|
566 | 566 | "type": "string", |
567 | 567 | "readOnly": true, |
568 | 568 | "description": "A unique read-only string that changes whenever the resource is updated." |
569 | | - }, |
570 | | - "identity": { |
571 | | - "$ref": "./network.json#/definitions/ManagedServiceIdentity", |
572 | | - "description": "The identity of the firewall policy." |
573 | 569 | } |
574 | 570 | }, |
575 | 571 | "allOf": [ |
|
623 | 619 | "description": "ThreatIntel Whitelist for Firewall Policy.", |
624 | 620 | "$ref": "#/definitions/FirewallPolicyThreatIntelWhitelist" |
625 | 621 | }, |
626 | | - "intrusionSystem": { |
627 | | - "description": "The configuration for Intrusion system.", |
628 | | - "$ref": "#/definitions/FirewallPolicyIntrusionSystem" |
629 | | - }, |
630 | | - "transportSecurity": { |
631 | | - "description": "TLS Configuration definition.", |
632 | | - "$ref": "#/definitions/FirewallPolicyTransportSecurity" |
633 | | - }, |
634 | 622 | "dnsSettings": { |
635 | 623 | "description": "DNS Proxy Settings definition.", |
636 | 624 | "$ref": "#/definitions/DnsSettings" |
637 | 625 | } |
638 | 626 | }, |
639 | 627 | "description": "Firewall Policy definition." |
640 | 628 | }, |
641 | | - "FirewallPolicyTransportSecurity": { |
642 | | - "properties": { |
643 | | - "certificateAuthority": { |
644 | | - "$ref": "#/definitions/FirewallPolicyCertificateAuthority", |
645 | | - "description": "The CA used for intermediate CA generation." |
646 | | - }, |
647 | | - "excludedDomains": { |
648 | | - "type": "array", |
649 | | - "items": { |
650 | | - "type": "string" |
651 | | - }, |
652 | | - "description": "List of domains which are excluded from TLS termination." |
653 | | - }, |
654 | | - "trustedRootCertificates": { |
655 | | - "type": "array", |
656 | | - "items": { |
657 | | - "$ref": "#/definitions/FirewallPolicyTrustedRootCertificate", |
658 | | - "description": "A list of certificates which are to be trusted by the firewall." |
659 | | - }, |
660 | | - "description": "Certificates which are to be trusted by the firewall." |
661 | | - } |
662 | | - }, |
663 | | - "description": "Configuration needed to perform TLS termination & initiation." |
664 | | - }, |
665 | | - "FirewallPolicyTrustedRootCertificate": { |
666 | | - "properties": { |
667 | | - "properties": { |
668 | | - "x-ms-client-flatten": true, |
669 | | - "$ref": "#/definitions/FirewallPolicyTrustedRootCertificatePropertiesFormat", |
670 | | - "description": "Properties of the trusted root authorities." |
671 | | - }, |
672 | | - "name": { |
673 | | - "type": "string", |
674 | | - "description": "Name of the trusted root certificate that is unique within a firewall policy." |
675 | | - } |
676 | | - }, |
677 | | - "description": "Trusted Root certificates of a firewall policy." |
678 | | - }, |
679 | | - "FirewallPolicyTrustedRootCertificatePropertiesFormat": { |
680 | | - "properties": { |
681 | | - "keyVaultSecretId": { |
682 | | - "type": "string", |
683 | | - "description": "Secret Id of (base-64 encoded unencrypted pfx) the public certificate data stored in KeyVault." |
684 | | - } |
685 | | - }, |
686 | | - "description": "Trusted Root certificates properties for tls." |
687 | | - }, |
688 | | - "FirewallPolicyCertificateAuthority": { |
689 | | - "properties": { |
690 | | - "properties": { |
691 | | - "x-ms-client-flatten": true, |
692 | | - "$ref": "#/definitions/FirewallPolicyCertificateAuthorityPropertiesFormat", |
693 | | - "description": "Properties of the certificate authority." |
694 | | - }, |
695 | | - "name": { |
696 | | - "type": "string", |
697 | | - "description": "Name of the CA certificate." |
698 | | - } |
699 | | - }, |
700 | | - "description": "Trusted Root certificates properties for tls." |
701 | | - }, |
702 | | - "FirewallPolicyCertificateAuthorityPropertiesFormat": { |
703 | | - "properties": { |
704 | | - "keyVaultSecretId": { |
705 | | - "type": "string", |
706 | | - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault." |
707 | | - } |
708 | | - }, |
709 | | - "description": "Trusted Root certificates properties for tls." |
710 | | - }, |
711 | 629 | "FirewallPolicyRuleCollectionGroup": { |
712 | 630 | "properties": { |
713 | 631 | "properties": { |
|
900 | 818 | }, |
901 | 819 | "description": "Array of Application Protocols." |
902 | 820 | }, |
903 | | - "targetUrls": { |
904 | | - "type": "array", |
905 | | - "description": "List of Urls for this rule condition.", |
906 | | - "items": { |
907 | | - "type": "string" |
908 | | - } |
909 | | - }, |
910 | 821 | "targetFqdns": { |
911 | 822 | "type": "array", |
912 | 823 | "description": "List of FQDNs for this rule.", |
|
927 | 838 | "items": { |
928 | 839 | "type": "string" |
929 | 840 | } |
930 | | - }, |
931 | | - "terminateTLS": { |
932 | | - "type": "boolean", |
933 | | - "description": "Terminate TLS connections for this rule." |
934 | 841 | } |
935 | 842 | }, |
936 | 843 | "description": "Rule of type application." |
|
1166 | 1073 | }, |
1167 | 1074 | "description": "Response for ListFirewallPolicyRuleCollectionGroups API service call." |
1168 | 1075 | }, |
1169 | | - "FirewallPolicyIntrusionSystem": { |
1170 | | - "description": "Configuration for Intrusion system mode and rules.", |
1171 | | - "properties": { |
1172 | | - "mode": { |
1173 | | - "type": "string", |
1174 | | - "description": "The operation mode for Intrusion system mode.", |
1175 | | - "enum": [ |
1176 | | - "Off", |
1177 | | - "Alert", |
1178 | | - "Deny" |
1179 | | - ], |
1180 | | - "x-ms-enum": { |
1181 | | - "name": "FirewallPolicyIntrusionSystemMode", |
1182 | | - "modelAsString": true |
1183 | | - } |
1184 | | - }, |
1185 | | - "configuration": { |
1186 | | - "description": "The intrusion system configuration properties.", |
1187 | | - "$ref": "#/definitions/FirewallPolicyIntrusionSystemConfiguration" |
1188 | | - } |
1189 | | - } |
1190 | | - }, |
1191 | | - "FirewallPolicyIntrusionSystemConfiguration": { |
1192 | | - "description": "The operation for configuring intrusion system.", |
1193 | | - "properties": { |
1194 | | - "rules": { |
1195 | | - "type": "array", |
1196 | | - "description": "List of specific rules states.", |
1197 | | - "items": { |
1198 | | - "$ref": "#/definitions/FirewallPolicyIntrusionSystemRuleSpecifications" |
1199 | | - } |
1200 | | - }, |
1201 | | - "ignoredTraffic": { |
1202 | | - "type": "array", |
1203 | | - "description": "List of rules for traffic to ignore.", |
1204 | | - "items": { |
1205 | | - "$ref": "#/definitions/FirewallPolicyIntrusionSystemIgnoredTrafficSpecifications" |
1206 | | - } |
1207 | | - }, |
1208 | | - "allowChildPolicyToIgnoreTraffic": { |
1209 | | - "type": "boolean", |
1210 | | - "description": "Boolean indicating whether child policies are allowed to have ignoredTraffic." |
1211 | | - } |
1212 | | - } |
1213 | | - }, |
1214 | | - "FirewallPolicyIntrusionSystemRuleSpecifications": { |
1215 | | - "properties": { |
1216 | | - "ruleId": { |
1217 | | - "type": "string", |
1218 | | - "description": "Rule id (sid)." |
1219 | | - }, |
1220 | | - "state": { |
1221 | | - "$ref": "#/definitions/FirewallPolicyIntrusionSystemStateOptions", |
1222 | | - "description": "The rule state." |
1223 | | - } |
1224 | | - }, |
1225 | | - "description": "Intrusion system rules specification states." |
1226 | | - }, |
1227 | | - "FirewallPolicyIntrusionSystemStateOptions": { |
1228 | | - "type": "string", |
1229 | | - "description": "Possible rule state values.", |
1230 | | - "enum": [ |
1231 | | - "Off", |
1232 | | - "Alert", |
1233 | | - "Deny" |
1234 | | - ], |
1235 | | - "x-ms-enum": { |
1236 | | - "name": "FirewallPolicyIntrusionSystemStateType", |
1237 | | - "modelAsString": true |
1238 | | - } |
1239 | | - }, |
1240 | | - "FirewallPolicyIntrusionSystemIgnoredTrafficSpecifications": { |
1241 | | - "properties": { |
1242 | | - "name": { |
1243 | | - "type": "string", |
1244 | | - "description": "Name of the ignored traffic rule." |
1245 | | - }, |
1246 | | - "description": { |
1247 | | - "type": "string", |
1248 | | - "description": "Description of the ignored traffic rule." |
1249 | | - }, |
1250 | | - "protocol": { |
1251 | | - "type": "string", |
1252 | | - "$ref": "#/definitions/FirewallPolicyIntrusionSystemIgnoredTrafficProtocol", |
1253 | | - "description": "The FirewallPolicyIntrusionSystemIgnoredTrafficProtocol." |
1254 | | - }, |
1255 | | - "sourceAddresses": { |
1256 | | - "type": "array", |
1257 | | - "description": "List of source IP addresses or ranges for this rule.", |
1258 | | - "items": { |
1259 | | - "type": "string" |
1260 | | - } |
1261 | | - }, |
1262 | | - "destinationAddresses": { |
1263 | | - "type": "array", |
1264 | | - "description": "List of destination IP addresses or ranges for this rule.", |
1265 | | - "items": { |
1266 | | - "type": "string" |
1267 | | - } |
1268 | | - }, |
1269 | | - "destinationPorts": { |
1270 | | - "type": "array", |
1271 | | - "description": "List of destination ports or ranges.", |
1272 | | - "items": { |
1273 | | - "type": "string" |
1274 | | - } |
1275 | | - }, |
1276 | | - "sourceIpGroups": { |
1277 | | - "type": "array", |
1278 | | - "description": "List of source IpGroups for this rule.", |
1279 | | - "items": { |
1280 | | - "type": "string" |
1281 | | - } |
1282 | | - }, |
1283 | | - "destinationIpGroups": { |
1284 | | - "type": "array", |
1285 | | - "description": "List of destination IpGroups for this rule.", |
1286 | | - "items": { |
1287 | | - "type": "string" |
1288 | | - } |
1289 | | - } |
1290 | | - }, |
1291 | | - "description": "Intrusion system ignored traffic specification." |
1292 | | - }, |
1293 | | - "FirewallPolicyIntrusionSystemIgnoredTrafficProtocol": { |
1294 | | - "type": "string", |
1295 | | - "description": "Possible intrusion system ignored traffic protocols.", |
1296 | | - "enum": [ |
1297 | | - "TCP", |
1298 | | - "UDP", |
1299 | | - "ICMP", |
1300 | | - "ANY" |
1301 | | - ], |
1302 | | - "x-ms-enum": { |
1303 | | - "name": "FirewallPolicyIntrusionSystemProtocol", |
1304 | | - "modelAsString": true |
1305 | | - } |
1306 | | - }, |
1307 | 1076 | "FirewallPolicyThreatIntelWhitelist": { |
1308 | 1077 | "description": "ThreatIntel Whitelist for Firewall Policy.", |
1309 | 1078 | "x-ms-discriminator-value": "FirewallPolicyThreatIntelWhitelist", |
|
0 commit comments