Azure Firewall Policy: Add New IDPS Profiles

specification/network/resource-manager/Microsoft.Network/stable/2025-05-01/examples/FirewallPolicyIDPSProfileGet.json

@@ -0,0 +1,124 @@
+{
+  "parameters": {
+    "api-version": "2025-05-01",
+    "subscriptionId": "subid",
+    "resourceGroupName": "rg1",
+    "firewallPolicyName": "firewallPolicy"
+  },
+  "responses": {
+    "200": {
+      "body": {
+        "name": "firewallPolicy",
+        "id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/firewallPolicies/firewallPolicy",
+        "type": "Microsoft.Network/firewallPolicies",
+        "etag": "w/\\00000000-0000-0000-0000-000000000000\\",
+        "location": "West US",
+        "tags": {
+          "key1": "value1"
+        },
+        "properties": {
+          "size": "0.5MB",
+          "provisioningState": "Succeeded",
+          "threatIntelMode": "Alert",
+          "threatIntelWhitelist": {
+            "ipAddresses": [
+              "20.3.4.5"
+            ],
+            "fqdns": [
+              "*.microsoft.com"
+            ]
+          },
+          "ruleCollectionGroups": [
+            {
+              "id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/firewallPolicies/firewallPolicy/ruleCollectionGroups/ruleCollectionGroup1"
+            }
+          ],
+          "insights": {
+            "isEnabled": true,
+            "retentionDays": 100,
+            "logAnalyticsResources": {
+              "workspaces": [
+                {
+                  "region": "westus",
+                  "workspaceId": {
+                    "id": "/subscriptions/subid/resourcegroups/rg1/providers/microsoft.operationalinsights/workspaces/workspace1"
+                  }
+                },
+                {
+                  "region": "eastus",
+                  "workspaceId": {
+                    "id": "/subscriptions/subid/resourcegroups/rg1/providers/microsoft.operationalinsights/workspaces/workspace2"
+                  }
+                }
+              ],
+              "defaultWorkspaceId": {
+                "id": "/subscriptions/subid/resourcegroups/rg1/providers/microsoft.operationalinsights/workspaces/defaultWorkspace"
+              }
+            }
+          },
+          "firewalls": [],
+          "snat": {
+            "privateRanges": [
+              "IANAPrivateRanges"
+            ]
+          },
+          "sql": {
+            "allowSqlRedirect": true
+          },
+          "dnsSettings": {
+            "servers": [
+              "30.3.4.5"
+            ],
+            "enableProxy": true,
+            "requireProxyForNetworkRules": false
+          },
+          "explicitProxy": {
+            "enableExplicitProxy": true,
+            "httpPort": 8087,
+            "httpsPort": 8087,
+            "enablePacFile": true,
+            "pacFilePort": 8087,
+            "pacFile": "https://tinawstorage.file.core.windows.net/?sv=2020-02-10&ss=bfqt&srt=sco&sp=rwdlacuptfx&se=2021-06-04T07:01:12Z&st=2021-06-03T23:01:12Z&sip=68.65.171.11&spr=https&sig=Plsa0RRVpGbY0IETZZOT6znOHcSro71LLTTbzquYPgs%3D"
+          },
+          "sku": {
+            "tier": "Premium"
+          },
+          "intrusionDetection": {
+            "mode": "Alert",
+            "profile": "Core",
+            "configuration": {
+              "signatureOverrides": [
+                {
+                  "id": "2525004",
+                  "mode": "Deny"
+                }
+              ],
+              "bypassTrafficSettings": [
+                {
+                  "name": "bypassRule1",
+                  "description": "Rule 1",
+                  "protocol": "TCP",
+                  "sourceAddresses": [
+                    "1.2.3.4"
+                  ],
+                  "destinationAddresses": [
+                    "5.6.7.8"
+                  ],
+                  "destinationPorts": [
+                    "*"
+                  ]
+                }
+              ]
+            }
+          },
+          "transportSecurity": {
+            "certificateAuthority": {
+              "name": "clientcert",
+              "keyVaultSecretId": "https://kv/secret"
+            }
+          }
+        }
+      }
+    }
+  }
+}