uuid

Universally Unique Identifier (UUID; automatically assigned but can be manually reset).

uuid

name

Policy name.

string

proxy

Type of explicit proxy.

option

srcintf `<name>`

Source interface names.<br>Interface name.

string

dstintf `<name>`

Destination interface names.<br>Interface name.

string

srcaddr `<name>`

Source address objects.<br>Address name.

string

poolname `<name>`

Name of IP pool object.<br>IP pool name.

string

dstaddr `<name>`

Destination address objects.<br>Address name.

string

internet-service

Enable/disable use of Internet Services for this policy. If enabled, destination address and service are not used.

option

internet-service-negate

When enabled, Internet Services match against any internet service EXCEPT the selected Internet Service.

option

internet-service-name `<name>`

Internet Service name.<br>Internet Service name.

string

internet-service-group `<name>`

Internet Service group name.<br>Internet Service group name.

string

internet-service-custom `<name>`

Custom Internet Service name.<br>Custom Internet Service name.

string

internet-service-custom-group `<name>`

Custom Internet Service group name.<br>Custom Internet Service group name.

string

service `<name>`

Name of service objects.<br>Service name.

string

srcaddr-negate

When enabled, source addresses match against any address EXCEPT the specified source addresses.

option

dstaddr-negate

When enabled, destination addresses match against any address EXCEPT the specified destination addresses.

option

service-negate

When enabled, services match against any service EXCEPT the specified destination services.

option

action

Accept or deny traffic matching the policy parameters.

option

status

Enable/disable the active status of the policy.

option

schedule

Name of schedule object.

string

logtraffic

Enable/disable logging traffic through the policy.

option

session-ttl

TTL in seconds for sessions accepted by this policy (0 means use the system default session TTL).

integer

srcaddr6 `<name>`

IPv6 source address objects.<br>Address name.

string

dstaddr6 `<name>`

IPv6 destination address objects.<br>Address name.

string

groups `<name>`

Names of group objects.<br>Group name.

string

users `<name>`

Names of user objects.<br>Group name.

string

http-tunnel-auth

Enable/disable HTTP tunnel authentication.

option

ssh-policy-redirect

Redirect SSH traffic to matching transparent proxy policy.

option

webproxy-forward-server

Web proxy forward server name.

string

webproxy-profile

Name of web proxy profile.

string

transparent

Enable to use the IP address of the client to connect to the server.

option

webcache

Enable/disable web caching.

option

webcache-https

Enable/disable web caching for HTTPS (Requires deep-inspection enabled in ssl-ssh-profile).

option

disclaimer

Web proxy disclaimer setting: by domain, policy, or user.

option

utm-status

Enable the use of UTM profiles/sensors/lists.

option

profile-type

Determine whether the firewall policy allows security profile groups or single profiles only.

option

profile-group

Name of profile group.

string

profile-protocol-options

Name of an existing Protocol options profile.

string

ssl-ssh-profile

Name of an existing SSL SSH profile.

string

av-profile

Name of an existing Antivirus profile.

string

webfilter-profile

Name of an existing Web filter profile.

string

emailfilter-profile

Name of an existing email filter profile.

string

dlp-sensor

Name of an existing DLP sensor.

string

file-filter-profile

Name of an existing file-filter profile.

string

ips-sensor

Name of an existing IPS sensor.

string

application-list

Name of an existing Application list.

string

icap-profile

Name of an existing ICAP profile.

string

cifs-profile

Name of an existing CIFS profile.

string

waf-profile

Name of an existing Web application firewall profile.

string

ssh-filter-profile

Name of an existing SSH filter profile.

string

replacemsg-override-group

Authentication replacement message override group.

string

logtraffic-start

Enable/disable policy log traffic start.

option

comments

Optional comments.

var-string

redirect-url

Redirect URL for further explicit web proxy processing.

var-string