zia.ForwardingControlRule
Explore with Pulumi AI
Import
Zscaler offers a dedicated tool called Zscaler-Terraformer to allow the automated import of ZIA configurations into Terraform-compliant HashiCorp Configuration Language.
Visit
zia_forwarding_control_rule can be imported by using <RULE ID>
or <RULE NAME>
as the import ID.
For example:
$ pulumi import zia:index/forwardingControlRule:ForwardingControlRule example <rule_id>
or
$ pulumi import zia:index/forwardingControlRule:ForwardingControlRule example <rule_name>
Create ForwardingControlRule Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new ForwardingControlRule(name: string, args: ForwardingControlRuleArgs, opts?: CustomResourceOptions);
@overload
def ForwardingControlRule(resource_name: str,
args: ForwardingControlRuleArgs,
opts: Optional[ResourceOptions] = None)
@overload
def ForwardingControlRule(resource_name: str,
opts: Optional[ResourceOptions] = None,
forward_method: Optional[str] = None,
order: Optional[int] = None,
nw_service_groups: Optional[ForwardingControlRuleNwServiceGroupsArgs] = None,
dest_countries: Optional[Sequence[str]] = None,
nw_services: Optional[ForwardingControlRuleNwServicesArgs] = None,
dest_ip_categories: Optional[Sequence[str]] = None,
dest_ip_groups: Optional[ForwardingControlRuleDestIpGroupsArgs] = None,
dest_ipv6_groups: Optional[ForwardingControlRuleDestIpv6GroupsArgs] = None,
ec_groups: Optional[ForwardingControlRuleEcGroupsArgs] = None,
description: Optional[str] = None,
groups: Optional[ForwardingControlRuleGroupsArgs] = None,
labels: Optional[ForwardingControlRuleLabelsArgs] = None,
location_groups: Optional[ForwardingControlRuleLocationGroupsArgs] = None,
locations: Optional[ForwardingControlRuleLocationsArgs] = None,
name: Optional[str] = None,
nw_application_groups: Optional[ForwardingControlRuleNwApplicationGroupsArgs] = None,
zpa_gateway: Optional[ForwardingControlRuleZpaGatewayArgs] = None,
dest_addresses: Optional[Sequence[str]] = None,
departments: Optional[ForwardingControlRuleDepartmentsArgs] = None,
proxy_gateway: Optional[ForwardingControlRuleProxyGatewayArgs] = None,
rank: Optional[int] = None,
res_categories: Optional[Sequence[str]] = None,
src_ip_groups: Optional[ForwardingControlRuleSrcIpGroupsArgs] = None,
src_ips: Optional[Sequence[str]] = None,
src_ipv6_groups: Optional[ForwardingControlRuleSrcIpv6GroupsArgs] = None,
state: Optional[str] = None,
type: Optional[str] = None,
users: Optional[ForwardingControlRuleUsersArgs] = None,
zpa_app_segments: Optional[Sequence[ForwardingControlRuleZpaAppSegmentArgs]] = None,
zpa_application_segment_groups: Optional[ForwardingControlRuleZpaApplicationSegmentGroupsArgs] = None,
zpa_application_segments: Optional[ForwardingControlRuleZpaApplicationSegmentsArgs] = None,
app_service_groups: Optional[ForwardingControlRuleAppServiceGroupsArgs] = None)
func NewForwardingControlRule(ctx *Context, name string, args ForwardingControlRuleArgs, opts ...ResourceOption) (*ForwardingControlRule, error)
public ForwardingControlRule(string name, ForwardingControlRuleArgs args, CustomResourceOptions? opts = null)
public ForwardingControlRule(String name, ForwardingControlRuleArgs args)
public ForwardingControlRule(String name, ForwardingControlRuleArgs args, CustomResourceOptions options)
type: zia:ForwardingControlRule
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args ForwardingControlRuleArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args ForwardingControlRuleArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args ForwardingControlRuleArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args ForwardingControlRuleArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args ForwardingControlRuleArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var forwardingControlRuleResource = new Zia.ForwardingControlRule("forwardingControlRuleResource", new()
{
ForwardMethod = "string",
Order = 0,
NwServiceGroups = new Zia.Inputs.ForwardingControlRuleNwServiceGroupsArgs
{
Ids = new[]
{
0,
},
},
DestCountries = new[]
{
"string",
},
NwServices = new Zia.Inputs.ForwardingControlRuleNwServicesArgs
{
Ids = new[]
{
0,
},
},
DestIpCategories = new[]
{
"string",
},
DestIpGroups = new Zia.Inputs.ForwardingControlRuleDestIpGroupsArgs
{
Ids = new[]
{
0,
},
},
DestIpv6Groups = new Zia.Inputs.ForwardingControlRuleDestIpv6GroupsArgs
{
Ids = new[]
{
0,
},
},
EcGroups = new Zia.Inputs.ForwardingControlRuleEcGroupsArgs
{
Ids = new[]
{
0,
},
},
Description = "string",
Groups = new Zia.Inputs.ForwardingControlRuleGroupsArgs
{
Ids = new[]
{
0,
},
},
Labels = new Zia.Inputs.ForwardingControlRuleLabelsArgs
{
Id = 0,
},
LocationGroups = new Zia.Inputs.ForwardingControlRuleLocationGroupsArgs
{
Ids = new[]
{
0,
},
},
Locations = new Zia.Inputs.ForwardingControlRuleLocationsArgs
{
Ids = new[]
{
0,
},
},
Name = "string",
NwApplicationGroups = new Zia.Inputs.ForwardingControlRuleNwApplicationGroupsArgs
{
Ids = new[]
{
0,
},
},
ZpaGateway = new Zia.Inputs.ForwardingControlRuleZpaGatewayArgs
{
Id = 0,
Name = "string",
},
DestAddresses = new[]
{
"string",
},
Departments = new Zia.Inputs.ForwardingControlRuleDepartmentsArgs
{
Ids = new[]
{
0,
},
},
ProxyGateway = new Zia.Inputs.ForwardingControlRuleProxyGatewayArgs
{
Id = 0,
Name = "string",
},
Rank = 0,
ResCategories = new[]
{
"string",
},
SrcIpGroups = new Zia.Inputs.ForwardingControlRuleSrcIpGroupsArgs
{
Ids = new[]
{
0,
},
},
SrcIps = new[]
{
"string",
},
SrcIpv6Groups = new Zia.Inputs.ForwardingControlRuleSrcIpv6GroupsArgs
{
Ids = new[]
{
0,
},
},
State = "string",
Type = "string",
Users = new Zia.Inputs.ForwardingControlRuleUsersArgs
{
Ids = new[]
{
0,
},
},
ZpaAppSegments = new[]
{
new Zia.Inputs.ForwardingControlRuleZpaAppSegmentArgs
{
ExternalId = "string",
Name = "string",
},
},
ZpaApplicationSegmentGroups = new Zia.Inputs.ForwardingControlRuleZpaApplicationSegmentGroupsArgs
{
Ids = new[]
{
0,
},
},
ZpaApplicationSegments = new Zia.Inputs.ForwardingControlRuleZpaApplicationSegmentsArgs
{
Ids = new[]
{
0,
},
},
AppServiceGroups = new Zia.Inputs.ForwardingControlRuleAppServiceGroupsArgs
{
Ids = new[]
{
0,
},
},
});
example, err := zia.NewForwardingControlRule(ctx, "forwardingControlRuleResource", &zia.ForwardingControlRuleArgs{
ForwardMethod: pulumi.String("string"),
Order: pulumi.Int(0),
NwServiceGroups: &zia.ForwardingControlRuleNwServiceGroupsArgs{
Ids: pulumi.IntArray{
pulumi.Int(0),
},
},
DestCountries: pulumi.StringArray{
pulumi.String("string"),
},
NwServices: &zia.ForwardingControlRuleNwServicesArgs{
Ids: pulumi.IntArray{
pulumi.Int(0),
},
},
DestIpCategories: pulumi.StringArray{
pulumi.String("string"),
},
DestIpGroups: &zia.ForwardingControlRuleDestIpGroupsArgs{
Ids: pulumi.IntArray{
pulumi.Int(0),
},
},
DestIpv6Groups: &zia.ForwardingControlRuleDestIpv6GroupsArgs{
Ids: pulumi.IntArray{
pulumi.Int(0),
},
},
EcGroups: &zia.ForwardingControlRuleEcGroupsArgs{
Ids: pulumi.IntArray{
pulumi.Int(0),
},
},
Description: pulumi.String("string"),
Groups: &zia.ForwardingControlRuleGroupsArgs{
Ids: pulumi.IntArray{
pulumi.Int(0),
},
},
Labels: &zia.ForwardingControlRuleLabelsArgs{
Id: pulumi.Int(0),
},
LocationGroups: &zia.ForwardingControlRuleLocationGroupsArgs{
Ids: pulumi.IntArray{
pulumi.Int(0),
},
},
Locations: &zia.ForwardingControlRuleLocationsArgs{
Ids: pulumi.IntArray{
pulumi.Int(0),
},
},
Name: pulumi.String("string"),
NwApplicationGroups: &zia.ForwardingControlRuleNwApplicationGroupsArgs{
Ids: pulumi.IntArray{
pulumi.Int(0),
},
},
ZpaGateway: &zia.ForwardingControlRuleZpaGatewayArgs{
Id: pulumi.Int(0),
Name: pulumi.String("string"),
},
DestAddresses: pulumi.StringArray{
pulumi.String("string"),
},
Departments: &zia.ForwardingControlRuleDepartmentsArgs{
Ids: pulumi.IntArray{
pulumi.Int(0),
},
},
ProxyGateway: &zia.ForwardingControlRuleProxyGatewayArgs{
Id: pulumi.Int(0),
Name: pulumi.String("string"),
},
Rank: pulumi.Int(0),
ResCategories: pulumi.StringArray{
pulumi.String("string"),
},
SrcIpGroups: &zia.ForwardingControlRuleSrcIpGroupsArgs{
Ids: pulumi.IntArray{
pulumi.Int(0),
},
},
SrcIps: pulumi.StringArray{
pulumi.String("string"),
},
SrcIpv6Groups: &zia.ForwardingControlRuleSrcIpv6GroupsArgs{
Ids: pulumi.IntArray{
pulumi.Int(0),
},
},
State: pulumi.String("string"),
Type: pulumi.String("string"),
Users: &zia.ForwardingControlRuleUsersArgs{
Ids: pulumi.IntArray{
pulumi.Int(0),
},
},
ZpaAppSegments: zia.ForwardingControlRuleZpaAppSegmentArray{
&zia.ForwardingControlRuleZpaAppSegmentArgs{
ExternalId: pulumi.String("string"),
Name: pulumi.String("string"),
},
},
ZpaApplicationSegmentGroups: &zia.ForwardingControlRuleZpaApplicationSegmentGroupsArgs{
Ids: pulumi.IntArray{
pulumi.Int(0),
},
},
ZpaApplicationSegments: &zia.ForwardingControlRuleZpaApplicationSegmentsArgs{
Ids: pulumi.IntArray{
pulumi.Int(0),
},
},
AppServiceGroups: &zia.ForwardingControlRuleAppServiceGroupsArgs{
Ids: pulumi.IntArray{
pulumi.Int(0),
},
},
})
var forwardingControlRuleResource = new ForwardingControlRule("forwardingControlRuleResource", ForwardingControlRuleArgs.builder()
.forwardMethod("string")
.order(0)
.nwServiceGroups(ForwardingControlRuleNwServiceGroupsArgs.builder()
.ids(0)
.build())
.destCountries("string")
.nwServices(ForwardingControlRuleNwServicesArgs.builder()
.ids(0)
.build())
.destIpCategories("string")
.destIpGroups(ForwardingControlRuleDestIpGroupsArgs.builder()
.ids(0)
.build())
.destIpv6Groups(ForwardingControlRuleDestIpv6GroupsArgs.builder()
.ids(0)
.build())
.ecGroups(ForwardingControlRuleEcGroupsArgs.builder()
.ids(0)
.build())
.description("string")
.groups(ForwardingControlRuleGroupsArgs.builder()
.ids(0)
.build())
.labels(ForwardingControlRuleLabelsArgs.builder()
.id(0)
.build())
.locationGroups(ForwardingControlRuleLocationGroupsArgs.builder()
.ids(0)
.build())
.locations(ForwardingControlRuleLocationsArgs.builder()
.ids(0)
.build())
.name("string")
.nwApplicationGroups(ForwardingControlRuleNwApplicationGroupsArgs.builder()
.ids(0)
.build())
.zpaGateway(ForwardingControlRuleZpaGatewayArgs.builder()
.id(0)
.name("string")
.build())
.destAddresses("string")
.departments(ForwardingControlRuleDepartmentsArgs.builder()
.ids(0)
.build())
.proxyGateway(ForwardingControlRuleProxyGatewayArgs.builder()
.id(0)
.name("string")
.build())
.rank(0)
.resCategories("string")
.srcIpGroups(ForwardingControlRuleSrcIpGroupsArgs.builder()
.ids(0)
.build())
.srcIps("string")
.srcIpv6Groups(ForwardingControlRuleSrcIpv6GroupsArgs.builder()
.ids(0)
.build())
.state("string")
.type("string")
.users(ForwardingControlRuleUsersArgs.builder()
.ids(0)
.build())
.zpaAppSegments(ForwardingControlRuleZpaAppSegmentArgs.builder()
.externalId("string")
.name("string")
.build())
.zpaApplicationSegmentGroups(ForwardingControlRuleZpaApplicationSegmentGroupsArgs.builder()
.ids(0)
.build())
.zpaApplicationSegments(ForwardingControlRuleZpaApplicationSegmentsArgs.builder()
.ids(0)
.build())
.appServiceGroups(ForwardingControlRuleAppServiceGroupsArgs.builder()
.ids(0)
.build())
.build());
forwarding_control_rule_resource = zia.ForwardingControlRule("forwardingControlRuleResource",
forward_method="string",
order=0,
nw_service_groups={
"ids": [0],
},
dest_countries=["string"],
nw_services={
"ids": [0],
},
dest_ip_categories=["string"],
dest_ip_groups={
"ids": [0],
},
dest_ipv6_groups={
"ids": [0],
},
ec_groups={
"ids": [0],
},
description="string",
groups={
"ids": [0],
},
labels={
"id": 0,
},
location_groups={
"ids": [0],
},
locations={
"ids": [0],
},
name="string",
nw_application_groups={
"ids": [0],
},
zpa_gateway={
"id": 0,
"name": "string",
},
dest_addresses=["string"],
departments={
"ids": [0],
},
proxy_gateway={
"id": 0,
"name": "string",
},
rank=0,
res_categories=["string"],
src_ip_groups={
"ids": [0],
},
src_ips=["string"],
src_ipv6_groups={
"ids": [0],
},
state="string",
type="string",
users={
"ids": [0],
},
zpa_app_segments=[{
"external_id": "string",
"name": "string",
}],
zpa_application_segment_groups={
"ids": [0],
},
zpa_application_segments={
"ids": [0],
},
app_service_groups={
"ids": [0],
})
const forwardingControlRuleResource = new zia.ForwardingControlRule("forwardingControlRuleResource", {
forwardMethod: "string",
order: 0,
nwServiceGroups: {
ids: [0],
},
destCountries: ["string"],
nwServices: {
ids: [0],
},
destIpCategories: ["string"],
destIpGroups: {
ids: [0],
},
destIpv6Groups: {
ids: [0],
},
ecGroups: {
ids: [0],
},
description: "string",
groups: {
ids: [0],
},
labels: {
id: 0,
},
locationGroups: {
ids: [0],
},
locations: {
ids: [0],
},
name: "string",
nwApplicationGroups: {
ids: [0],
},
zpaGateway: {
id: 0,
name: "string",
},
destAddresses: ["string"],
departments: {
ids: [0],
},
proxyGateway: {
id: 0,
name: "string",
},
rank: 0,
resCategories: ["string"],
srcIpGroups: {
ids: [0],
},
srcIps: ["string"],
srcIpv6Groups: {
ids: [0],
},
state: "string",
type: "string",
users: {
ids: [0],
},
zpaAppSegments: [{
externalId: "string",
name: "string",
}],
zpaApplicationSegmentGroups: {
ids: [0],
},
zpaApplicationSegments: {
ids: [0],
},
appServiceGroups: {
ids: [0],
},
});
type: zia:ForwardingControlRule
properties:
appServiceGroups:
ids:
- 0
departments:
ids:
- 0
description: string
destAddresses:
- string
destCountries:
- string
destIpCategories:
- string
destIpGroups:
ids:
- 0
destIpv6Groups:
ids:
- 0
ecGroups:
ids:
- 0
forwardMethod: string
groups:
ids:
- 0
labels:
id: 0
locationGroups:
ids:
- 0
locations:
ids:
- 0
name: string
nwApplicationGroups:
ids:
- 0
nwServiceGroups:
ids:
- 0
nwServices:
ids:
- 0
order: 0
proxyGateway:
id: 0
name: string
rank: 0
resCategories:
- string
srcIpGroups:
ids:
- 0
srcIps:
- string
srcIpv6Groups:
ids:
- 0
state: string
type: string
users:
ids:
- 0
zpaAppSegments:
- externalId: string
name: string
zpaApplicationSegmentGroups:
ids:
- 0
zpaApplicationSegments:
ids:
- 0
zpaGateway:
id: 0
name: string
ForwardingControlRule Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The ForwardingControlRule resource accepts the following input properties:
- Forward
Method string - The type of traffic forwarding method selected from the available options
- Order int
- (int) - The order of execution for the forwarding rule order.
- App
Service zscaler.Groups Pulumi Package. Zia. Inputs. Forwarding Control Rule App Service Groups - (list) - Application service groups on which this rule is applied
- Departments
zscaler.
Pulumi Package. Zia. Inputs. Forwarding Control Rule Departments - (list) Apply to any number of departments When not used it implies
Any
to apply the rule to all departments. - Description string
- (string) - Additional information about the forwarding rule
- Dest
Addresses List<string> - ** - (list) - IP addresses and fully qualified domain names (FQDNs), if the domain has multiple destination IP addresses or if its IP addresses may change. For IP addresses, you can enter individual IP addresses, subnets, or address ranges. If adding multiple items, hit Enter after each entry.
- Dest
Countries List<string> - ** - (list) destination countries for which the rule is applicable. If not set, the rule is not restricted to specific destination countries. Provide a 2 letter ISO3166 Alpha2 Country code.
- Dest
Ip List<string>Categories - ** - (list) identify destinations based on the URL category of the domain, select Any to apply the rule to all categories or select the specific categories you want to control.
- Dest
Ip zscaler.Groups Pulumi Package. Zia. Inputs. Forwarding Control Rule Dest Ip Groups - ** - (list) Any number of destination IP address groups that you want to control with this rule.
- Dest
Ipv6Groups zscaler.Pulumi Package. Zia. Inputs. Forwarding Control Rule Dest Ipv6Groups - ** - (list) Destination IPv6 address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IPv6 address group.
- Ec
Groups zscaler.Pulumi Package. Zia. Inputs. Forwarding Control Rule Ec Groups - (list) - Name-ID pairs of the Zscaler Cloud Connector groups to which the forwarding rule applies
- Groups
zscaler.
Pulumi Package. Zia. Inputs. Forwarding Control Rule Groups - (list) You can manually select up to
8
groups. When not used it impliesAny
to apply the rule to all groups. - Labels
zscaler.
Pulumi Package. Zia. Inputs. Forwarding Control Rule Labels - (list) Labels that are applicable to the rule.
- Location
Groups zscaler.Pulumi Package. Zia. Inputs. Forwarding Control Rule Location Groups - (Optional) You can manually select up to
32
location groups. When not used it impliesAny
to apply the rule to all location groups. - Locations
zscaler.
Pulumi Package. Zia. Inputs. Forwarding Control Rule Locations - (Optional) You can manually select up to
8
locations. When not used it impliesAny
to apply the rule to all groups. - Name string
- (string) The configured name of the entity
- Nw
Application zscaler.Groups Pulumi Package. Zia. Inputs. Forwarding Control Rule Nw Application Groups - (list) Any number of application groups that you want to control with this rule. The service provides predefined applications that you can group, but not modify
- Nw
Service zscaler.Groups Pulumi Package. Zia. Inputs. Forwarding Control Rule Nw Service Groups - (list) Any number of predefined or custom network service groups to which the rule applies.
- Nw
Services zscaler.Pulumi Package. Zia. Inputs. Forwarding Control Rule Nw Services - (list) When not used it applies the rule to all network services or you can select specific network services. The Zscaler firewall has predefined services and you can configure up to
1,024
additional custom services. - Proxy
Gateway zscaler.Pulumi Package. Zia. Inputs. Forwarding Control Rule Proxy Gateway - (set) The proxy gateway for which the rule is applicable. This field is applicable only for the
PROXYCHAIN
forwarding method. - Rank int
- Admin rank assigned to the forwarding rule
- Res
Categories List<string> - ** - (list) List of destination domain categories to which the rule applies.
- Src
Ip zscaler.Groups Pulumi Package. Zia. Inputs. Forwarding Control Rule Src Ip Groups - (list) Any number of source IP address groups that you want to control with this rule.
- Src
Ips List<string> - (Optional) You can enter individual IP addresses, subnets, or address ranges.
- Src
Ipv6Groups zscaler.Pulumi Package. Zia. Inputs. Forwarding Control Rule Src Ipv6Groups - (list) Source IPv6 address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IPv6 address group.
- State string
- (string) - Indicates whether the forwarding rule is enabled or disabled. Supported values are:
ENABLED
andDISABLED
. - Type string
- The rule type selected from the available options
- Users
zscaler.
Pulumi Package. Zia. Inputs. Forwarding Control Rule Users - (list) You can manually select up to
4
general and/or special users. When not used it impliesAny
to apply the rule to all users. - Zpa
App List<zscaler.Segments Pulumi Package. Zia. Inputs. Forwarding Control Rule Zpa App Segment> - (set) The list of ZPA Application Segments for which this rule is applicable. This field is applicable only for the
ZPA
Gateway forwarding method. - Zpa
Application zscaler.Segment Groups Pulumi Package. Zia. Inputs. Forwarding Control Rule Zpa Application Segment Groups - (set) List of ZPA Application Segment Groups for which this rule is applicable. This field is applicable only for the
ECZPA
forwarding method (used for Zscaler Cloud Connector). - Zpa
Application zscaler.Segments Pulumi Package. Zia. Inputs. Forwarding Control Rule Zpa Application Segments - (set) List of ZPA Application Segments for which this rule is applicable. This field is applicable only for the
ECZPA
forwarding method (used for Zscaler Cloud Connector). - Zpa
Gateway zscaler.Pulumi Package. Zia. Inputs. Forwarding Control Rule Zpa Gateway - (set) The ZPA Gateway for which this rule is applicable. This field is applicable only for the
ZPA
forwarding method.
- Forward
Method string - The type of traffic forwarding method selected from the available options
- Order int
- (int) - The order of execution for the forwarding rule order.
- App
Service ForwardingGroups Control Rule App Service Groups Args - (list) - Application service groups on which this rule is applied
- Departments
Forwarding
Control Rule Departments Args - (list) Apply to any number of departments When not used it implies
Any
to apply the rule to all departments. - Description string
- (string) - Additional information about the forwarding rule
- Dest
Addresses []string - ** - (list) - IP addresses and fully qualified domain names (FQDNs), if the domain has multiple destination IP addresses or if its IP addresses may change. For IP addresses, you can enter individual IP addresses, subnets, or address ranges. If adding multiple items, hit Enter after each entry.
- Dest
Countries []string - ** - (list) destination countries for which the rule is applicable. If not set, the rule is not restricted to specific destination countries. Provide a 2 letter ISO3166 Alpha2 Country code.
- Dest
Ip []stringCategories - ** - (list) identify destinations based on the URL category of the domain, select Any to apply the rule to all categories or select the specific categories you want to control.
- Dest
Ip ForwardingGroups Control Rule Dest Ip Groups Args - ** - (list) Any number of destination IP address groups that you want to control with this rule.
- Dest
Ipv6Groups ForwardingControl Rule Dest Ipv6Groups Args - ** - (list) Destination IPv6 address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IPv6 address group.
- Ec
Groups ForwardingControl Rule Ec Groups Args - (list) - Name-ID pairs of the Zscaler Cloud Connector groups to which the forwarding rule applies
- Groups
Forwarding
Control Rule Groups Args - (list) You can manually select up to
8
groups. When not used it impliesAny
to apply the rule to all groups. - Labels
Forwarding
Control Rule Labels Args - (list) Labels that are applicable to the rule.
- Location
Groups ForwardingControl Rule Location Groups Args - (Optional) You can manually select up to
32
location groups. When not used it impliesAny
to apply the rule to all location groups. - Locations
Forwarding
Control Rule Locations Args - (Optional) You can manually select up to
8
locations. When not used it impliesAny
to apply the rule to all groups. - Name string
- (string) The configured name of the entity
- Nw
Application ForwardingGroups Control Rule Nw Application Groups Args - (list) Any number of application groups that you want to control with this rule. The service provides predefined applications that you can group, but not modify
- Nw
Service ForwardingGroups Control Rule Nw Service Groups Args - (list) Any number of predefined or custom network service groups to which the rule applies.
- Nw
Services ForwardingControl Rule Nw Services Args - (list) When not used it applies the rule to all network services or you can select specific network services. The Zscaler firewall has predefined services and you can configure up to
1,024
additional custom services. - Proxy
Gateway ForwardingControl Rule Proxy Gateway Args - (set) The proxy gateway for which the rule is applicable. This field is applicable only for the
PROXYCHAIN
forwarding method. - Rank int
- Admin rank assigned to the forwarding rule
- Res
Categories []string - ** - (list) List of destination domain categories to which the rule applies.
- Src
Ip ForwardingGroups Control Rule Src Ip Groups Args - (list) Any number of source IP address groups that you want to control with this rule.
- Src
Ips []string - (Optional) You can enter individual IP addresses, subnets, or address ranges.
- Src
Ipv6Groups ForwardingControl Rule Src Ipv6Groups Args - (list) Source IPv6 address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IPv6 address group.
- State string
- (string) - Indicates whether the forwarding rule is enabled or disabled. Supported values are:
ENABLED
andDISABLED
. - Type string
- The rule type selected from the available options
- Users
Forwarding
Control Rule Users Args - (list) You can manually select up to
4
general and/or special users. When not used it impliesAny
to apply the rule to all users. - Zpa
App []ForwardingSegments Control Rule Zpa App Segment Args - (set) The list of ZPA Application Segments for which this rule is applicable. This field is applicable only for the
ZPA
Gateway forwarding method. - Zpa
Application ForwardingSegment Groups Control Rule Zpa Application Segment Groups Args - (set) List of ZPA Application Segment Groups for which this rule is applicable. This field is applicable only for the
ECZPA
forwarding method (used for Zscaler Cloud Connector). - Zpa
Application ForwardingSegments Control Rule Zpa Application Segments Args - (set) List of ZPA Application Segments for which this rule is applicable. This field is applicable only for the
ECZPA
forwarding method (used for Zscaler Cloud Connector). - Zpa
Gateway ForwardingControl Rule Zpa Gateway Args - (set) The ZPA Gateway for which this rule is applicable. This field is applicable only for the
ZPA
forwarding method.
- forward
Method String - The type of traffic forwarding method selected from the available options
- order Integer
- (int) - The order of execution for the forwarding rule order.
- app
Service ForwardingGroups Control Rule App Service Groups - (list) - Application service groups on which this rule is applied
- departments
Forwarding
Control Rule Departments - (list) Apply to any number of departments When not used it implies
Any
to apply the rule to all departments. - description String
- (string) - Additional information about the forwarding rule
- dest
Addresses List<String> - ** - (list) - IP addresses and fully qualified domain names (FQDNs), if the domain has multiple destination IP addresses or if its IP addresses may change. For IP addresses, you can enter individual IP addresses, subnets, or address ranges. If adding multiple items, hit Enter after each entry.
- dest
Countries List<String> - ** - (list) destination countries for which the rule is applicable. If not set, the rule is not restricted to specific destination countries. Provide a 2 letter ISO3166 Alpha2 Country code.
- dest
Ip List<String>Categories - ** - (list) identify destinations based on the URL category of the domain, select Any to apply the rule to all categories or select the specific categories you want to control.
- dest
Ip ForwardingGroups Control Rule Dest Ip Groups - ** - (list) Any number of destination IP address groups that you want to control with this rule.
- dest
Ipv6Groups ForwardingControl Rule Dest Ipv6Groups - ** - (list) Destination IPv6 address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IPv6 address group.
- ec
Groups ForwardingControl Rule Ec Groups - (list) - Name-ID pairs of the Zscaler Cloud Connector groups to which the forwarding rule applies
- groups
Forwarding
Control Rule Groups - (list) You can manually select up to
8
groups. When not used it impliesAny
to apply the rule to all groups. - labels
Forwarding
Control Rule Labels - (list) Labels that are applicable to the rule.
- location
Groups ForwardingControl Rule Location Groups - (Optional) You can manually select up to
32
location groups. When not used it impliesAny
to apply the rule to all location groups. - locations
Forwarding
Control Rule Locations - (Optional) You can manually select up to
8
locations. When not used it impliesAny
to apply the rule to all groups. - name String
- (string) The configured name of the entity
- nw
Application ForwardingGroups Control Rule Nw Application Groups - (list) Any number of application groups that you want to control with this rule. The service provides predefined applications that you can group, but not modify
- nw
Service ForwardingGroups Control Rule Nw Service Groups - (list) Any number of predefined or custom network service groups to which the rule applies.
- nw
Services ForwardingControl Rule Nw Services - (list) When not used it applies the rule to all network services or you can select specific network services. The Zscaler firewall has predefined services and you can configure up to
1,024
additional custom services. - proxy
Gateway ForwardingControl Rule Proxy Gateway - (set) The proxy gateway for which the rule is applicable. This field is applicable only for the
PROXYCHAIN
forwarding method. - rank Integer
- Admin rank assigned to the forwarding rule
- res
Categories List<String> - ** - (list) List of destination domain categories to which the rule applies.
- src
Ip ForwardingGroups Control Rule Src Ip Groups - (list) Any number of source IP address groups that you want to control with this rule.
- src
Ips List<String> - (Optional) You can enter individual IP addresses, subnets, or address ranges.
- src
Ipv6Groups ForwardingControl Rule Src Ipv6Groups - (list) Source IPv6 address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IPv6 address group.
- state String
- (string) - Indicates whether the forwarding rule is enabled or disabled. Supported values are:
ENABLED
andDISABLED
. - type String
- The rule type selected from the available options
- users
Forwarding
Control Rule Users - (list) You can manually select up to
4
general and/or special users. When not used it impliesAny
to apply the rule to all users. - zpa
App List<ForwardingSegments Control Rule Zpa App Segment> - (set) The list of ZPA Application Segments for which this rule is applicable. This field is applicable only for the
ZPA
Gateway forwarding method. - zpa
Application ForwardingSegment Groups Control Rule Zpa Application Segment Groups - (set) List of ZPA Application Segment Groups for which this rule is applicable. This field is applicable only for the
ECZPA
forwarding method (used for Zscaler Cloud Connector). - zpa
Application ForwardingSegments Control Rule Zpa Application Segments - (set) List of ZPA Application Segments for which this rule is applicable. This field is applicable only for the
ECZPA
forwarding method (used for Zscaler Cloud Connector). - zpa
Gateway ForwardingControl Rule Zpa Gateway - (set) The ZPA Gateway for which this rule is applicable. This field is applicable only for the
ZPA
forwarding method.
- forward
Method string - The type of traffic forwarding method selected from the available options
- order number
- (int) - The order of execution for the forwarding rule order.
- app
Service ForwardingGroups Control Rule App Service Groups - (list) - Application service groups on which this rule is applied
- departments
Forwarding
Control Rule Departments - (list) Apply to any number of departments When not used it implies
Any
to apply the rule to all departments. - description string
- (string) - Additional information about the forwarding rule
- dest
Addresses string[] - ** - (list) - IP addresses and fully qualified domain names (FQDNs), if the domain has multiple destination IP addresses or if its IP addresses may change. For IP addresses, you can enter individual IP addresses, subnets, or address ranges. If adding multiple items, hit Enter after each entry.
- dest
Countries string[] - ** - (list) destination countries for which the rule is applicable. If not set, the rule is not restricted to specific destination countries. Provide a 2 letter ISO3166 Alpha2 Country code.
- dest
Ip string[]Categories - ** - (list) identify destinations based on the URL category of the domain, select Any to apply the rule to all categories or select the specific categories you want to control.
- dest
Ip ForwardingGroups Control Rule Dest Ip Groups - ** - (list) Any number of destination IP address groups that you want to control with this rule.
- dest
Ipv6Groups ForwardingControl Rule Dest Ipv6Groups - ** - (list) Destination IPv6 address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IPv6 address group.
- ec
Groups ForwardingControl Rule Ec Groups - (list) - Name-ID pairs of the Zscaler Cloud Connector groups to which the forwarding rule applies
- groups
Forwarding
Control Rule Groups - (list) You can manually select up to
8
groups. When not used it impliesAny
to apply the rule to all groups. - labels
Forwarding
Control Rule Labels - (list) Labels that are applicable to the rule.
- location
Groups ForwardingControl Rule Location Groups - (Optional) You can manually select up to
32
location groups. When not used it impliesAny
to apply the rule to all location groups. - locations
Forwarding
Control Rule Locations - (Optional) You can manually select up to
8
locations. When not used it impliesAny
to apply the rule to all groups. - name string
- (string) The configured name of the entity
- nw
Application ForwardingGroups Control Rule Nw Application Groups - (list) Any number of application groups that you want to control with this rule. The service provides predefined applications that you can group, but not modify
- nw
Service ForwardingGroups Control Rule Nw Service Groups - (list) Any number of predefined or custom network service groups to which the rule applies.
- nw
Services ForwardingControl Rule Nw Services - (list) When not used it applies the rule to all network services or you can select specific network services. The Zscaler firewall has predefined services and you can configure up to
1,024
additional custom services. - proxy
Gateway ForwardingControl Rule Proxy Gateway - (set) The proxy gateway for which the rule is applicable. This field is applicable only for the
PROXYCHAIN
forwarding method. - rank number
- Admin rank assigned to the forwarding rule
- res
Categories string[] - ** - (list) List of destination domain categories to which the rule applies.
- src
Ip ForwardingGroups Control Rule Src Ip Groups - (list) Any number of source IP address groups that you want to control with this rule.
- src
Ips string[] - (Optional) You can enter individual IP addresses, subnets, or address ranges.
- src
Ipv6Groups ForwardingControl Rule Src Ipv6Groups - (list) Source IPv6 address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IPv6 address group.
- state string
- (string) - Indicates whether the forwarding rule is enabled or disabled. Supported values are:
ENABLED
andDISABLED
. - type string
- The rule type selected from the available options
- users
Forwarding
Control Rule Users - (list) You can manually select up to
4
general and/or special users. When not used it impliesAny
to apply the rule to all users. - zpa
App ForwardingSegments Control Rule Zpa App Segment[] - (set) The list of ZPA Application Segments for which this rule is applicable. This field is applicable only for the
ZPA
Gateway forwarding method. - zpa
Application ForwardingSegment Groups Control Rule Zpa Application Segment Groups - (set) List of ZPA Application Segment Groups for which this rule is applicable. This field is applicable only for the
ECZPA
forwarding method (used for Zscaler Cloud Connector). - zpa
Application ForwardingSegments Control Rule Zpa Application Segments - (set) List of ZPA Application Segments for which this rule is applicable. This field is applicable only for the
ECZPA
forwarding method (used for Zscaler Cloud Connector). - zpa
Gateway ForwardingControl Rule Zpa Gateway - (set) The ZPA Gateway for which this rule is applicable. This field is applicable only for the
ZPA
forwarding method.
- forward_
method str - The type of traffic forwarding method selected from the available options
- order int
- (int) - The order of execution for the forwarding rule order.
- app_
service_ Forwardinggroups Control Rule App Service Groups Args - (list) - Application service groups on which this rule is applied
- departments
Forwarding
Control Rule Departments Args - (list) Apply to any number of departments When not used it implies
Any
to apply the rule to all departments. - description str
- (string) - Additional information about the forwarding rule
- dest_
addresses Sequence[str] - ** - (list) - IP addresses and fully qualified domain names (FQDNs), if the domain has multiple destination IP addresses or if its IP addresses may change. For IP addresses, you can enter individual IP addresses, subnets, or address ranges. If adding multiple items, hit Enter after each entry.
- dest_
countries Sequence[str] - ** - (list) destination countries for which the rule is applicable. If not set, the rule is not restricted to specific destination countries. Provide a 2 letter ISO3166 Alpha2 Country code.
- dest_
ip_ Sequence[str]categories - ** - (list) identify destinations based on the URL category of the domain, select Any to apply the rule to all categories or select the specific categories you want to control.
- dest_
ip_ Forwardinggroups Control Rule Dest Ip Groups Args - ** - (list) Any number of destination IP address groups that you want to control with this rule.
- dest_
ipv6_ Forwardinggroups Control Rule Dest Ipv6Groups Args - ** - (list) Destination IPv6 address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IPv6 address group.
- ec_
groups ForwardingControl Rule Ec Groups Args - (list) - Name-ID pairs of the Zscaler Cloud Connector groups to which the forwarding rule applies
- groups
Forwarding
Control Rule Groups Args - (list) You can manually select up to
8
groups. When not used it impliesAny
to apply the rule to all groups. - labels
Forwarding
Control Rule Labels Args - (list) Labels that are applicable to the rule.
- location_
groups ForwardingControl Rule Location Groups Args - (Optional) You can manually select up to
32
location groups. When not used it impliesAny
to apply the rule to all location groups. - locations
Forwarding
Control Rule Locations Args - (Optional) You can manually select up to
8
locations. When not used it impliesAny
to apply the rule to all groups. - name str
- (string) The configured name of the entity
- nw_
application_ Forwardinggroups Control Rule Nw Application Groups Args - (list) Any number of application groups that you want to control with this rule. The service provides predefined applications that you can group, but not modify
- nw_
service_ Forwardinggroups Control Rule Nw Service Groups Args - (list) Any number of predefined or custom network service groups to which the rule applies.
- nw_
services ForwardingControl Rule Nw Services Args - (list) When not used it applies the rule to all network services or you can select specific network services. The Zscaler firewall has predefined services and you can configure up to
1,024
additional custom services. - proxy_
gateway ForwardingControl Rule Proxy Gateway Args - (set) The proxy gateway for which the rule is applicable. This field is applicable only for the
PROXYCHAIN
forwarding method. - rank int
- Admin rank assigned to the forwarding rule
- res_
categories Sequence[str] - ** - (list) List of destination domain categories to which the rule applies.
- src_
ip_ Forwardinggroups Control Rule Src Ip Groups Args - (list) Any number of source IP address groups that you want to control with this rule.
- src_
ips Sequence[str] - (Optional) You can enter individual IP addresses, subnets, or address ranges.
- src_
ipv6_ Forwardinggroups Control Rule Src Ipv6Groups Args - (list) Source IPv6 address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IPv6 address group.
- state str
- (string) - Indicates whether the forwarding rule is enabled or disabled. Supported values are:
ENABLED
andDISABLED
. - type str
- The rule type selected from the available options
- users
Forwarding
Control Rule Users Args - (list) You can manually select up to
4
general and/or special users. When not used it impliesAny
to apply the rule to all users. - zpa_
app_ Sequence[Forwardingsegments Control Rule Zpa App Segment Args] - (set) The list of ZPA Application Segments for which this rule is applicable. This field is applicable only for the
ZPA
Gateway forwarding method. - zpa_
application_ Forwardingsegment_ groups Control Rule Zpa Application Segment Groups Args - (set) List of ZPA Application Segment Groups for which this rule is applicable. This field is applicable only for the
ECZPA
forwarding method (used for Zscaler Cloud Connector). - zpa_
application_ Forwardingsegments Control Rule Zpa Application Segments Args - (set) List of ZPA Application Segments for which this rule is applicable. This field is applicable only for the
ECZPA
forwarding method (used for Zscaler Cloud Connector). - zpa_
gateway ForwardingControl Rule Zpa Gateway Args - (set) The ZPA Gateway for which this rule is applicable. This field is applicable only for the
ZPA
forwarding method.
- forward
Method String - The type of traffic forwarding method selected from the available options
- order Number
- (int) - The order of execution for the forwarding rule order.
- app
Service Property MapGroups - (list) - Application service groups on which this rule is applied
- departments Property Map
- (list) Apply to any number of departments When not used it implies
Any
to apply the rule to all departments. - description String
- (string) - Additional information about the forwarding rule
- dest
Addresses List<String> - ** - (list) - IP addresses and fully qualified domain names (FQDNs), if the domain has multiple destination IP addresses or if its IP addresses may change. For IP addresses, you can enter individual IP addresses, subnets, or address ranges. If adding multiple items, hit Enter after each entry.
- dest
Countries List<String> - ** - (list) destination countries for which the rule is applicable. If not set, the rule is not restricted to specific destination countries. Provide a 2 letter ISO3166 Alpha2 Country code.
- dest
Ip List<String>Categories - ** - (list) identify destinations based on the URL category of the domain, select Any to apply the rule to all categories or select the specific categories you want to control.
- dest
Ip Property MapGroups - ** - (list) Any number of destination IP address groups that you want to control with this rule.
- dest
Ipv6Groups Property Map - ** - (list) Destination IPv6 address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IPv6 address group.
- ec
Groups Property Map - (list) - Name-ID pairs of the Zscaler Cloud Connector groups to which the forwarding rule applies
- groups Property Map
- (list) You can manually select up to
8
groups. When not used it impliesAny
to apply the rule to all groups. - labels Property Map
- (list) Labels that are applicable to the rule.
- location
Groups Property Map - (Optional) You can manually select up to
32
location groups. When not used it impliesAny
to apply the rule to all location groups. - locations Property Map
- (Optional) You can manually select up to
8
locations. When not used it impliesAny
to apply the rule to all groups. - name String
- (string) The configured name of the entity
- nw
Application Property MapGroups - (list) Any number of application groups that you want to control with this rule. The service provides predefined applications that you can group, but not modify
- nw
Service Property MapGroups - (list) Any number of predefined or custom network service groups to which the rule applies.
- nw
Services Property Map - (list) When not used it applies the rule to all network services or you can select specific network services. The Zscaler firewall has predefined services and you can configure up to
1,024
additional custom services. - proxy
Gateway Property Map - (set) The proxy gateway for which the rule is applicable. This field is applicable only for the
PROXYCHAIN
forwarding method. - rank Number
- Admin rank assigned to the forwarding rule
- res
Categories List<String> - ** - (list) List of destination domain categories to which the rule applies.
- src
Ip Property MapGroups - (list) Any number of source IP address groups that you want to control with this rule.
- src
Ips List<String> - (Optional) You can enter individual IP addresses, subnets, or address ranges.
- src
Ipv6Groups Property Map - (list) Source IPv6 address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IPv6 address group.
- state String
- (string) - Indicates whether the forwarding rule is enabled or disabled. Supported values are:
ENABLED
andDISABLED
. - type String
- The rule type selected from the available options
- users Property Map
- (list) You can manually select up to
4
general and/or special users. When not used it impliesAny
to apply the rule to all users. - zpa
App List<Property Map>Segments - (set) The list of ZPA Application Segments for which this rule is applicable. This field is applicable only for the
ZPA
Gateway forwarding method. - zpa
Application Property MapSegment Groups - (set) List of ZPA Application Segment Groups for which this rule is applicable. This field is applicable only for the
ECZPA
forwarding method (used for Zscaler Cloud Connector). - zpa
Application Property MapSegments - (set) List of ZPA Application Segments for which this rule is applicable. This field is applicable only for the
ECZPA
forwarding method (used for Zscaler Cloud Connector). - zpa
Gateway Property Map - (set) The ZPA Gateway for which this rule is applicable. This field is applicable only for the
ZPA
forwarding method.
Outputs
All input properties are implicitly available as output properties. Additionally, the ForwardingControlRule resource produces the following output properties:
Look up Existing ForwardingControlRule Resource
Get an existing ForwardingControlRule resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: ForwardingControlRuleState, opts?: CustomResourceOptions): ForwardingControlRule
@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
app_service_groups: Optional[ForwardingControlRuleAppServiceGroupsArgs] = None,
departments: Optional[ForwardingControlRuleDepartmentsArgs] = None,
description: Optional[str] = None,
dest_addresses: Optional[Sequence[str]] = None,
dest_countries: Optional[Sequence[str]] = None,
dest_ip_categories: Optional[Sequence[str]] = None,
dest_ip_groups: Optional[ForwardingControlRuleDestIpGroupsArgs] = None,
dest_ipv6_groups: Optional[ForwardingControlRuleDestIpv6GroupsArgs] = None,
ec_groups: Optional[ForwardingControlRuleEcGroupsArgs] = None,
forward_method: Optional[str] = None,
groups: Optional[ForwardingControlRuleGroupsArgs] = None,
labels: Optional[ForwardingControlRuleLabelsArgs] = None,
location_groups: Optional[ForwardingControlRuleLocationGroupsArgs] = None,
locations: Optional[ForwardingControlRuleLocationsArgs] = None,
name: Optional[str] = None,
nw_application_groups: Optional[ForwardingControlRuleNwApplicationGroupsArgs] = None,
nw_service_groups: Optional[ForwardingControlRuleNwServiceGroupsArgs] = None,
nw_services: Optional[ForwardingControlRuleNwServicesArgs] = None,
order: Optional[int] = None,
proxy_gateway: Optional[ForwardingControlRuleProxyGatewayArgs] = None,
rank: Optional[int] = None,
res_categories: Optional[Sequence[str]] = None,
rule_id: Optional[int] = None,
src_ip_groups: Optional[ForwardingControlRuleSrcIpGroupsArgs] = None,
src_ips: Optional[Sequence[str]] = None,
src_ipv6_groups: Optional[ForwardingControlRuleSrcIpv6GroupsArgs] = None,
state: Optional[str] = None,
type: Optional[str] = None,
users: Optional[ForwardingControlRuleUsersArgs] = None,
zpa_app_segments: Optional[Sequence[ForwardingControlRuleZpaAppSegmentArgs]] = None,
zpa_application_segment_groups: Optional[ForwardingControlRuleZpaApplicationSegmentGroupsArgs] = None,
zpa_application_segments: Optional[ForwardingControlRuleZpaApplicationSegmentsArgs] = None,
zpa_gateway: Optional[ForwardingControlRuleZpaGatewayArgs] = None) -> ForwardingControlRule
func GetForwardingControlRule(ctx *Context, name string, id IDInput, state *ForwardingControlRuleState, opts ...ResourceOption) (*ForwardingControlRule, error)
public static ForwardingControlRule Get(string name, Input<string> id, ForwardingControlRuleState? state, CustomResourceOptions? opts = null)
public static ForwardingControlRule get(String name, Output<String> id, ForwardingControlRuleState state, CustomResourceOptions options)
Resource lookup is not supported in YAML
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- App
Service zscaler.Groups Pulumi Package. Zia. Inputs. Forwarding Control Rule App Service Groups - (list) - Application service groups on which this rule is applied
- Departments
zscaler.
Pulumi Package. Zia. Inputs. Forwarding Control Rule Departments - (list) Apply to any number of departments When not used it implies
Any
to apply the rule to all departments. - Description string
- (string) - Additional information about the forwarding rule
- Dest
Addresses List<string> - ** - (list) - IP addresses and fully qualified domain names (FQDNs), if the domain has multiple destination IP addresses or if its IP addresses may change. For IP addresses, you can enter individual IP addresses, subnets, or address ranges. If adding multiple items, hit Enter after each entry.
- Dest
Countries List<string> - ** - (list) destination countries for which the rule is applicable. If not set, the rule is not restricted to specific destination countries. Provide a 2 letter ISO3166 Alpha2 Country code.
- Dest
Ip List<string>Categories - ** - (list) identify destinations based on the URL category of the domain, select Any to apply the rule to all categories or select the specific categories you want to control.
- Dest
Ip zscaler.Groups Pulumi Package. Zia. Inputs. Forwarding Control Rule Dest Ip Groups - ** - (list) Any number of destination IP address groups that you want to control with this rule.
- Dest
Ipv6Groups zscaler.Pulumi Package. Zia. Inputs. Forwarding Control Rule Dest Ipv6Groups - ** - (list) Destination IPv6 address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IPv6 address group.
- Ec
Groups zscaler.Pulumi Package. Zia. Inputs. Forwarding Control Rule Ec Groups - (list) - Name-ID pairs of the Zscaler Cloud Connector groups to which the forwarding rule applies
- Forward
Method string - The type of traffic forwarding method selected from the available options
- Groups
zscaler.
Pulumi Package. Zia. Inputs. Forwarding Control Rule Groups - (list) You can manually select up to
8
groups. When not used it impliesAny
to apply the rule to all groups. - Labels
zscaler.
Pulumi Package. Zia. Inputs. Forwarding Control Rule Labels - (list) Labels that are applicable to the rule.
- Location
Groups zscaler.Pulumi Package. Zia. Inputs. Forwarding Control Rule Location Groups - (Optional) You can manually select up to
32
location groups. When not used it impliesAny
to apply the rule to all location groups. - Locations
zscaler.
Pulumi Package. Zia. Inputs. Forwarding Control Rule Locations - (Optional) You can manually select up to
8
locations. When not used it impliesAny
to apply the rule to all groups. - Name string
- (string) The configured name of the entity
- Nw
Application zscaler.Groups Pulumi Package. Zia. Inputs. Forwarding Control Rule Nw Application Groups - (list) Any number of application groups that you want to control with this rule. The service provides predefined applications that you can group, but not modify
- Nw
Service zscaler.Groups Pulumi Package. Zia. Inputs. Forwarding Control Rule Nw Service Groups - (list) Any number of predefined or custom network service groups to which the rule applies.
- Nw
Services zscaler.Pulumi Package. Zia. Inputs. Forwarding Control Rule Nw Services - (list) When not used it applies the rule to all network services or you can select specific network services. The Zscaler firewall has predefined services and you can configure up to
1,024
additional custom services. - Order int
- (int) - The order of execution for the forwarding rule order.
- Proxy
Gateway zscaler.Pulumi Package. Zia. Inputs. Forwarding Control Rule Proxy Gateway - (set) The proxy gateway for which the rule is applicable. This field is applicable only for the
PROXYCHAIN
forwarding method. - Rank int
- Admin rank assigned to the forwarding rule
- Res
Categories List<string> - ** - (list) List of destination domain categories to which the rule applies.
- Rule
Id int - A unique identifier assigned to the forwarding rule
- Src
Ip zscaler.Groups Pulumi Package. Zia. Inputs. Forwarding Control Rule Src Ip Groups - (list) Any number of source IP address groups that you want to control with this rule.
- Src
Ips List<string> - (Optional) You can enter individual IP addresses, subnets, or address ranges.
- Src
Ipv6Groups zscaler.Pulumi Package. Zia. Inputs. Forwarding Control Rule Src Ipv6Groups - (list) Source IPv6 address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IPv6 address group.
- State string
- (string) - Indicates whether the forwarding rule is enabled or disabled. Supported values are:
ENABLED
andDISABLED
. - Type string
- The rule type selected from the available options
- Users
zscaler.
Pulumi Package. Zia. Inputs. Forwarding Control Rule Users - (list) You can manually select up to
4
general and/or special users. When not used it impliesAny
to apply the rule to all users. - Zpa
App List<zscaler.Segments Pulumi Package. Zia. Inputs. Forwarding Control Rule Zpa App Segment> - (set) The list of ZPA Application Segments for which this rule is applicable. This field is applicable only for the
ZPA
Gateway forwarding method. - Zpa
Application zscaler.Segment Groups Pulumi Package. Zia. Inputs. Forwarding Control Rule Zpa Application Segment Groups - (set) List of ZPA Application Segment Groups for which this rule is applicable. This field is applicable only for the
ECZPA
forwarding method (used for Zscaler Cloud Connector). - Zpa
Application zscaler.Segments Pulumi Package. Zia. Inputs. Forwarding Control Rule Zpa Application Segments - (set) List of ZPA Application Segments for which this rule is applicable. This field is applicable only for the
ECZPA
forwarding method (used for Zscaler Cloud Connector). - Zpa
Gateway zscaler.Pulumi Package. Zia. Inputs. Forwarding Control Rule Zpa Gateway - (set) The ZPA Gateway for which this rule is applicable. This field is applicable only for the
ZPA
forwarding method.
- App
Service ForwardingGroups Control Rule App Service Groups Args - (list) - Application service groups on which this rule is applied
- Departments
Forwarding
Control Rule Departments Args - (list) Apply to any number of departments When not used it implies
Any
to apply the rule to all departments. - Description string
- (string) - Additional information about the forwarding rule
- Dest
Addresses []string - ** - (list) - IP addresses and fully qualified domain names (FQDNs), if the domain has multiple destination IP addresses or if its IP addresses may change. For IP addresses, you can enter individual IP addresses, subnets, or address ranges. If adding multiple items, hit Enter after each entry.
- Dest
Countries []string - ** - (list) destination countries for which the rule is applicable. If not set, the rule is not restricted to specific destination countries. Provide a 2 letter ISO3166 Alpha2 Country code.
- Dest
Ip []stringCategories - ** - (list) identify destinations based on the URL category of the domain, select Any to apply the rule to all categories or select the specific categories you want to control.
- Dest
Ip ForwardingGroups Control Rule Dest Ip Groups Args - ** - (list) Any number of destination IP address groups that you want to control with this rule.
- Dest
Ipv6Groups ForwardingControl Rule Dest Ipv6Groups Args - ** - (list) Destination IPv6 address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IPv6 address group.
- Ec
Groups ForwardingControl Rule Ec Groups Args - (list) - Name-ID pairs of the Zscaler Cloud Connector groups to which the forwarding rule applies
- Forward
Method string - The type of traffic forwarding method selected from the available options
- Groups
Forwarding
Control Rule Groups Args - (list) You can manually select up to
8
groups. When not used it impliesAny
to apply the rule to all groups. - Labels
Forwarding
Control Rule Labels Args - (list) Labels that are applicable to the rule.
- Location
Groups ForwardingControl Rule Location Groups Args - (Optional) You can manually select up to
32
location groups. When not used it impliesAny
to apply the rule to all location groups. - Locations
Forwarding
Control Rule Locations Args - (Optional) You can manually select up to
8
locations. When not used it impliesAny
to apply the rule to all groups. - Name string
- (string) The configured name of the entity
- Nw
Application ForwardingGroups Control Rule Nw Application Groups Args - (list) Any number of application groups that you want to control with this rule. The service provides predefined applications that you can group, but not modify
- Nw
Service ForwardingGroups Control Rule Nw Service Groups Args - (list) Any number of predefined or custom network service groups to which the rule applies.
- Nw
Services ForwardingControl Rule Nw Services Args - (list) When not used it applies the rule to all network services or you can select specific network services. The Zscaler firewall has predefined services and you can configure up to
1,024
additional custom services. - Order int
- (int) - The order of execution for the forwarding rule order.
- Proxy
Gateway ForwardingControl Rule Proxy Gateway Args - (set) The proxy gateway for which the rule is applicable. This field is applicable only for the
PROXYCHAIN
forwarding method. - Rank int
- Admin rank assigned to the forwarding rule
- Res
Categories []string - ** - (list) List of destination domain categories to which the rule applies.
- Rule
Id int - A unique identifier assigned to the forwarding rule
- Src
Ip ForwardingGroups Control Rule Src Ip Groups Args - (list) Any number of source IP address groups that you want to control with this rule.
- Src
Ips []string - (Optional) You can enter individual IP addresses, subnets, or address ranges.
- Src
Ipv6Groups ForwardingControl Rule Src Ipv6Groups Args - (list) Source IPv6 address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IPv6 address group.
- State string
- (string) - Indicates whether the forwarding rule is enabled or disabled. Supported values are:
ENABLED
andDISABLED
. - Type string
- The rule type selected from the available options
- Users
Forwarding
Control Rule Users Args - (list) You can manually select up to
4
general and/or special users. When not used it impliesAny
to apply the rule to all users. - Zpa
App []ForwardingSegments Control Rule Zpa App Segment Args - (set) The list of ZPA Application Segments for which this rule is applicable. This field is applicable only for the
ZPA
Gateway forwarding method. - Zpa
Application ForwardingSegment Groups Control Rule Zpa Application Segment Groups Args - (set) List of ZPA Application Segment Groups for which this rule is applicable. This field is applicable only for the
ECZPA
forwarding method (used for Zscaler Cloud Connector). - Zpa
Application ForwardingSegments Control Rule Zpa Application Segments Args - (set) List of ZPA Application Segments for which this rule is applicable. This field is applicable only for the
ECZPA
forwarding method (used for Zscaler Cloud Connector). - Zpa
Gateway ForwardingControl Rule Zpa Gateway Args - (set) The ZPA Gateway for which this rule is applicable. This field is applicable only for the
ZPA
forwarding method.
- app
Service ForwardingGroups Control Rule App Service Groups - (list) - Application service groups on which this rule is applied
- departments
Forwarding
Control Rule Departments - (list) Apply to any number of departments When not used it implies
Any
to apply the rule to all departments. - description String
- (string) - Additional information about the forwarding rule
- dest
Addresses List<String> - ** - (list) - IP addresses and fully qualified domain names (FQDNs), if the domain has multiple destination IP addresses or if its IP addresses may change. For IP addresses, you can enter individual IP addresses, subnets, or address ranges. If adding multiple items, hit Enter after each entry.
- dest
Countries List<String> - ** - (list) destination countries for which the rule is applicable. If not set, the rule is not restricted to specific destination countries. Provide a 2 letter ISO3166 Alpha2 Country code.
- dest
Ip List<String>Categories - ** - (list) identify destinations based on the URL category of the domain, select Any to apply the rule to all categories or select the specific categories you want to control.
- dest
Ip ForwardingGroups Control Rule Dest Ip Groups - ** - (list) Any number of destination IP address groups that you want to control with this rule.
- dest
Ipv6Groups ForwardingControl Rule Dest Ipv6Groups - ** - (list) Destination IPv6 address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IPv6 address group.
- ec
Groups ForwardingControl Rule Ec Groups - (list) - Name-ID pairs of the Zscaler Cloud Connector groups to which the forwarding rule applies
- forward
Method String - The type of traffic forwarding method selected from the available options
- groups
Forwarding
Control Rule Groups - (list) You can manually select up to
8
groups. When not used it impliesAny
to apply the rule to all groups. - labels
Forwarding
Control Rule Labels - (list) Labels that are applicable to the rule.
- location
Groups ForwardingControl Rule Location Groups - (Optional) You can manually select up to
32
location groups. When not used it impliesAny
to apply the rule to all location groups. - locations
Forwarding
Control Rule Locations - (Optional) You can manually select up to
8
locations. When not used it impliesAny
to apply the rule to all groups. - name String
- (string) The configured name of the entity
- nw
Application ForwardingGroups Control Rule Nw Application Groups - (list) Any number of application groups that you want to control with this rule. The service provides predefined applications that you can group, but not modify
- nw
Service ForwardingGroups Control Rule Nw Service Groups - (list) Any number of predefined or custom network service groups to which the rule applies.
- nw
Services ForwardingControl Rule Nw Services - (list) When not used it applies the rule to all network services or you can select specific network services. The Zscaler firewall has predefined services and you can configure up to
1,024
additional custom services. - order Integer
- (int) - The order of execution for the forwarding rule order.
- proxy
Gateway ForwardingControl Rule Proxy Gateway - (set) The proxy gateway for which the rule is applicable. This field is applicable only for the
PROXYCHAIN
forwarding method. - rank Integer
- Admin rank assigned to the forwarding rule
- res
Categories List<String> - ** - (list) List of destination domain categories to which the rule applies.
- rule
Id Integer - A unique identifier assigned to the forwarding rule
- src
Ip ForwardingGroups Control Rule Src Ip Groups - (list) Any number of source IP address groups that you want to control with this rule.
- src
Ips List<String> - (Optional) You can enter individual IP addresses, subnets, or address ranges.
- src
Ipv6Groups ForwardingControl Rule Src Ipv6Groups - (list) Source IPv6 address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IPv6 address group.
- state String
- (string) - Indicates whether the forwarding rule is enabled or disabled. Supported values are:
ENABLED
andDISABLED
. - type String
- The rule type selected from the available options
- users
Forwarding
Control Rule Users - (list) You can manually select up to
4
general and/or special users. When not used it impliesAny
to apply the rule to all users. - zpa
App List<ForwardingSegments Control Rule Zpa App Segment> - (set) The list of ZPA Application Segments for which this rule is applicable. This field is applicable only for the
ZPA
Gateway forwarding method. - zpa
Application ForwardingSegment Groups Control Rule Zpa Application Segment Groups - (set) List of ZPA Application Segment Groups for which this rule is applicable. This field is applicable only for the
ECZPA
forwarding method (used for Zscaler Cloud Connector). - zpa
Application ForwardingSegments Control Rule Zpa Application Segments - (set) List of ZPA Application Segments for which this rule is applicable. This field is applicable only for the
ECZPA
forwarding method (used for Zscaler Cloud Connector). - zpa
Gateway ForwardingControl Rule Zpa Gateway - (set) The ZPA Gateway for which this rule is applicable. This field is applicable only for the
ZPA
forwarding method.
- app
Service ForwardingGroups Control Rule App Service Groups - (list) - Application service groups on which this rule is applied
- departments
Forwarding
Control Rule Departments - (list) Apply to any number of departments When not used it implies
Any
to apply the rule to all departments. - description string
- (string) - Additional information about the forwarding rule
- dest
Addresses string[] - ** - (list) - IP addresses and fully qualified domain names (FQDNs), if the domain has multiple destination IP addresses or if its IP addresses may change. For IP addresses, you can enter individual IP addresses, subnets, or address ranges. If adding multiple items, hit Enter after each entry.
- dest
Countries string[] - ** - (list) destination countries for which the rule is applicable. If not set, the rule is not restricted to specific destination countries. Provide a 2 letter ISO3166 Alpha2 Country code.
- dest
Ip string[]Categories - ** - (list) identify destinations based on the URL category of the domain, select Any to apply the rule to all categories or select the specific categories you want to control.
- dest
Ip ForwardingGroups Control Rule Dest Ip Groups - ** - (list) Any number of destination IP address groups that you want to control with this rule.
- dest
Ipv6Groups ForwardingControl Rule Dest Ipv6Groups - ** - (list) Destination IPv6 address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IPv6 address group.
- ec
Groups ForwardingControl Rule Ec Groups - (list) - Name-ID pairs of the Zscaler Cloud Connector groups to which the forwarding rule applies
- forward
Method string - The type of traffic forwarding method selected from the available options
- groups
Forwarding
Control Rule Groups - (list) You can manually select up to
8
groups. When not used it impliesAny
to apply the rule to all groups. - labels
Forwarding
Control Rule Labels - (list) Labels that are applicable to the rule.
- location
Groups ForwardingControl Rule Location Groups - (Optional) You can manually select up to
32
location groups. When not used it impliesAny
to apply the rule to all location groups. - locations
Forwarding
Control Rule Locations - (Optional) You can manually select up to
8
locations. When not used it impliesAny
to apply the rule to all groups. - name string
- (string) The configured name of the entity
- nw
Application ForwardingGroups Control Rule Nw Application Groups - (list) Any number of application groups that you want to control with this rule. The service provides predefined applications that you can group, but not modify
- nw
Service ForwardingGroups Control Rule Nw Service Groups - (list) Any number of predefined or custom network service groups to which the rule applies.
- nw
Services ForwardingControl Rule Nw Services - (list) When not used it applies the rule to all network services or you can select specific network services. The Zscaler firewall has predefined services and you can configure up to
1,024
additional custom services. - order number
- (int) - The order of execution for the forwarding rule order.
- proxy
Gateway ForwardingControl Rule Proxy Gateway - (set) The proxy gateway for which the rule is applicable. This field is applicable only for the
PROXYCHAIN
forwarding method. - rank number
- Admin rank assigned to the forwarding rule
- res
Categories string[] - ** - (list) List of destination domain categories to which the rule applies.
- rule
Id number - A unique identifier assigned to the forwarding rule
- src
Ip ForwardingGroups Control Rule Src Ip Groups - (list) Any number of source IP address groups that you want to control with this rule.
- src
Ips string[] - (Optional) You can enter individual IP addresses, subnets, or address ranges.
- src
Ipv6Groups ForwardingControl Rule Src Ipv6Groups - (list) Source IPv6 address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IPv6 address group.
- state string
- (string) - Indicates whether the forwarding rule is enabled or disabled. Supported values are:
ENABLED
andDISABLED
. - type string
- The rule type selected from the available options
- users
Forwarding
Control Rule Users - (list) You can manually select up to
4
general and/or special users. When not used it impliesAny
to apply the rule to all users. - zpa
App ForwardingSegments Control Rule Zpa App Segment[] - (set) The list of ZPA Application Segments for which this rule is applicable. This field is applicable only for the
ZPA
Gateway forwarding method. - zpa
Application ForwardingSegment Groups Control Rule Zpa Application Segment Groups - (set) List of ZPA Application Segment Groups for which this rule is applicable. This field is applicable only for the
ECZPA
forwarding method (used for Zscaler Cloud Connector). - zpa
Application ForwardingSegments Control Rule Zpa Application Segments - (set) List of ZPA Application Segments for which this rule is applicable. This field is applicable only for the
ECZPA
forwarding method (used for Zscaler Cloud Connector). - zpa
Gateway ForwardingControl Rule Zpa Gateway - (set) The ZPA Gateway for which this rule is applicable. This field is applicable only for the
ZPA
forwarding method.
- app_
service_ Forwardinggroups Control Rule App Service Groups Args - (list) - Application service groups on which this rule is applied
- departments
Forwarding
Control Rule Departments Args - (list) Apply to any number of departments When not used it implies
Any
to apply the rule to all departments. - description str
- (string) - Additional information about the forwarding rule
- dest_
addresses Sequence[str] - ** - (list) - IP addresses and fully qualified domain names (FQDNs), if the domain has multiple destination IP addresses or if its IP addresses may change. For IP addresses, you can enter individual IP addresses, subnets, or address ranges. If adding multiple items, hit Enter after each entry.
- dest_
countries Sequence[str] - ** - (list) destination countries for which the rule is applicable. If not set, the rule is not restricted to specific destination countries. Provide a 2 letter ISO3166 Alpha2 Country code.
- dest_
ip_ Sequence[str]categories - ** - (list) identify destinations based on the URL category of the domain, select Any to apply the rule to all categories or select the specific categories you want to control.
- dest_
ip_ Forwardinggroups Control Rule Dest Ip Groups Args - ** - (list) Any number of destination IP address groups that you want to control with this rule.
- dest_
ipv6_ Forwardinggroups Control Rule Dest Ipv6Groups Args - ** - (list) Destination IPv6 address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IPv6 address group.
- ec_
groups ForwardingControl Rule Ec Groups Args - (list) - Name-ID pairs of the Zscaler Cloud Connector groups to which the forwarding rule applies
- forward_
method str - The type of traffic forwarding method selected from the available options
- groups
Forwarding
Control Rule Groups Args - (list) You can manually select up to
8
groups. When not used it impliesAny
to apply the rule to all groups. - labels
Forwarding
Control Rule Labels Args - (list) Labels that are applicable to the rule.
- location_
groups ForwardingControl Rule Location Groups Args - (Optional) You can manually select up to
32
location groups. When not used it impliesAny
to apply the rule to all location groups. - locations
Forwarding
Control Rule Locations Args - (Optional) You can manually select up to
8
locations. When not used it impliesAny
to apply the rule to all groups. - name str
- (string) The configured name of the entity
- nw_
application_ Forwardinggroups Control Rule Nw Application Groups Args - (list) Any number of application groups that you want to control with this rule. The service provides predefined applications that you can group, but not modify
- nw_
service_ Forwardinggroups Control Rule Nw Service Groups Args - (list) Any number of predefined or custom network service groups to which the rule applies.
- nw_
services ForwardingControl Rule Nw Services Args - (list) When not used it applies the rule to all network services or you can select specific network services. The Zscaler firewall has predefined services and you can configure up to
1,024
additional custom services. - order int
- (int) - The order of execution for the forwarding rule order.
- proxy_
gateway ForwardingControl Rule Proxy Gateway Args - (set) The proxy gateway for which the rule is applicable. This field is applicable only for the
PROXYCHAIN
forwarding method. - rank int
- Admin rank assigned to the forwarding rule
- res_
categories Sequence[str] - ** - (list) List of destination domain categories to which the rule applies.
- rule_
id int - A unique identifier assigned to the forwarding rule
- src_
ip_ Forwardinggroups Control Rule Src Ip Groups Args - (list) Any number of source IP address groups that you want to control with this rule.
- src_
ips Sequence[str] - (Optional) You can enter individual IP addresses, subnets, or address ranges.
- src_
ipv6_ Forwardinggroups Control Rule Src Ipv6Groups Args - (list) Source IPv6 address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IPv6 address group.
- state str
- (string) - Indicates whether the forwarding rule is enabled or disabled. Supported values are:
ENABLED
andDISABLED
. - type str
- The rule type selected from the available options
- users
Forwarding
Control Rule Users Args - (list) You can manually select up to
4
general and/or special users. When not used it impliesAny
to apply the rule to all users. - zpa_
app_ Sequence[Forwardingsegments Control Rule Zpa App Segment Args] - (set) The list of ZPA Application Segments for which this rule is applicable. This field is applicable only for the
ZPA
Gateway forwarding method. - zpa_
application_ Forwardingsegment_ groups Control Rule Zpa Application Segment Groups Args - (set) List of ZPA Application Segment Groups for which this rule is applicable. This field is applicable only for the
ECZPA
forwarding method (used for Zscaler Cloud Connector). - zpa_
application_ Forwardingsegments Control Rule Zpa Application Segments Args - (set) List of ZPA Application Segments for which this rule is applicable. This field is applicable only for the
ECZPA
forwarding method (used for Zscaler Cloud Connector). - zpa_
gateway ForwardingControl Rule Zpa Gateway Args - (set) The ZPA Gateway for which this rule is applicable. This field is applicable only for the
ZPA
forwarding method.
- app
Service Property MapGroups - (list) - Application service groups on which this rule is applied
- departments Property Map
- (list) Apply to any number of departments When not used it implies
Any
to apply the rule to all departments. - description String
- (string) - Additional information about the forwarding rule
- dest
Addresses List<String> - ** - (list) - IP addresses and fully qualified domain names (FQDNs), if the domain has multiple destination IP addresses or if its IP addresses may change. For IP addresses, you can enter individual IP addresses, subnets, or address ranges. If adding multiple items, hit Enter after each entry.
- dest
Countries List<String> - ** - (list) destination countries for which the rule is applicable. If not set, the rule is not restricted to specific destination countries. Provide a 2 letter ISO3166 Alpha2 Country code.
- dest
Ip List<String>Categories - ** - (list) identify destinations based on the URL category of the domain, select Any to apply the rule to all categories or select the specific categories you want to control.
- dest
Ip Property MapGroups - ** - (list) Any number of destination IP address groups that you want to control with this rule.
- dest
Ipv6Groups Property Map - ** - (list) Destination IPv6 address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IPv6 address group.
- ec
Groups Property Map - (list) - Name-ID pairs of the Zscaler Cloud Connector groups to which the forwarding rule applies
- forward
Method String - The type of traffic forwarding method selected from the available options
- groups Property Map
- (list) You can manually select up to
8
groups. When not used it impliesAny
to apply the rule to all groups. - labels Property Map
- (list) Labels that are applicable to the rule.
- location
Groups Property Map - (Optional) You can manually select up to
32
location groups. When not used it impliesAny
to apply the rule to all location groups. - locations Property Map
- (Optional) You can manually select up to
8
locations. When not used it impliesAny
to apply the rule to all groups. - name String
- (string) The configured name of the entity
- nw
Application Property MapGroups - (list) Any number of application groups that you want to control with this rule. The service provides predefined applications that you can group, but not modify
- nw
Service Property MapGroups - (list) Any number of predefined or custom network service groups to which the rule applies.
- nw
Services Property Map - (list) When not used it applies the rule to all network services or you can select specific network services. The Zscaler firewall has predefined services and you can configure up to
1,024
additional custom services. - order Number
- (int) - The order of execution for the forwarding rule order.
- proxy
Gateway Property Map - (set) The proxy gateway for which the rule is applicable. This field is applicable only for the
PROXYCHAIN
forwarding method. - rank Number
- Admin rank assigned to the forwarding rule
- res
Categories List<String> - ** - (list) List of destination domain categories to which the rule applies.
- rule
Id Number - A unique identifier assigned to the forwarding rule
- src
Ip Property MapGroups - (list) Any number of source IP address groups that you want to control with this rule.
- src
Ips List<String> - (Optional) You can enter individual IP addresses, subnets, or address ranges.
- src
Ipv6Groups Property Map - (list) Source IPv6 address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IPv6 address group.
- state String
- (string) - Indicates whether the forwarding rule is enabled or disabled. Supported values are:
ENABLED
andDISABLED
. - type String
- The rule type selected from the available options
- users Property Map
- (list) You can manually select up to
4
general and/or special users. When not used it impliesAny
to apply the rule to all users. - zpa
App List<Property Map>Segments - (set) The list of ZPA Application Segments for which this rule is applicable. This field is applicable only for the
ZPA
Gateway forwarding method. - zpa
Application Property MapSegment Groups - (set) List of ZPA Application Segment Groups for which this rule is applicable. This field is applicable only for the
ECZPA
forwarding method (used for Zscaler Cloud Connector). - zpa
Application Property MapSegments - (set) List of ZPA Application Segments for which this rule is applicable. This field is applicable only for the
ECZPA
forwarding method (used for Zscaler Cloud Connector). - zpa
Gateway Property Map - (set) The ZPA Gateway for which this rule is applicable. This field is applicable only for the
ZPA
forwarding method.
Supporting Types
ForwardingControlRuleAppServiceGroups, ForwardingControlRuleAppServiceGroupsArgs
- Ids List<int>
- (int) Identifier that uniquely identifies an entity
- Ids []int
- (int) Identifier that uniquely identifies an entity
- ids List<Integer>
- (int) Identifier that uniquely identifies an entity
- ids number[]
- (int) Identifier that uniquely identifies an entity
- ids Sequence[int]
- (int) Identifier that uniquely identifies an entity
- ids List<Number>
- (int) Identifier that uniquely identifies an entity
ForwardingControlRuleDepartments, ForwardingControlRuleDepartmentsArgs
- Ids List<int>
- (int) Identifier that uniquely identifies an entity
- Ids []int
- (int) Identifier that uniquely identifies an entity
- ids List<Integer>
- (int) Identifier that uniquely identifies an entity
- ids number[]
- (int) Identifier that uniquely identifies an entity
- ids Sequence[int]
- (int) Identifier that uniquely identifies an entity
- ids List<Number>
- (int) Identifier that uniquely identifies an entity
ForwardingControlRuleDestIpGroups, ForwardingControlRuleDestIpGroupsArgs
- Ids List<int>
- (int) Identifier that uniquely identifies an entity
- Ids []int
- (int) Identifier that uniquely identifies an entity
- ids List<Integer>
- (int) Identifier that uniquely identifies an entity
- ids number[]
- (int) Identifier that uniquely identifies an entity
- ids Sequence[int]
- (int) Identifier that uniquely identifies an entity
- ids List<Number>
- (int) Identifier that uniquely identifies an entity
ForwardingControlRuleDestIpv6Groups, ForwardingControlRuleDestIpv6GroupsArgs
- Ids List<int>
- (int) Identifier that uniquely identifies an entity
- Ids []int
- (int) Identifier that uniquely identifies an entity
- ids List<Integer>
- (int) Identifier that uniquely identifies an entity
- ids number[]
- (int) Identifier that uniquely identifies an entity
- ids Sequence[int]
- (int) Identifier that uniquely identifies an entity
- ids List<Number>
- (int) Identifier that uniquely identifies an entity
ForwardingControlRuleEcGroups, ForwardingControlRuleEcGroupsArgs
- Ids List<int>
- (int) Identifier that uniquely identifies an entity
- Ids []int
- (int) Identifier that uniquely identifies an entity
- ids List<Integer>
- (int) Identifier that uniquely identifies an entity
- ids number[]
- (int) Identifier that uniquely identifies an entity
- ids Sequence[int]
- (int) Identifier that uniquely identifies an entity
- ids List<Number>
- (int) Identifier that uniquely identifies an entity
ForwardingControlRuleGroups, ForwardingControlRuleGroupsArgs
- Ids List<int>
- (int) Identifier that uniquely identifies an entity
- Ids []int
- (int) Identifier that uniquely identifies an entity
- ids List<Integer>
- (int) Identifier that uniquely identifies an entity
- ids number[]
- (int) Identifier that uniquely identifies an entity
- ids Sequence[int]
- (int) Identifier that uniquely identifies an entity
- ids List<Number>
- (int) Identifier that uniquely identifies an entity
ForwardingControlRuleLabels, ForwardingControlRuleLabelsArgs
- Id int
- (int) Identifier that uniquely identifies an entity
- Id int
- (int) Identifier that uniquely identifies an entity
- id Integer
- (int) Identifier that uniquely identifies an entity
- id number
- (int) Identifier that uniquely identifies an entity
- id int
- (int) Identifier that uniquely identifies an entity
- id Number
- (int) Identifier that uniquely identifies an entity
ForwardingControlRuleLocationGroups, ForwardingControlRuleLocationGroupsArgs
- Ids List<int>
- (int) Identifier that uniquely identifies an entity
- Ids []int
- (int) Identifier that uniquely identifies an entity
- ids List<Integer>
- (int) Identifier that uniquely identifies an entity
- ids number[]
- (int) Identifier that uniquely identifies an entity
- ids Sequence[int]
- (int) Identifier that uniquely identifies an entity
- ids List<Number>
- (int) Identifier that uniquely identifies an entity
ForwardingControlRuleLocations, ForwardingControlRuleLocationsArgs
- Ids List<int>
- (int) Identifier that uniquely identifies an entity
- Ids []int
- (int) Identifier that uniquely identifies an entity
- ids List<Integer>
- (int) Identifier that uniquely identifies an entity
- ids number[]
- (int) Identifier that uniquely identifies an entity
- ids Sequence[int]
- (int) Identifier that uniquely identifies an entity
- ids List<Number>
- (int) Identifier that uniquely identifies an entity
ForwardingControlRuleNwApplicationGroups, ForwardingControlRuleNwApplicationGroupsArgs
- Ids List<int>
- (int) Identifier that uniquely identifies an entity
- Ids []int
- (int) Identifier that uniquely identifies an entity
- ids List<Integer>
- (int) Identifier that uniquely identifies an entity
- ids number[]
- (int) Identifier that uniquely identifies an entity
- ids Sequence[int]
- (int) Identifier that uniquely identifies an entity
- ids List<Number>
- (int) Identifier that uniquely identifies an entity
ForwardingControlRuleNwServiceGroups, ForwardingControlRuleNwServiceGroupsArgs
- Ids List<int>
- (int) Identifier that uniquely identifies an entity
- Ids []int
- (int) Identifier that uniquely identifies an entity
- ids List<Integer>
- (int) Identifier that uniquely identifies an entity
- ids number[]
- (int) Identifier that uniquely identifies an entity
- ids Sequence[int]
- (int) Identifier that uniquely identifies an entity
- ids List<Number>
- (int) Identifier that uniquely identifies an entity
ForwardingControlRuleNwServices, ForwardingControlRuleNwServicesArgs
- Ids List<int>
- (int) Identifier that uniquely identifies an entity
- Ids []int
- (int) Identifier that uniquely identifies an entity
- ids List<Integer>
- (int) Identifier that uniquely identifies an entity
- ids number[]
- (int) Identifier that uniquely identifies an entity
- ids Sequence[int]
- (int) Identifier that uniquely identifies an entity
- ids List<Number>
- (int) Identifier that uniquely identifies an entity
ForwardingControlRuleProxyGateway, ForwardingControlRuleProxyGatewayArgs
ForwardingControlRuleSrcIpGroups, ForwardingControlRuleSrcIpGroupsArgs
- Ids List<int>
- (int) Identifier that uniquely identifies an entity
- Ids []int
- (int) Identifier that uniquely identifies an entity
- ids List<Integer>
- (int) Identifier that uniquely identifies an entity
- ids number[]
- (int) Identifier that uniquely identifies an entity
- ids Sequence[int]
- (int) Identifier that uniquely identifies an entity
- ids List<Number>
- (int) Identifier that uniquely identifies an entity
ForwardingControlRuleSrcIpv6Groups, ForwardingControlRuleSrcIpv6GroupsArgs
- Ids List<int>
- (int) Identifier that uniquely identifies an entity
- Ids []int
- (int) Identifier that uniquely identifies an entity
- ids List<Integer>
- (int) Identifier that uniquely identifies an entity
- ids number[]
- (int) Identifier that uniquely identifies an entity
- ids Sequence[int]
- (int) Identifier that uniquely identifies an entity
- ids List<Number>
- (int) Identifier that uniquely identifies an entity
ForwardingControlRuleUsers, ForwardingControlRuleUsersArgs
- Ids List<int>
- (int) Identifier that uniquely identifies an entity
- Ids []int
- (int) Identifier that uniquely identifies an entity
- ids List<Integer>
- (int) Identifier that uniquely identifies an entity
- ids number[]
- (int) Identifier that uniquely identifies an entity
- ids Sequence[int]
- (int) Identifier that uniquely identifies an entity
- ids List<Number>
- (int) Identifier that uniquely identifies an entity
ForwardingControlRuleZpaAppSegment, ForwardingControlRuleZpaAppSegmentArgs
- External
Id string - (int) Identifier that uniquely identifies an entity
- Name string
- (string) The configured name of the entity
- External
Id string - (int) Identifier that uniquely identifies an entity
- Name string
- (string) The configured name of the entity
- external
Id String - (int) Identifier that uniquely identifies an entity
- name String
- (string) The configured name of the entity
- external
Id string - (int) Identifier that uniquely identifies an entity
- name string
- (string) The configured name of the entity
- external_
id str - (int) Identifier that uniquely identifies an entity
- name str
- (string) The configured name of the entity
- external
Id String - (int) Identifier that uniquely identifies an entity
- name String
- (string) The configured name of the entity
ForwardingControlRuleZpaApplicationSegmentGroups, ForwardingControlRuleZpaApplicationSegmentGroupsArgs
- Ids List<int>
- (int) Identifier that uniquely identifies an entity
- Ids []int
- (int) Identifier that uniquely identifies an entity
- ids List<Integer>
- (int) Identifier that uniquely identifies an entity
- ids number[]
- (int) Identifier that uniquely identifies an entity
- ids Sequence[int]
- (int) Identifier that uniquely identifies an entity
- ids List<Number>
- (int) Identifier that uniquely identifies an entity
ForwardingControlRuleZpaApplicationSegments, ForwardingControlRuleZpaApplicationSegmentsArgs
- Ids List<int>
- (int) Identifier that uniquely identifies an entity
- Ids []int
- (int) Identifier that uniquely identifies an entity
- ids List<Integer>
- (int) Identifier that uniquely identifies an entity
- ids number[]
- (int) Identifier that uniquely identifies an entity
- ids Sequence[int]
- (int) Identifier that uniquely identifies an entity
- ids List<Number>
- (int) Identifier that uniquely identifies an entity
ForwardingControlRuleZpaGateway, ForwardingControlRuleZpaGatewayArgs
Package Details
- Repository
- zia zscaler/pulumi-zia
- License
- MIT
- Notes
- This Pulumi package is based on the
zia
Terraform Provider.