ControlPolicyProps

Properties for defining a ControlPolicy.

See https://www.alibabacloud.com/help/ros/developer-reference/aliyun-cloudfw-controlpolicy

Initializer

using AlibabaCloud.SDK.ROS.CDK.Cloudfw;
new ControlPolicyProps {
    object AclAction,
    object Description,
    object Destination,
    object DestinationType,
    object Direction,
    object NewOrder,
    object Proto,
    object Source,
    object SourceType,
    object ApplicationName = null,
    object ApplicationNameList = null,
    object DestPort = null,
    object DestPortGroup = null,
    object DestPortType = null,
    object DomainResolveType = null,
    object EndTime = null,
    object IpVersion = null,
    object RegionId = null,
    object Release = null,
    object RepeatDays = null,
    object RepeatEndTime = null,
    object RepeatStartTime = null,
    object RepeatType = null,
    object StartTime = null
};

Properties

Name	Type	Description
AclAction	object	Property aclAction: Traffic access control policy set by the cloud of a firewall.
Description	object	Property description: Security access control policy description information.
Destination	object	Property destination: Security Access Control destination address policy.
DestinationType	object	Property destinationType: Security Access Control destination address type of policy.
Direction	object	Property direction: Security access control traffic direction policies.
NewOrder	object	Property newOrder: Security access control priority policy in force.
Proto	object	Property proto: The type of security protocol for traffic access in the security access control policy.
Source	object	Property source: Security access control source address policy.
SourceType	object	Property sourceType: Security access control source address type of policy.
ApplicationName	object	Property applicationName: Application types supported by the security policy.
ApplicationNameList	object	Property applicationNameList: List of application types supported by the access control policy.
DestPort	object	Property destPort: Security access control policy access traffic destination port.
DestPortGroup	object	Property destPortGroup: Security access control policy access traffic destination port address book name.
DestPortType	object	Property destPortType: Security access control policy access destination port traffic type.
DomainResolveType	object	Property domainResolveType: The domain name resolution method of the access control policy.
EndTime	object	Property endTime: The end time of the policy validity period for an access control policy.
IpVersion	object	Property ipVersion: IP version.
RegionId	object	Property regionId: Region ID.
Release	object	Property release: The enabled state of the access control policy.
RepeatDays	object	Property repeatDays: A collection of repeated dates of policy validity for an access control policy.
RepeatEndTime	object	Property repeatEndTime: The repeated end time of the policy validity period for an access control policy.
RepeatStartTime	object	Property repeatStartTime: The repeated start time of the policy validity period for an access control policy.
RepeatType	object	Property repeatType: The repetition type of the policy validity period for an access control policy.
StartTime	object	Property startTime: The start time of the policy validity period for an access control policy.

---

AclAction^Required

public object AclAction { get; set; }

• Type: object

Property aclAction: Traffic access control policy set by the cloud of a firewall.

accept: Release drop: rejected log: Observation

---

Description^Required

public object Description { get; set; }

• Type: object

Property description: Security access control policy description information.

---

Destination^Required

public object Destination { get; set; }

• Type: object

Property destination: Security Access Control destination address policy.

When DestinationType is net, Destination purpose CIDR. For example: 1.2.3.4/24 When DestinationType as a group, Destination for the purpose of the address book name. For example: db_group When DestinationType for the domain, Destination for the purpose of a domain name. For example:. * Aliyuncs.com When DestinationType as location, Destination area for the purpose (see below position encoding specific regions). For example: [ "BJ11", "ZB"]

---

DestinationType^Required

public object DestinationType { get; set; }

• Type: object

Property destinationType: Security Access Control destination address type of policy.

net: Destination network segment (CIDR) group: destination address book domain: The purpose domain location: The purpose area

---

Direction^Required

public object Direction { get; set; }

• Type: object

Property direction: Security access control traffic direction policies.

in: internal and external traffic access control out: within the flow of external access control

---

NewOrder^Required

public object NewOrder { get; set; }

• Type: object

Property newOrder: Security access control priority policy in force.

Priority number increments sequentially from 1, lower the priority number, the higher the priority. Description -1 indicates the lowest priority.

---

Proto^Required

public object Proto { get; set; }

• Type: object

Property proto: The type of security protocol for traffic access in the security access control policy.

Can be set to ANY when you are not sure of the specific protocol type. Allowed values: ANY, TCP, UDP, ICMP

---

Source^Required

public object Source { get; set; }

• Type: object

Property source: Security access control source address policy.

When SourceType for the net, Source is the source CIDR. For example: 1.2.3.0/24 When SourceType as a group, Source name for the source address book. For example: db_group When SourceType as location, Source source region (specific region position encoder see below). For example, [ "BJ11", "ZB"]

---

SourceType^Required

public object SourceType { get; set; }

• Type: object

Property sourceType: Security access control source address type of policy.

net: Source segment (CIDR) group: source address book location: the source area

---

ApplicationName^Optional

public object ApplicationName { get; set; }

• Type: object

Property applicationName: Application types supported by the security policy.

The following types of applications are supported: ANY, HTTP, HTTPS, MySQL, SMTP, SMTPS, RDP, VNC, SSH, Redis, MQTT, MongoDB, Memcache, SSL NOTE ANY indicates that the policy is applied to all types of applications. Either ApplicationNameList or ApplicationName must be passed, not both.

---

ApplicationNameList^Optional

public object ApplicationNameList { get; set; }

• Type: object

Property applicationNameList: List of application types supported by the access control policy.

---

DestPort^Optional

public object DestPort { get; set; }

• Type: object

Property destPort: Security access control policy access traffic destination port.

Note When DestPortType to port, set the item.

---

DestPortGroup^Optional

public object DestPortGroup { get; set; }

• Type: object

Property destPortGroup: Security access control policy access traffic destination port address book name.

Description DestPortType is group, set the item.

---

DestPortType^Optional

public object DestPortType { get; set; }

• Type: object

Property destPortType: Security access control policy access destination port traffic type.

port: Port group: port address book

---

DomainResolveType^Optional

public object DomainResolveType { get; set; }

• Type: object

Property domainResolveType: The domain name resolution method of the access control policy.

Value:

• FQDN: Based on FQDN
• DNS: Based on DNS dynamic resolution
• FQDN_AND_DNS: Based on FQDN and DNS dynamic resolution

---

EndTime^Optional

public object EndTime { get; set; }

• Type: object

Property endTime: The end time of the policy validity period for an access control policy.

It is represented in a second-level timestamp format. It must be the whole hour or half hour, and at least half an hour greater than the start time. Notes: When RepeatType is Permanent, EndTime is empty. When RepeatType is None, Daily, Weekly, Monthly, EndTime must havea value, and you need to set the end time.

---

IpVersion^Optional

public object IpVersion { get; set; }

• Type: object

Property ipVersion: IP version.

Valid values:

• 4: IPv4
• 6: IPv6

---

RegionId^Optional

public object RegionId { get; set; }

• Type: object

Property regionId: Region ID.

Default to cn-hangzhou.

---

Release^Optional

public object Release { get; set; }

• Type: object

Property release: The enabled state of the access control policy.

This policy is enabled by default when it is created. Valid values:

• true: Access control policy is enabled
• false: Access control policy is not enabled

---

RepeatDays^Optional

public object RepeatDays { get; set; }

• Type: object

Property repeatDays: A collection of repeated dates of policy validity for an access control policy.

When RepeatType is Permanent, None, and Daily, RepeatDays is an empty set. For example: [] When RepeatType is Weekly, RepeatDays cannot be empty. Example: [0, 6] Notes: When RepeatType is set to Weekly, RepeatDays is not allowed. When RepeatType is Monthly, RepeatDays cannot be empty. Examples: [1, 31] Notes: When RepeatType is set to Monthly, RepeatDays is not allowed to repeat.

---

RepeatEndTime^Optional

public object RepeatEndTime { get; set; }

• Type: object

Property repeatEndTime: The repeated end time of the policy validity period for an access control policy.

For example: 08:00, must be the hour or half time, and less than the repeat start time at least half an hour. Notes: When RepeatType is Permanent and None, RepeatEndTime is empty. When RepeatType is Daily, Weekly, or Monthly, RepeatEndTime musthave a value, and you need to set the repeat end time.

---

RepeatStartTime^Optional

public object RepeatStartTime { get; set; }

• Type: object

Property repeatStartTime: The repeated start time of the policy validity period for an access control policy.

For example: 08:00, must be the hour or half time, and less than the repeat end time at least half an hour. Notes: When RepeatType is Permanent and None, RepeatStartTime is empty. When RepeatType is Daily, Weekly, or Monthly, RepeatStartTime must have a value, and you need to set the repeat start time.

---

RepeatType^Optional

public object RepeatType { get; set; }

• Type: object

Property repeatType: The repetition type of the policy validity period for an access control policy.

Valid values:

• Permanent (default)
• None
• Daily
• Weekly
• Monthly.

---

StartTime^Optional

public object StartTime { get; set; }

• Type: object

Property startTime: The start time of the policy validity period for an access control policy.

It is represented in a second-level timestamp format. It must be the whole hour or half hour, and at least half an hour less than the end time. Notes: When RepeatType is Permanent, StartTime is empty. When RepeatType is None, Daily, Weekly, Monthly, StartTime must have a value, and you need to set the start time.

---