Location in GUI: Policies
» Prefilter
Diagram
Classes
policies (fmc.domains)
Name | Type | Constraint | Mandatory | Default Value |
---|
prefilter_policies | List | [prefilter_policies] | No | |
prefilter_policies (fmc.domains.policies)
Name | Type | Constraint | Mandatory | Default Value |
---|
name | String | Regex: ^[a-zA-Z0-9_.+ -]{1,64}$ | Yes | |
description | String | max: 255 | No | |
action | Choice | BLOCK_TUNNELS , ANALYZE_TUNNELS | No | |
log_begin | Boolean | true , false | No | |
log_end | Boolean | true , false | No | |
send_events_to_fmc | Boolean | true , false | No | |
snmp_config | String | | No | |
syslog_config | String | | No | |
rules | List | [rules] | No | |
rules (fmc.domains.policies.prefilter_policies)
Name | Type | Constraint | Mandatory | Default Value |
---|
name | String | Regex: ^[a-zA-Z0-9_.+ -]{1,64}$ | Yes | |
action | Choice | FASTPATH , ANALYZE , BLOCK | Yes | |
rule_type | Choice | PREFILTER , TUNNEL | Yes | |
bidirectional | Boolean | true , false | No | |
destination_interfaces | List | String | No | |
destination_network_literals | List | IP | No | |
destination_network_objects | List | String | No | |
destination_port_literals | List | [destination_port_literals] | No | |
destination_port_objects | List | String | No | |
enabled | Boolean | true , false | No | |
encapsulation_ports | Choice | GRE , IP_IN_IP , IPV6_IN_IP , TEREDO | No | |
log_begin | Boolean | true , false | No | |
log_end | Boolean | true , false | No | |
send_events_to_fmc | Boolean | true , false | No | |
send_syslog | Boolean | true , false | No | |
snmp_config | String | | No | |
source_interfaces | List | String | No | |
source_network_literals | List | IP | No | |
source_network_objects | List | String | No | |
source_port_literals | List | [source_port_literals] | No | |
source_port_objects | List | String | No | |
syslog_config | String | | No | |
syslog_severity | Choice | ALERT , CRIT , DEBUG , EMERG , ERR , INFO , NOTICE , WARNING | No | |
time_range | String | | No | |
tunnel_zone | String | | No | |
vlan_tag_literals | List | Integer[min: 1 , max: 4095 ] | No | |
vlan_tag_objects | List | String | No | |
destination_port_literals (fmc.domains.policies.prefilter_policies.rules)
Name | Type | Constraint | Mandatory | Default Value |
---|
port | Integer | min: 1 , max: 65535 | Yes | |
protocol | Choice | TCP , UDP | Yes | |
Examples
Prerequisites:
- name: MySecurityZoneName1
- name: MySecurityZoneName2
Prefilter Policy
- name: MyPrefilterPolicyName1
default_action: ANALYZE_TUNNELS
- name: MyPrefilterRuleName1
destination_network_objects:
destination_port_objects: