    max_incomplete_icmp_limit=0,
    max_incomplete_tcp_limit=0,
    max_incomplete_udp_limit=0,
    mode="string",
    name="string",
    session_reclassify_allow=False,
    tcp_syn_flood_limit="string",
    unified_logging=False,
    use_case="string")
Copy
const securityPolicyResource = new sdwan.SecurityPolicy("securityPolicyResource", {
    description: "string",
    definitions: [{
        id: "string",
        type: "string",
        destinationZone: "string",
        sourceZone: "string",
        version: 0,
    }],
    loggings: [{
        externalSyslogServerIp: "string",
        externalSyslogServerSourceInterface: "string",
        externalSyslogServerVpn: "string",
    }],
    directInternetApplications: "string",
    failureMode: "string",
    highSpeedLoggingServerIp: "string",
    highSpeedLoggingServerPort: "string",
    highSpeedLoggingServerSourceInterface: "string",
    highSpeedLoggingVpn: "string",
    imcpUnreachableAllow: false,
    auditTrail: "string",
    matchStatisticsPerFilter: "string",
    maxIncompleteIcmpLimit: 0,
    maxIncompleteTcpLimit: 0,
    maxIncompleteUdpLimit: 0,
    mode: "string",
    name: "string",
    sessionReclassifyAllow: false,
    tcpSynFloodLimit: "string",
    unifiedLogging: false,
    useCase: "string",
});
Copy
type: sdwan:SecurityPolicy
properties:
    auditTrail: string
    definitions:
        - destinationZone: string
          id: string
          sourceZone: string
          type: string
          version: 0
    description: string
    directInternetApplications: string
    failureMode: string
    highSpeedLoggingServerIp: string
    highSpeedLoggingServerPort: string
    highSpeedLoggingServerSourceInterface: string
    highSpeedLoggingVpn: string
    imcpUnreachableAllow: false
    loggings:
        - externalSyslogServerIp: string
          externalSyslogServerSourceInterface: string
          externalSyslogServerVpn: string
    matchStatisticsPerFilter: string
    maxIncompleteIcmpLimit: 0
    maxIncompleteTcpLimit: 0
    maxIncompleteUdpLimit: 0
    mode: string
    name: string
    sessionReclassifyAllow: false
    tcpSynFloodLimit: string
    unifiedLogging: false
    useCase: string
Copy

SecurityPolicy Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The SecurityPolicy resource accepts the following input properties:

Definitions This property is required. List<SecurityPolicyDefinition>
List of policy definitions
Description This property is required. string
The description of the security policy
AuditTrail string
Audit trail - Choices: on, off
DirectInternetApplications string
Bypass firewall policy and allow all Internet traffic to/from VPN 0 - Choices: allow, deny
FailureMode string
Failure mode - Choices: open, close
HighSpeedLoggingServerIp string
High Speed Logging Server IP
HighSpeedLoggingServerPort string
High Speed Logging Port
HighSpeedLoggingServerSourceInterface string
High Speed Logging Source Interface
HighSpeedLoggingVpn string
High Speed Logging VPN
ImcpUnreachableAllow bool
ICMP Unreachable Allow
Loggings List<SecurityPolicyLogging>
MatchStatisticsPerFilter string
Match Statistics per-filter - Choices: on, off
MaxIncompleteIcmpLimit int
Max Incomplete ICMP Limit
MaxIncompleteTcpLimit int
Max Incomplete TCP Limit
MaxIncompleteUdpLimit int
Max Incomplete UDP Limit
Mode string
The policy mode - Choices: security, unified - Default value: security
Name string
The name of the security policy
SessionReclassifyAllow bool
Session Reclassify Allow
TcpSynFloodLimit string
TCP SYN Flood Limit, value from 1 to 4294967295
UnifiedLogging bool
Unified Logging
UseCase string
The use case of the security policy - Choices: custom, compliance, guestAccess, directCloudAccess, directInternetAccess, directCloudAccess - Default value: custom
Definitions This property is required. []SecurityPolicyDefinitionArgs
List of policy definitions
Description This property is required. string
The description of the security policy
AuditTrail string
Audit trail - Choices: on, off
DirectInternetApplications string
Bypass firewall policy and allow all Internet traffic to/from VPN 0 - Choices: allow, deny
FailureMode string
Failure mode - Choices: open, close
HighSpeedLoggingServerIp string
High Speed Logging Server IP
HighSpeedLoggingServerPort string
High Speed Logging Port
HighSpeedLoggingServerSourceInterface string
High Speed Logging Source Interface
HighSpeedLoggingVpn string
High Speed Logging VPN
ImcpUnreachableAllow bool
ICMP Unreachable Allow
Loggings []SecurityPolicyLoggingArgs
MatchStatisticsPerFilter string
Match Statistics per-filter - Choices: on, off
MaxIncompleteIcmpLimit int
Max Incomplete ICMP Limit
MaxIncompleteTcpLimit int
Max Incomplete TCP Limit
MaxIncompleteUdpLimit int
Max Incomplete UDP Limit
Mode string
The policy mode - Choices: security, unified - Default value: security
Name string
The name of the security policy
SessionReclassifyAllow bool
Session Reclassify Allow
TcpSynFloodLimit string
TCP SYN Flood Limit, value from 1 to 4294967295
UnifiedLogging bool
Unified Logging
UseCase string
The use case of the security policy - Choices: custom, compliance, guestAccess, directCloudAccess, directInternetAccess, directCloudAccess - Default value: custom
definitions This property is required. List<SecurityPolicyDefinition>
List of policy definitions
description This property is required. String
The description of the security policy
auditTrail String
Audit trail - Choices: on, off
directInternetApplications String
Bypass firewall policy and allow all Internet traffic to/from VPN 0 - Choices: allow, deny
failureMode String
Failure mode - Choices: open, close
highSpeedLoggingServerIp String
High Speed Logging Server IP
highSpeedLoggingServerPort String
High Speed Logging Port
highSpeedLoggingServerSourceInterface String
High Speed Logging Source Interface
highSpeedLoggingVpn String
High Speed Logging VPN
imcpUnreachableAllow Boolean
ICMP Unreachable Allow
loggings List<SecurityPolicyLogging>
matchStatisticsPerFilter String
Match Statistics per-filter - Choices: on, off
maxIncompleteIcmpLimit Integer
Max Incomplete ICMP Limit
maxIncompleteTcpLimit Integer
Max Incomplete TCP Limit
maxIncompleteUdpLimit Integer
Max Incomplete UDP Limit
mode String
The policy mode - Choices: security, unified - Default value: security
name String
The name of the security policy
sessionReclassifyAllow Boolean
Session Reclassify Allow
tcpSynFloodLimit String
TCP SYN Flood Limit, value from 1 to 4294967295
unifiedLogging Boolean
Unified Logging
useCase String
The use case of the security policy - Choices: custom, compliance, guestAccess, directCloudAccess, directInternetAccess, directCloudAccess - Default value: custom
definitions This property is required. SecurityPolicyDefinition[]
List of policy definitions
description This property is required. string
The description of the security policy
auditTrail string
Audit trail - Choices: on, off
directInternetApplications string
Bypass firewall policy and allow all Internet traffic to/from VPN 0 - Choices: allow, deny
failureMode string
Failure mode - Choices: open, close
highSpeedLoggingServerIp string
High Speed Logging Server IP
highSpeedLoggingServerPort string
High Speed Logging Port
highSpeedLoggingServerSourceInterface string
High Speed Logging Source Interface
highSpeedLoggingVpn string
High Speed Logging VPN
imcpUnreachableAllow boolean
ICMP Unreachable Allow
loggings SecurityPolicyLogging[]
matchStatisticsPerFilter string
Match Statistics per-filter - Choices: on, off
maxIncompleteIcmpLimit number
Max Incomplete ICMP Limit
maxIncompleteTcpLimit number
Max Incomplete TCP Limit
maxIncompleteUdpLimit number
Max Incomplete UDP Limit
mode string
The policy mode - Choices: security, unified - Default value: security
name string
The name of the security policy
sessionReclassifyAllow boolean
Session Reclassify Allow
tcpSynFloodLimit string
TCP SYN Flood Limit, value from 1 to 4294967295
unifiedLogging boolean
Unified Logging
useCase string
The use case of the security policy - Choices: custom, compliance, guestAccess, directCloudAccess, directInternetAccess, directCloudAccess - Default value: custom
definitions This property is required. Sequence[SecurityPolicyDefinitionArgs]
List of policy definitions
description This property is required. str
The description of the security policy
audit_trail str
Audit trail - Choices: on, off
direct_internet_applications str
Bypass firewall policy and allow all Internet traffic to/from VPN 0 - Choices: allow, deny
failure_mode str
Failure mode - Choices: open, close
high_speed_logging_server_ip str
High Speed Logging Server IP
high_speed_logging_server_port str
High Speed Logging Port
high_speed_logging_server_source_interface str
High Speed Logging Source Interface
high_speed_logging_vpn str
High Speed Logging VPN
imcp_unreachable_allow bool
ICMP Unreachable Allow
loggings Sequence[SecurityPolicyLoggingArgs]
match_statistics_per_filter str
Match Statistics per-filter - Choices: on, off
max_incomplete_icmp_limit int
Max Incomplete ICMP Limit
max_incomplete_tcp_limit int
Max Incomplete TCP Limit
max_incomplete_udp_limit int
Max Incomplete UDP Limit
mode str
The policy mode - Choices: security, unified - Default value: security
name str
The name of the security policy
session_reclassify_allow bool
Session Reclassify Allow
tcp_syn_flood_limit str
TCP SYN Flood Limit, value from 1 to 4294967295
unified_logging bool
Unified Logging
use_case str
The use case of the security policy - Choices: custom, compliance, guestAccess, directCloudAccess, directInternetAccess, directCloudAccess - Default value: custom
definitions This property is required. List<Property Map>
List of policy definitions
description This property is required. String
The description of the security policy
auditTrail String
Audit trail - Choices: on, off
directInternetApplications String
Bypass firewall policy and allow all Internet traffic to/from VPN 0 - Choices: allow, deny
failureMode String
Failure mode - Choices: open, close
highSpeedLoggingServerIp String
High Speed Logging Server IP
highSpeedLoggingServerPort String
High Speed Logging Port
highSpeedLoggingServerSourceInterface String
High Speed Logging Source Interface
highSpeedLoggingVpn String
High Speed Logging VPN
imcpUnreachableAllow Boolean
ICMP Unreachable Allow
loggings List<Property Map>
matchStatisticsPerFilter String
Match Statistics per-filter - Choices: on, off
maxIncompleteIcmpLimit Number
Max Incomplete ICMP Limit
maxIncompleteTcpLimit Number
Max Incomplete TCP Limit
maxIncompleteUdpLimit Number
Max Incomplete UDP Limit
mode String
The policy mode - Choices: security, unified - Default value: security
name String
The name of the security policy
sessionReclassifyAllow Boolean
Session Reclassify Allow
tcpSynFloodLimit String
TCP SYN Flood Limit, value from 1 to 4294967295
unifiedLogging Boolean
Unified Logging
useCase String
The use case of the security policy - Choices: custom, compliance, guestAccess, directCloudAccess, directInternetAccess, directCloudAccess - Default value: custom

Outputs

All input properties are implicitly available as output properties. Additionally, the SecurityPolicy resource produces the following output properties:

Id string
The provider-assigned unique ID for this managed resource.
Version int
The version of the object
Id string
The provider-assigned unique ID for this managed resource.
Version int
The version of the object
id String
The provider-assigned unique ID for this managed resource.
version Integer
The version of the object
id string
The provider-assigned unique ID for this managed resource.
version number
The version of the object
id str
The provider-assigned unique ID for this managed resource.
version int
The version of the object
id String
The provider-assigned unique ID for this managed resource.
version Number
The version of the object

Look up Existing SecurityPolicy Resource

Get an existing SecurityPolicy resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: SecurityPolicyState, opts?: CustomResourceOptions): SecurityPolicy
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        audit_trail: Optional[str] = None,
        definitions: Optional[Sequence[SecurityPolicyDefinitionArgs]] = None,
        description: Optional[str] = None,
        direct_internet_applications: Optional[str] = None,
        failure_mode: Optional[str] = None,
        high_speed_logging_server_ip: Optional[str] = None,
        high_speed_logging_server_port: Optional[str] = None,
        high_speed_logging_server_source_interface: Optional[str] = None,
        high_speed_logging_vpn: Optional[str] = None,
        imcp_unreachable_allow: Optional[bool] = None,
        loggings: Optional[Sequence[SecurityPolicyLoggingArgs]] = None,
        match_statistics_per_filter: Optional[str] = None,
        max_incomplete_icmp_limit: Optional[int] = None,
        max_incomplete_tcp_limit: Optional[int] = None,
        max_incomplete_udp_limit: Optional[int] = None,
        mode: Optional[str] = None,
        name: Optional[str] = None,
        session_reclassify_allow: Optional[bool] = None,
        tcp_syn_flood_limit: Optional[str] = None,
        unified_logging: Optional[bool] = None,
        use_case: Optional[str] = None,
        version: Optional[int] = None) -> SecurityPolicy
func GetSecurityPolicy(ctx *Context, name string, id IDInput, state *SecurityPolicyState, opts ...ResourceOption) (*SecurityPolicy, error)
public static SecurityPolicy Get(string name, Input<string> id, SecurityPolicyState? state, CustomResourceOptions? opts = null)
public static SecurityPolicy get(String name, Output<String> id, SecurityPolicyState state, CustomResourceOptions options)
resources:  _:    type: sdwan:SecurityPolicy    get:      id: ${id}
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
AuditTrail string
Audit trail - Choices: on, off
Definitions List<SecurityPolicyDefinition>
List of policy definitions
Description string
The description of the security policy
DirectInternetApplications string
Bypass firewall policy and allow all Internet traffic to/from VPN 0 - Choices: allow, deny
FailureMode string
Failure mode - Choices: open, close
HighSpeedLoggingServerIp string
High Speed Logging Server IP
HighSpeedLoggingServerPort string
High Speed Logging Port
HighSpeedLoggingServerSourceInterface string
High Speed Logging Source Interface
HighSpeedLoggingVpn string
High Speed Logging VPN
ImcpUnreachableAllow bool
ICMP Unreachable Allow
Loggings List<SecurityPolicyLogging>
MatchStatisticsPerFilter string
Match Statistics per-filter - Choices: on, off
MaxIncompleteIcmpLimit int
Max Incomplete ICMP Limit
MaxIncompleteTcpLimit int
Max Incomplete TCP Limit
MaxIncompleteUdpLimit int
Max Incomplete UDP Limit
Mode string
The policy mode - Choices: security, unified - Default value: security
Name string
The name of the security policy
SessionReclassifyAllow bool
Session Reclassify Allow
TcpSynFloodLimit string
TCP SYN Flood Limit, value from 1 to 4294967295
UnifiedLogging bool
Unified Logging
UseCase string
The use case of the security policy - Choices: custom, compliance, guestAccess, directCloudAccess, directInternetAccess, directCloudAccess - Default value: custom
Version int
The version of the object
AuditTrail string
Audit trail - Choices: on, off
Definitions []SecurityPolicyDefinitionArgs
List of policy definitions
Description string
The description of the security policy
DirectInternetApplications string
Bypass firewall policy and allow all Internet traffic to/from VPN 0 - Choices: allow, deny
FailureMode string
Failure mode - Choices: open, close
HighSpeedLoggingServerIp string
High Speed Logging Server IP
HighSpeedLoggingServerPort string
High Speed Logging Port
HighSpeedLoggingServerSourceInterface string
High Speed Logging Source Interface
HighSpeedLoggingVpn string
High Speed Logging VPN
ImcpUnreachableAllow bool
ICMP Unreachable Allow
Loggings []SecurityPolicyLoggingArgs
MatchStatisticsPerFilter string
Match Statistics per-filter - Choices: on, off
MaxIncompleteIcmpLimit int
Max Incomplete ICMP Limit
MaxIncompleteTcpLimit int
Max Incomplete TCP Limit
MaxIncompleteUdpLimit int
Max Incomplete UDP Limit
Mode string
The policy mode - Choices: security, unified - Default value: security
Name string
The name of the security policy
SessionReclassifyAllow bool
Session Reclassify Allow
TcpSynFloodLimit string
TCP SYN Flood Limit, value from 1 to 4294967295
UnifiedLogging bool
Unified Logging
UseCase string
The use case of the security policy - Choices: custom, compliance, guestAccess, directCloudAccess, directInternetAccess, directCloudAccess - Default value: custom
Version int
The version of the object
auditTrail String
Audit trail - Choices: on, off
definitions List<SecurityPolicyDefinition>
List of policy definitions
description String
The description of the security policy
directInternetApplications String
Bypass firewall policy and allow all Internet traffic to/from VPN 0 - Choices: allow, deny
failureMode String
Failure mode - Choices: open, close
highSpeedLoggingServerIp String
High Speed Logging Server IP
highSpeedLoggingServerPort String
High Speed Logging Port
highSpeedLoggingServerSourceInterface String
High Speed Logging Source Interface
highSpeedLoggingVpn String
High Speed Logging VPN
imcpUnreachableAllow Boolean
ICMP Unreachable Allow
loggings List<SecurityPolicyLogging>
matchStatisticsPerFilter String
Match Statistics per-filter - Choices: on, off
maxIncompleteIcmpLimit Integer
Max Incomplete ICMP Limit
maxIncompleteTcpLimit Integer
Max Incomplete TCP Limit
maxIncompleteUdpLimit Integer
Max Incomplete UDP Limit
mode String
The policy mode - Choices: security, unified - Default value: security
name String
The name of the security policy
sessionReclassifyAllow Boolean
Session Reclassify Allow
tcpSynFloodLimit String
TCP SYN Flood Limit, value from 1 to 4294967295
unifiedLogging Boolean
Unified Logging
useCase String
The use case of the security policy - Choices: custom, compliance, guestAccess, directCloudAccess, directInternetAccess, directCloudAccess - Default value: custom
version Integer
The version of the object
auditTrail string
Audit trail - Choices: on, off
definitions SecurityPolicyDefinition[]
List of policy definitions
description string
The description of the security policy
directInternetApplications string
Bypass firewall policy and allow all Internet traffic to/from VPN 0 - Choices: allow, deny
failureMode string
Failure mode - Choices: open, close
highSpeedLoggingServerIp string
High Speed Logging Server IP
highSpeedLoggingServerPort string
High Speed Logging Port
highSpeedLoggingServerSourceInterface string
High Speed Logging Source Interface
highSpeedLoggingVpn string
High Speed Logging VPN
imcpUnreachableAllow boolean
ICMP Unreachable Allow
loggings SecurityPolicyLogging[]
matchStatisticsPerFilter string
Match Statistics per-filter - Choices: on, off
maxIncompleteIcmpLimit number
Max Incomplete ICMP Limit
maxIncompleteTcpLimit number
Max Incomplete TCP Limit
maxIncompleteUdpLimit number
Max Incomplete UDP Limit
mode string
The policy mode - Choices: security, unified - Default value: security
name string
The name of the security policy
sessionReclassifyAllow boolean
Session Reclassify Allow
tcpSynFloodLimit string
TCP SYN Flood Limit, value from 1 to 4294967295
unifiedLogging boolean
Unified Logging
useCase string
The use case of the security policy - Choices: custom, compliance, guestAccess, directCloudAccess, directInternetAccess, directCloudAccess - Default value: custom
version number
The version of the object
audit_trail str
Audit trail - Choices: on, off
definitions Sequence[SecurityPolicyDefinitionArgs]
List of policy definitions
description str
The description of the security policy
direct_internet_applications str
Bypass firewall policy and allow all Internet traffic to/from VPN 0 - Choices: allow, deny
failure_mode str
Failure mode - Choices: open, close
high_speed_logging_server_ip str
High Speed Logging Server IP
high_speed_logging_server_port str
High Speed Logging Port
high_speed_logging_server_source_interface str
High Speed Logging Source Interface
high_speed_logging_vpn str
High Speed Logging VPN
imcp_unreachable_allow bool
ICMP Unreachable Allow
loggings Sequence[SecurityPolicyLoggingArgs]
match_statistics_per_filter str
Match Statistics per-filter - Choices: on, off
max_incomplete_icmp_limit int
Max Incomplete ICMP Limit
max_incomplete_tcp_limit int
Max Incomplete TCP Limit
max_incomplete_udp_limit int
Max Incomplete UDP Limit
mode str
The policy mode - Choices: security, unified - Default value: security
name str
The name of the security policy
session_reclassify_allow bool
Session Reclassify Allow
tcp_syn_flood_limit str
TCP SYN Flood Limit, value from 1 to 4294967295
unified_logging bool
Unified Logging
use_case str
The use case of the security policy - Choices: custom, compliance, guestAccess, directCloudAccess, directInternetAccess, directCloudAccess - Default value: custom
version int
The version of the object
auditTrail String
Audit trail - Choices: on, off
definitions List<Property Map>
List of policy definitions
description String
The description of the security policy
directInternetApplications String
Bypass firewall policy and allow all Internet traffic to/from VPN 0 - Choices: allow, deny
failureMode String
Failure mode - Choices: open, close
highSpeedLoggingServerIp String
High Speed Logging Server IP
highSpeedLoggingServerPort String
High Speed Logging Port
highSpeedLoggingServerSourceInterface String
High Speed Logging Source Interface
highSpeedLoggingVpn String
High Speed Logging VPN
imcpUnreachableAllow Boolean
ICMP Unreachable Allow
loggings List<Property Map>
matchStatisticsPerFilter String
Match Statistics per-filter - Choices: on, off
maxIncompleteIcmpLimit Number
Max Incomplete ICMP Limit
maxIncompleteTcpLimit Number
Max Incomplete TCP Limit
maxIncompleteUdpLimit Number
Max Incomplete UDP Limit
mode String
The policy mode - Choices: security, unified - Default value: security
name String
The name of the security policy
sessionReclassifyAllow Boolean
Session Reclassify Allow
tcpSynFloodLimit String
TCP SYN Flood Limit, value from 1 to 4294967295
unifiedLogging Boolean
Unified Logging
useCase String
The use case of the security policy - Choices: custom, compliance, guestAccess, directCloudAccess, directInternetAccess, directCloudAccess - Default value: custom
version Number
The version of the object

Supporting Types

SecurityPolicyDefinition
, SecurityPolicyDefinitionArgs

Id This property is required. string
Policy definition ID
Type This property is required. string
Policy definition type

  • Choices: urlFiltering, zoneBasedFW, intrusionPrevention, sslDecryption, advancedMalwareProtection, dnsSecurity
DestinationZone string
Destination Zone, Attribute conditional on type being equal to zoneBasedFW
SourceZone string
Source Zone, Attribute conditional on type being equal to zoneBasedFW
Version int
Policy definition version
Id This property is required. string
Policy definition ID
Type This property is required. string
Policy definition type

  • Choices: urlFiltering, zoneBasedFW, intrusionPrevention, sslDecryption, advancedMalwareProtection, dnsSecurity
DestinationZone string
Destination Zone, Attribute conditional on type being equal to zoneBasedFW
SourceZone string
Source Zone, Attribute conditional on type being equal to zoneBasedFW
Version int
Policy definition version
id This property is required. String
Policy definition ID
type This property is required. String
Policy definition type

  • Choices: urlFiltering, zoneBasedFW, intrusionPrevention, sslDecryption, advancedMalwareProtection, dnsSecurity
destinationZone String
Destination Zone, Attribute conditional on type being equal to zoneBasedFW
sourceZone String
Source Zone, Attribute conditional on type being equal to zoneBasedFW
version Integer
Policy definition version
id This property is required. string
Policy definition ID
type This property is required. string
Policy definition type

  • Choices: urlFiltering, zoneBasedFW, intrusionPrevention, sslDecryption, advancedMalwareProtection, dnsSecurity
destinationZone string
Destination Zone, Attribute conditional on type being equal to zoneBasedFW
sourceZone string
Source Zone, Attribute conditional on type being equal to zoneBasedFW
version number
Policy definition version
id This property is required. str
Policy definition ID
type This property is required. str
Policy definition type

  • Choices: urlFiltering, zoneBasedFW, intrusionPrevention, sslDecryption, advancedMalwareProtection, dnsSecurity
destination_zone str
Destination Zone, Attribute conditional on type being equal to zoneBasedFW
source_zone str
Source Zone, Attribute conditional on type being equal to zoneBasedFW
version int
Policy definition version
id This property is required. String
Policy definition ID
type This property is required. String
Policy definition type

  • Choices: urlFiltering, zoneBasedFW, intrusionPrevention, sslDecryption, advancedMalwareProtection, dnsSecurity
destinationZone String
Destination Zone, Attribute conditional on type being equal to zoneBasedFW
sourceZone String
Source Zone, Attribute conditional on type being equal to zoneBasedFW
version Number
Policy definition version

SecurityPolicyLogging
, SecurityPolicyLoggingArgs

ExternalSyslogServerIp string
External Syslog Server IP
ExternalSyslogServerSourceInterface string
External Syslog Server Source Interface
ExternalSyslogServerVpn string
External Syslog Server VPN
ExternalSyslogServerIp string
External Syslog Server IP
ExternalSyslogServerSourceInterface string
External Syslog Server Source Interface
ExternalSyslogServerVpn string
External Syslog Server VPN
externalSyslogServerIp String
External Syslog Server IP
externalSyslogServerSourceInterface String
External Syslog Server Source Interface
externalSyslogServerVpn String
External Syslog Server VPN
externalSyslogServerIp string
External Syslog Server IP
externalSyslogServerSourceInterface string
External Syslog Server Source Interface
externalSyslogServerVpn string
External Syslog Server VPN
external_syslog_server_ip str
External Syslog Server IP
external_syslog_server_source_interface str
External Syslog Server Source Interface
external_syslog_server_vpn str
External Syslog Server VPN
externalSyslogServerIp String
External Syslog Server IP
externalSyslogServerSourceInterface String
External Syslog Server Source Interface
externalSyslogServerVpn String
External Syslog Server VPN

Import

$ pulumi import sdwan:index/securityPolicy:SecurityPolicy example "f6b2c44c-693c-4763-b010-895aa3d236bd"
Copy

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository
sdwan pulumi/pulumi-sdwan
License
Apache-2.0
Notes
This Pulumi package is based on the sdwan Terraform Provider.
Cisco Catalyst SD-WAN v0.3.0 published on Friday, Mar 28, 2025 by Pulumi
pulumi/pulumi-sdwan