Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add intrusion system configuration #9912

Merged
merged 2 commits into from
Jul 7, 2020
Merged

Add intrusion system configuration #9912

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
aed0af0
Add intrusion system configuration
adgrieve Jun 22, 2020
804a22b
Add ignored traffic configuration
adgrieve Jun 23, 2020
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
142 changes: 134 additions & 8 deletions ...fication/network/resource-manager/Microsoft.Network/stable/2020-06-01/firewallPolicy.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -623,9 +623,9 @@
"description": "ThreatIntel Whitelist for Firewall Policy.",
"$ref": "#/definitions/FirewallPolicyThreatIntelWhitelist"
},
"intrusionSystemMode": {
"description": "The operation mode for Intrusion system.",
"$ref": "#/definitions/FirewallPolicyIntrusionSystemMode"
"intrusionSystem": {
"description": "The configuration for Intrusion system.",
"$ref": "#/definitions/FirewallPolicyIntrusionSystem"
},
"transportSecurity": {
"description": "TLS Configuration definition.",
Expand Down Expand Up @@ -1166,15 +1166,141 @@
},
"description": "Response for ListFirewallPolicyRuleCollectionGroups API service call."
},
"FirewallPolicyIntrusionSystemMode": {
"FirewallPolicyIntrusionSystem": {
"description": "Configuration for Intrusion system mode and rules.",
"properties": {
"mode": {
"type": "string",
"description": "The operation mode for Intrusion system mode.",
"enum": [
"Off",
"Alert",
"Deny"
],
"x-ms-enum": {
"name": "FirewallPolicyIntrusionSystemMode",
"modelAsString": true
}
},
"configuration": {
"description": "The intrusion system configuration properties.",
"$ref": "#/definitions/FirewallPolicyIntrusionSystemConfiguration"
}
}
},
"FirewallPolicyIntrusionSystemConfiguration": {
"description": "The operation for configuring intrusion system.",
"properties": {
"rules": {
"type": "array",
"description": "List of specific rules states.",
"items": {
"$ref": "#/definitions/FirewallPolicyIntrusionSystemRuleSpecifications"
}
},
"ignoredTraffic": {
"type": "array",
"description": "List of rules for traffic to ignore.",
"items": {
"$ref": "#/definitions/FirewallPolicyIntrusionSystemIgnoredTrafficSpecifications"
}
},
"allowChildPolicyToIgnoreTraffic": {
"type": "boolean",
"description": "Boolean indicating whether child policies are allowed to have ignoredTraffic."
}
}
},
"FirewallPolicyIntrusionSystemRuleSpecifications": {
"properties": {
"ruleId": {
"type": "string",
"description": "Rule id (sid)."
},
"state": {
"$ref": "#/definitions/FirewallPolicyIntrusionSystemStateOptions",
"description": "The rule state."
}
},
"description": "Intrusion system rules specification states."
},
"FirewallPolicyIntrusionSystemStateOptions": {
"type": "string",
"description": "Possible rule state values.",
"enum": [
"Off",
"Alert",
"Deny"
],
"x-ms-enum": {
"name": "FirewallPolicyIntrusionSystemStateType",
"modelAsString": true
}
},
"FirewallPolicyIntrusionSystemIgnoredTrafficSpecifications": {
"properties": {
"name": {
"type": "string",
"description": "Name of the ignored traffic rule."
},
"description": {
"type": "string",
"description": "Description of the ignored traffic rule."
},
"protocol": {
"type": "string",
"$ref": "#/definitions/FirewallPolicyIntrusionSystemIgnoredTrafficProtocol",
"description": "The FirewallPolicyIntrusionSystemIgnoredTrafficProtocol."
},
"sourceAddresses": {
"type": "array",
"description": "List of source IP addresses or ranges for this rule.",
"items": {
"type": "string"
}
},
"destinationAddresses": {
"type": "array",
"description": "List of destination IP addresses or ranges for this rule.",
"items": {
"type": "string"
}
},
"destinationPorts": {
"type": "array",
"description": "List of destination ports or ranges.",
"items": {
"type": "string"
}
},
"sourceIpGroups": {
"type": "array",
"description": "List of source IpGroups for this rule.",
"items": {
"type": "string"
}
},
"destinationIpGroups": {
"type": "array",
"description": "List of destination IpGroups for this rule.",
"items": {
"type": "string"
}
}
},
"description": "Intrusion system ignored traffic specification."
},
"FirewallPolicyIntrusionSystemIgnoredTrafficProtocol": {
"type": "string",
"description": "The operation mode for Intrusion system mode.",
"description": "Possible intrusion system ignored traffic protocols.",
"enum": [
"Enabled",
"Disabled"
"TCP",
"UDP",
"ICMP",
"ANY"
],
"x-ms-enum": {
"name": "FirewallPolicyIntrusionSystemMode",
"name": "FirewallPolicyIntrusionSystemProtocol",
"modelAsString": true
}
},
Expand Down