Docs Packages
  1. Packages
  2. Zscaler Internet Access (ZIA)
  3. API Docs
  4. ForwardingControlRule
Zscaler Internet Access v0.0.6 published on Wednesday, Apr 10, 2024 by Zscaler
zscaler/pulumi-zia

zia.ForwardingControlRule

Explore with Pulumi AI

zia logo
Zscaler Internet Access v0.0.6 published on Wednesday, Apr 10, 2024 by Zscaler
zscaler/pulumi-zia

    Import

    Zscaler offers a dedicated tool called Zscaler-Terraformer to allow the automated import of ZIA configurations into Terraform-compliant HashiCorp Configuration Language.

    Visit

    zia_forwarding_control_rule can be imported by using <RULE ID> or <RULE NAME> as the import ID.

    For example:

    $ pulumi import zia:index/forwardingControlRule:ForwardingControlRule example <rule_id>

    or

    $ pulumi import zia:index/forwardingControlRule:ForwardingControlRule example <rule_name>

    Create ForwardingControlRule Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new ForwardingControlRule(name: string, args: ForwardingControlRuleArgs, opts?: CustomResourceOptions);
    @overload
def ForwardingControlRule(resource_name: str,
                          args: ForwardingControlRuleArgs,
                          opts: Optional[ResourceOptions] = None)

@overload
def ForwardingControlRule(resource_name: str,
                          opts: Optional[ResourceOptions] = None,
                          forward_method: Optional[str] = None,
                          order: Optional[int] = None,
                          nw_service_groups: Optional[ForwardingControlRuleNwServiceGroupsArgs] = None,
                          dest_countries: Optional[Sequence[str]] = None,
                          nw_services: Optional[ForwardingControlRuleNwServicesArgs] = None,
                          dest_ip_categories: Optional[Sequence[str]] = None,
                          dest_ip_groups: Optional[ForwardingControlRuleDestIpGroupsArgs] = None,
                          dest_ipv6_groups: Optional[ForwardingControlRuleDestIpv6GroupsArgs] = None,
                          ec_groups: Optional[ForwardingControlRuleEcGroupsArgs] = None,
                          description: Optional[str] = None,
                          groups: Optional[ForwardingControlRuleGroupsArgs] = None,
                          labels: Optional[ForwardingControlRuleLabelsArgs] = None,
                          location_groups: Optional[ForwardingControlRuleLocationGroupsArgs] = None,
                          locations: Optional[ForwardingControlRuleLocationsArgs] = None,
                          name: Optional[str] = None,
                          nw_application_groups: Optional[ForwardingControlRuleNwApplicationGroupsArgs] = None,
                          zpa_gateway: Optional[ForwardingControlRuleZpaGatewayArgs] = None,
                          dest_addresses: Optional[Sequence[str]] = None,
                          departments: Optional[ForwardingControlRuleDepartmentsArgs] = None,
                          proxy_gateway: Optional[ForwardingControlRuleProxyGatewayArgs] = None,
                          rank: Optional[int] = None,
                          res_categories: Optional[Sequence[str]] = None,
                          src_ip_groups: Optional[ForwardingControlRuleSrcIpGroupsArgs] = None,
                          src_ips: Optional[Sequence[str]] = None,
                          src_ipv6_groups: Optional[ForwardingControlRuleSrcIpv6GroupsArgs] = None,
                          state: Optional[str] = None,
                          type: Optional[str] = None,
                          users: Optional[ForwardingControlRuleUsersArgs] = None,
                          zpa_app_segments: Optional[Sequence[ForwardingControlRuleZpaAppSegmentArgs]] = None,
                          zpa_application_segment_groups: Optional[ForwardingControlRuleZpaApplicationSegmentGroupsArgs] = None,
                          zpa_application_segments: Optional[ForwardingControlRuleZpaApplicationSegmentsArgs] = None,
                          app_service_groups: Optional[ForwardingControlRuleAppServiceGroupsArgs] = None)
    func NewForwardingControlRule(ctx *Context, name string, args ForwardingControlRuleArgs, opts ...ResourceOption) (*ForwardingControlRule, error)
    public ForwardingControlRule(string name, ForwardingControlRuleArgs args, CustomResourceOptions? opts = null)
    public ForwardingControlRule(String name, ForwardingControlRuleArgs args)
public ForwardingControlRule(String name, ForwardingControlRuleArgs args, CustomResourceOptions options)

    type: zia:ForwardingControlRule
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args ForwardingControlRuleArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args ForwardingControlRuleArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args ForwardingControlRuleArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args ForwardingControlRuleArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args ForwardingControlRuleArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var forwardingControlRuleResource = new Zia.ForwardingControlRule("forwardingControlRuleResource", new()
{
    ForwardMethod = "string",
    Order = 0,
    NwServiceGroups = new Zia.Inputs.ForwardingControlRuleNwServiceGroupsArgs
    {
        Ids = new[]
        {
            0,
        },
    },
    DestCountries = new[]
    {
        "string",
    },
    NwServices = new Zia.Inputs.ForwardingControlRuleNwServicesArgs
    {
        Ids = new[]
        {
            0,
        },
    },
    DestIpCategories = new[]
    {
        "string",
    },
    DestIpGroups = new Zia.Inputs.ForwardingControlRuleDestIpGroupsArgs
    {
        Ids = new[]
        {
            0,
        },
    },
    DestIpv6Groups = new Zia.Inputs.ForwardingControlRuleDestIpv6GroupsArgs
    {
        Ids = new[]
        {
            0,
        },
    },
    EcGroups = new Zia.Inputs.ForwardingControlRuleEcGroupsArgs
    {
        Ids = new[]
        {
            0,
        },
    },
    Description = "string",
    Groups = new Zia.Inputs.ForwardingControlRuleGroupsArgs
    {
        Ids = new[]
        {
            0,
        },
    },
    Labels = new Zia.Inputs.ForwardingControlRuleLabelsArgs
    {
        Id = 0,
    },
    LocationGroups = new Zia.Inputs.ForwardingControlRuleLocationGroupsArgs
    {
        Ids = new[]
        {
            0,
        },
    },
    Locations = new Zia.Inputs.ForwardingControlRuleLocationsArgs
    {
        Ids = new[]
        {
            0,
        },
    },
    Name = "string",
    NwApplicationGroups = new Zia.Inputs.ForwardingControlRuleNwApplicationGroupsArgs
    {
        Ids = new[]
        {
            0,
        },
    },
    ZpaGateway = new Zia.Inputs.ForwardingControlRuleZpaGatewayArgs
    {
        Id = 0,
        Name = "string",
    },
    DestAddresses = new[]
    {
        "string",
    },
    Departments = new Zia.Inputs.ForwardingControlRuleDepartmentsArgs
    {
        Ids = new[]
        {
            0,
        },
    },
    ProxyGateway = new Zia.Inputs.ForwardingControlRuleProxyGatewayArgs
    {
        Id = 0,
        Name = "string",
    },
    Rank = 0,
    ResCategories = new[]
    {
        "string",
    },
    SrcIpGroups = new Zia.Inputs.ForwardingControlRuleSrcIpGroupsArgs
    {
        Ids = new[]
        {
            0,
        },
    },
    SrcIps = new[]
    {
        "string",
    },
    SrcIpv6Groups = new Zia.Inputs.ForwardingControlRuleSrcIpv6GroupsArgs
    {
        Ids = new[]
        {
            0,
        },
    },
    State = "string",
    Type = "string",
    Users = new Zia.Inputs.ForwardingControlRuleUsersArgs
    {
        Ids = new[]
        {
            0,
        },
    },
    ZpaAppSegments = new[]
    {
        new Zia.Inputs.ForwardingControlRuleZpaAppSegmentArgs
        {
            ExternalId = "string",
            Name = "string",
        },
    },
    ZpaApplicationSegmentGroups = new Zia.Inputs.ForwardingControlRuleZpaApplicationSegmentGroupsArgs
    {
        Ids = new[]
        {
            0,
        },
    },
    ZpaApplicationSegments = new Zia.Inputs.ForwardingControlRuleZpaApplicationSegmentsArgs
    {
        Ids = new[]
        {
            0,
        },
    },
    AppServiceGroups = new Zia.Inputs.ForwardingControlRuleAppServiceGroupsArgs
    {
        Ids = new[]
        {
            0,
        },
    },
});

    example, err := zia.NewForwardingControlRule(ctx, "forwardingControlRuleResource", &zia.ForwardingControlRuleArgs{
	ForwardMethod: pulumi.String("string"),
	Order:         pulumi.Int(0),
	NwServiceGroups: &zia.ForwardingControlRuleNwServiceGroupsArgs{
		Ids: pulumi.IntArray{
			pulumi.Int(0),
		},
	},
	DestCountries: pulumi.StringArray{
		pulumi.String("string"),
	},
	NwServices: &zia.ForwardingControlRuleNwServicesArgs{
		Ids: pulumi.IntArray{
			pulumi.Int(0),
		},
	},
	DestIpCategories: pulumi.StringArray{
		pulumi.String("string"),
	},
	DestIpGroups: &zia.ForwardingControlRuleDestIpGroupsArgs{
		Ids: pulumi.IntArray{
			pulumi.Int(0),
		},
	},
	DestIpv6Groups: &zia.ForwardingControlRuleDestIpv6GroupsArgs{
		Ids: pulumi.IntArray{
			pulumi.Int(0),
		},
	},
	EcGroups: &zia.ForwardingControlRuleEcGroupsArgs{
		Ids: pulumi.IntArray{
			pulumi.Int(0),
		},
	},
	Description: pulumi.String("string"),
	Groups: &zia.ForwardingControlRuleGroupsArgs{
		Ids: pulumi.IntArray{
			pulumi.Int(0),
		},
	},
	Labels: &zia.ForwardingControlRuleLabelsArgs{
		Id: pulumi.Int(0),
	},
	LocationGroups: &zia.ForwardingControlRuleLocationGroupsArgs{
		Ids: pulumi.IntArray{
			pulumi.Int(0),
		},
	},
	Locations: &zia.ForwardingControlRuleLocationsArgs{
		Ids: pulumi.IntArray{
			pulumi.Int(0),
		},
	},
	Name: pulumi.String("string"),
	NwApplicationGroups: &zia.ForwardingControlRuleNwApplicationGroupsArgs{
		Ids: pulumi.IntArray{
			pulumi.Int(0),
		},
	},
	ZpaGateway: &zia.ForwardingControlRuleZpaGatewayArgs{
		Id:   pulumi.Int(0),
		Name: pulumi.String("string"),
	},
	DestAddresses: pulumi.StringArray{
		pulumi.String("string"),
	},
	Departments: &zia.ForwardingControlRuleDepartmentsArgs{
		Ids: pulumi.IntArray{
			pulumi.Int(0),
		},
	},
	ProxyGateway: &zia.ForwardingControlRuleProxyGatewayArgs{
		Id:   pulumi.Int(0),
		Name: pulumi.String("string"),
	},
	Rank: pulumi.Int(0),
	ResCategories: pulumi.StringArray{
		pulumi.String("string"),
	},
	SrcIpGroups: &zia.ForwardingControlRuleSrcIpGroupsArgs{
		Ids: pulumi.IntArray{
			pulumi.Int(0),
		},
	},
	SrcIps: pulumi.StringArray{
		pulumi.String("string"),
	},
	SrcIpv6Groups: &zia.ForwardingControlRuleSrcIpv6GroupsArgs{
		Ids: pulumi.IntArray{
			pulumi.Int(0),
		},
	},
	State: pulumi.String("string"),
	Type:  pulumi.String("string"),
	Users: &zia.ForwardingControlRuleUsersArgs{
		Ids: pulumi.IntArray{
			pulumi.Int(0),
		},
	},
	ZpaAppSegments: zia.ForwardingControlRuleZpaAppSegmentArray{
		&zia.ForwardingControlRuleZpaAppSegmentArgs{
			ExternalId: pulumi.String("string"),
			Name:       pulumi.String("string"),
		},
	},
	ZpaApplicationSegmentGroups: &zia.ForwardingControlRuleZpaApplicationSegmentGroupsArgs{
		Ids: pulumi.IntArray{
			pulumi.Int(0),
		},
	},
	ZpaApplicationSegments: &zia.ForwardingControlRuleZpaApplicationSegmentsArgs{
		Ids: pulumi.IntArray{
			pulumi.Int(0),
		},
	},
	AppServiceGroups: &zia.ForwardingControlRuleAppServiceGroupsArgs{
		Ids: pulumi.IntArray{
			pulumi.Int(0),
		},
	},
})

    var forwardingControlRuleResource = new ForwardingControlRule("forwardingControlRuleResource", ForwardingControlRuleArgs.builder()
    .forwardMethod("string")
    .order(0)
    .nwServiceGroups(ForwardingControlRuleNwServiceGroupsArgs.builder()
        .ids(0)
        .build())
    .destCountries("string")
    .nwServices(ForwardingControlRuleNwServicesArgs.builder()
        .ids(0)
        .build())
    .destIpCategories("string")
    .destIpGroups(ForwardingControlRuleDestIpGroupsArgs.builder()
        .ids(0)
        .build())
    .destIpv6Groups(ForwardingControlRuleDestIpv6GroupsArgs.builder()
        .ids(0)
        .build())
    .ecGroups(ForwardingControlRuleEcGroupsArgs.builder()
        .ids(0)
        .build())
    .description("string")
    .groups(ForwardingControlRuleGroupsArgs.builder()
        .ids(0)
        .build())
    .labels(ForwardingControlRuleLabelsArgs.builder()
        .id(0)
        .build())
    .locationGroups(ForwardingControlRuleLocationGroupsArgs.builder()
        .ids(0)
        .build())
    .locations(ForwardingControlRuleLocationsArgs.builder()
        .ids(0)
        .build())
    .name("string")
    .nwApplicationGroups(ForwardingControlRuleNwApplicationGroupsArgs.builder()
        .ids(0)
        .build())
    .zpaGateway(ForwardingControlRuleZpaGatewayArgs.builder()
        .id(0)
        .name("string")
        .build())
    .destAddresses("string")
    .departments(ForwardingControlRuleDepartmentsArgs.builder()
        .ids(0)
        .build())
    .proxyGateway(ForwardingControlRuleProxyGatewayArgs.builder()
        .id(0)
        .name("string")
        .build())
    .rank(0)
    .resCategories("string")
    .srcIpGroups(ForwardingControlRuleSrcIpGroupsArgs.builder()
        .ids(0)
        .build())
    .srcIps("string")
    .srcIpv6Groups(ForwardingControlRuleSrcIpv6GroupsArgs.builder()
        .ids(0)
        .build())
    .state("string")
    .type("string")
    .users(ForwardingControlRuleUsersArgs.builder()
        .ids(0)
        .build())
    .zpaAppSegments(ForwardingControlRuleZpaAppSegmentArgs.builder()
        .externalId("string")
        .name("string")
        .build())
    .zpaApplicationSegmentGroups(ForwardingControlRuleZpaApplicationSegmentGroupsArgs.builder()
        .ids(0)
        .build())
    .zpaApplicationSegments(ForwardingControlRuleZpaApplicationSegmentsArgs.builder()
        .ids(0)
        .build())
    .appServiceGroups(ForwardingControlRuleAppServiceGroupsArgs.builder()
        .ids(0)
        .build())
    .build());

    forwarding_control_rule_resource = zia.ForwardingControlRule("forwardingControlRuleResource",
    forward_method="string",
    order=0,
    nw_service_groups=zia.ForwardingControlRuleNwServiceGroupsArgs(
        ids=[0],
    ),
    dest_countries=["string"],
    nw_services=zia.ForwardingControlRuleNwServicesArgs(
        ids=[0],
    ),
    dest_ip_categories=["string"],
    dest_ip_groups=zia.ForwardingControlRuleDestIpGroupsArgs(
        ids=[0],
    ),
    dest_ipv6_groups=zia.ForwardingControlRuleDestIpv6GroupsArgs(
        ids=[0],
    ),
    ec_groups=zia.ForwardingControlRuleEcGroupsArgs(
        ids=[0],
    ),
    description="string",
    groups=zia.ForwardingControlRuleGroupsArgs(
        ids=[0],
    ),
    labels=zia.ForwardingControlRuleLabelsArgs(
        id=0,
    ),
    location_groups=zia.ForwardingControlRuleLocationGroupsArgs(
        ids=[0],
    ),
    locations=zia.ForwardingControlRuleLocationsArgs(
        ids=[0],
    ),
    name="string",
    nw_application_groups=zia.ForwardingControlRuleNwApplicationGroupsArgs(
        ids=[0],
    ),
    zpa_gateway=zia.ForwardingControlRuleZpaGatewayArgs(
        id=0,
        name="string",
    ),
    dest_addresses=["string"],
    departments=zia.ForwardingControlRuleDepartmentsArgs(
        ids=[0],
    ),
    proxy_gateway=zia.ForwardingControlRuleProxyGatewayArgs(
        id=0,
        name="string",
    ),
    rank=0,
    res_categories=["string"],
    src_ip_groups=zia.ForwardingControlRuleSrcIpGroupsArgs(
        ids=[0],
    ),
    src_ips=["string"],
    src_ipv6_groups=zia.ForwardingControlRuleSrcIpv6GroupsArgs(
        ids=[0],
    ),
    state="string",
    type="string",
    users=zia.ForwardingControlRuleUsersArgs(
        ids=[0],
    ),
    zpa_app_segments=[zia.ForwardingControlRuleZpaAppSegmentArgs(
        external_id="string",
        name="string",
    )],
    zpa_application_segment_groups=zia.ForwardingControlRuleZpaApplicationSegmentGroupsArgs(
        ids=[0],
    ),
    zpa_application_segments=zia.ForwardingControlRuleZpaApplicationSegmentsArgs(
        ids=[0],
    ),
    app_service_groups=zia.ForwardingControlRuleAppServiceGroupsArgs(
        ids=[0],
    ))

    const forwardingControlRuleResource = new zia.ForwardingControlRule("forwardingControlRuleResource", {
    forwardMethod: "string",
    order: 0,
    nwServiceGroups: {
        ids: [0],
    },
    destCountries: ["string"],
    nwServices: {
        ids: [0],
    },
    destIpCategories: ["string"],
    destIpGroups: {
        ids: [0],
    },
    destIpv6Groups: {
        ids: [0],
    },
    ecGroups: {
        ids: [0],
    },
    description: "string",
    groups: {
        ids: [0],
    },
    labels: {
        id: 0,
    },
    locationGroups: {
        ids: [0],
    },
    locations: {
        ids: [0],
    },
    name: "string",
    nwApplicationGroups: {
        ids: [0],
    },
    zpaGateway: {
        id: 0,
        name: "string",
    },
    destAddresses: ["string"],
    departments: {
        ids: [0],
    },
    proxyGateway: {
        id: 0,
        name: "string",
    },
    rank: 0,
    resCategories: ["string"],
    srcIpGroups: {
        ids: [0],
    },
    srcIps: ["string"],
    srcIpv6Groups: {
        ids: [0],
    },
    state: "string",
    type: "string",
    users: {
        ids: [0],
    },
    zpaAppSegments: [{
        externalId: "string",
        name: "string",
    }],
    zpaApplicationSegmentGroups: {
        ids: [0],
    },
    zpaApplicationSegments: {
        ids: [0],
    },
    appServiceGroups: {
        ids: [0],
    },
});

    type: zia:ForwardingControlRule
properties:
    appServiceGroups:
        ids:
            - 0
    departments:
        ids:
            - 0
    description: string
    destAddresses:
        - string
    destCountries:
        - string
    destIpCategories:
        - string
    destIpGroups:
        ids:
            - 0
    destIpv6Groups:
        ids:
            - 0
    ecGroups:
        ids:
            - 0
    forwardMethod: string
    groups:
        ids:
            - 0
    labels:
        id: 0
    locationGroups:
        ids:
            - 0
    locations:
        ids:
            - 0
    name: string
    nwApplicationGroups:
        ids:
            - 0
    nwServiceGroups:
        ids:
            - 0
    nwServices:
        ids:
            - 0
    order: 0
    proxyGateway:
        id: 0
        name: string
    rank: 0
    resCategories:
        - string
    srcIpGroups:
        ids:
            - 0
    srcIps:
        - string
    srcIpv6Groups:
        ids:
            - 0
    state: string
    type: string
    users:
        ids:
            - 0
    zpaAppSegments:
        - externalId: string
          name: string
    zpaApplicationSegmentGroups:
        ids:
            - 0
    zpaApplicationSegments:
        ids:
            - 0
    zpaGateway:
        id: 0
        name: string

    ForwardingControlRule Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    The ForwardingControlRule resource accepts the following input properties:

    ForwardMethod string
    The type of traffic forwarding method selected from the available options.
    Order int
    Policy rules are evaluated in ascending numerical order (Rule 1 before Rule 2, and so on), and the Rule Order reflects this rule's place in the order.
    AppServiceGroups zscaler.PulumiPackage.Zia.Inputs.ForwardingControlRuleAppServiceGroups
    (list) - Application service groups on which this rule is applied
    Departments zscaler.PulumiPackage.Zia.Inputs.ForwardingControlRuleDepartments
    (list) Apply to any number of departments When not used it implies Any to apply the rule to all departments.
    Description string
    (string) - Additional information about the forwarding rule
    DestAddresses List<string>
    ** - (list) - IP addresses and fully qualified domain names (FQDNs), if the domain has multiple destination IP addresses or if its IP addresses may change. For IP addresses, you can enter individual IP addresses, subnets, or address ranges. If adding multiple items, hit Enter after each entry.
    DestCountries List<string>
    ** - (list) estination countries for which the rule is applicable. If not set, the rule is not restricted to specific destination countries. Provide a 2 letter ISO3166 Alpha2 Country code.
    DestIpCategories List<string>
    ** - (list) identify destinations based on the URL category of the domain, select Any to apply the rule to all categories or select the specific categories you want to control.
    DestIpGroups zscaler.PulumiPackage.Zia.Inputs.ForwardingControlRuleDestIpGroups
    ** - (list) Any number of destination IP address groups that you want to control with this rule.
    DestIpv6Groups zscaler.PulumiPackage.Zia.Inputs.ForwardingControlRuleDestIpv6Groups
    ** - (list) Destination IPv6 address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IPv6 address group.
    EcGroups zscaler.PulumiPackage.Zia.Inputs.ForwardingControlRuleEcGroups
    (list) - Name-ID pairs of the Zscaler Cloud Connector groups to which the forwarding rule applies
    Groups zscaler.PulumiPackage.Zia.Inputs.ForwardingControlRuleGroups
    (list) You can manually select up to 8 groups. When not used it implies Any to apply the rule to all groups.
    Labels zscaler.PulumiPackage.Zia.Inputs.ForwardingControlRuleLabels
    (list) Labels that are applicable to the rule.
    LocationGroups zscaler.PulumiPackage.Zia.Inputs.ForwardingControlRuleLocationGroups
    (Optional) You can manually select up to 32 location groups. When not used it implies Any to apply the rule to all location groups.
    Locations zscaler.PulumiPackage.Zia.Inputs.ForwardingControlRuleLocations
    (Optional) You can manually select up to 8 locations. When not used it implies Any to apply the rule to all groups.
    Name string
    Name of the Firewall Filtering policy rule
    NwApplicationGroups zscaler.PulumiPackage.Zia.Inputs.ForwardingControlRuleNwApplicationGroups
    (list) Any number of application groups that you want to control with this rule. The service provides predefined applications that you can group, but not modify
    NwServiceGroups zscaler.PulumiPackage.Zia.Inputs.ForwardingControlRuleNwServiceGroups
    (list) Any number of predefined or custom network service groups to which the rule applies.
    NwServices zscaler.PulumiPackage.Zia.Inputs.ForwardingControlRuleNwServices
    (list) When not used it applies the rule to all network services or you can select specific network services. The Zscaler firewall has predefined services and you can configure up to 1,024 additional custom services.
    ProxyGateway zscaler.PulumiPackage.Zia.Inputs.ForwardingControlRuleProxyGateway
    (set) The proxy gateway for which the rule is applicable. This field is applicable only for the PROXYCHAIN forwarding method.
    Rank int
    Admin rank assigned to the forwarding rule
    ResCategories List<string>
    ** - (list) List of destination domain categories to which the rule applies.
    SrcIpGroups zscaler.PulumiPackage.Zia.Inputs.ForwardingControlRuleSrcIpGroups
    (list) Any number of source IP address groups that you want to control with this rule.
    SrcIps List<string>
    (Optional) You can enter individual IP addresses, subnets, or address ranges.
    SrcIpv6Groups zscaler.PulumiPackage.Zia.Inputs.ForwardingControlRuleSrcIpv6Groups
    (list) Source IPv6 address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IPv6 address group.
    State string
    (string) - Indicates whether the forwarding rule is enabled or disabled. Supported values are: ENABLED and DISABLED.
    Type string
    The rule type selected from the available options. Supported Values: FORWARDING
    Users zscaler.PulumiPackage.Zia.Inputs.ForwardingControlRuleUsers
    (list) You can manually select up to 4 general and/or special users. When not used it implies Any to apply the rule to all users.
    ZpaAppSegments List<zscaler.PulumiPackage.Zia.Inputs.ForwardingControlRuleZpaAppSegment>
    (set) The list of ZPA Application Segments for which this rule is applicable. This field is applicable only for the ZPA Gateway forwarding method.
    ZpaApplicationSegmentGroups zscaler.PulumiPackage.Zia.Inputs.ForwardingControlRuleZpaApplicationSegmentGroups
    (set) List of ZPA Application Segment Groups for which this rule is applicable. This field is applicable only for the ECZPA forwarding method (used for Zscaler Cloud Connector).
    ZpaApplicationSegments zscaler.PulumiPackage.Zia.Inputs.ForwardingControlRuleZpaApplicationSegments
    (set) List of ZPA Application Segments for which this rule is applicable. This field is applicable only for the ECZPA forwarding method (used for Zscaler Cloud Connector).
    ZpaGateway zscaler.PulumiPackage.Zia.Inputs.ForwardingControlRuleZpaGateway
    (set) The ZPA Gateway for which this rule is applicable. This field is applicable only for the ZPA forwarding method.
    ForwardMethod string
    The type of traffic forwarding method selected from the available options.
    Order int
    Policy rules are evaluated in ascending numerical order (Rule 1 before Rule 2, and so on), and the Rule Order reflects this rule's place in the order.
    AppServiceGroups ForwardingControlRuleAppServiceGroupsArgs
    (list) - Application service groups on which this rule is applied
    Departments ForwardingControlRuleDepartmentsArgs
    (list) Apply to any number of departments When not used it implies Any to apply the rule to all departments.
    Description string
    (string) - Additional information about the forwarding rule
    DestAddresses []string
    ** - (list) - IP addresses and fully qualified domain names (FQDNs), if the domain has multiple destination IP addresses or if its IP addresses may change. For IP addresses, you can enter individual IP addresses, subnets, or address ranges. If adding multiple items, hit Enter after each entry.
    DestCountries []string
    ** - (list) estination countries for which the rule is applicable. If not set, the rule is not restricted to specific destination countries. Provide a 2 letter ISO3166 Alpha2 Country code.
    DestIpCategories []string
    ** - (list) identify destinations based on the URL category of the domain, select Any to apply the rule to all categories or select the specific categories you want to control.
    DestIpGroups ForwardingControlRuleDestIpGroupsArgs
    ** - (list) Any number of destination IP address groups that you want to control with this rule.
    DestIpv6Groups ForwardingControlRuleDestIpv6GroupsArgs
    ** - (list) Destination IPv6 address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IPv6 address group.
    EcGroups ForwardingControlRuleEcGroupsArgs
    (list) - Name-ID pairs of the Zscaler Cloud Connector groups to which the forwarding rule applies
    Groups ForwardingControlRuleGroupsArgs
    (list) You can manually select up to 8 groups. When not used it implies Any to apply the rule to all groups.
    Labels ForwardingControlRuleLabelsArgs
    (list) Labels that are applicable to the rule.
    LocationGroups ForwardingControlRuleLocationGroupsArgs
    (Optional) You can manually select up to 32 location groups. When not used it implies Any to apply the rule to all location groups.
    Locations ForwardingControlRuleLocationsArgs
    (Optional) You can manually select up to 8 locations. When not used it implies Any to apply the rule to all groups.
    Name string
    Name of the Firewall Filtering policy rule
    NwApplicationGroups ForwardingControlRuleNwApplicationGroupsArgs
    (list) Any number of application groups that you want to control with this rule. The service provides predefined applications that you can group, but not modify
    NwServiceGroups ForwardingControlRuleNwServiceGroupsArgs
    (list) Any number of predefined or custom network service groups to which the rule applies.
    NwServices ForwardingControlRuleNwServicesArgs
    (list) When not used it applies the rule to all network services or you can select specific network services. The Zscaler firewall has predefined services and you can configure up to 1,024 additional custom services.
    ProxyGateway ForwardingControlRuleProxyGatewayArgs
    (set) The proxy gateway for which the rule is applicable. This field is applicable only for the PROXYCHAIN forwarding method.
    Rank int
    Admin rank assigned to the forwarding rule
    ResCategories []string
    ** - (list) List of destination domain categories to which the rule applies.
    SrcIpGroups ForwardingControlRuleSrcIpGroupsArgs
    (list) Any number of source IP address groups that you want to control with this rule.
    SrcIps []string
    (Optional) You can enter individual IP addresses, subnets, or address ranges.
    SrcIpv6Groups ForwardingControlRuleSrcIpv6GroupsArgs
    (list) Source IPv6 address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IPv6 address group.
    State string
    (string) - Indicates whether the forwarding rule is enabled or disabled. Supported values are: ENABLED and DISABLED.
    Type string
    The rule type selected from the available options. Supported Values: FORWARDING
    Users ForwardingControlRuleUsersArgs
    (list) You can manually select up to 4 general and/or special users. When not used it implies Any to apply the rule to all users.
    ZpaAppSegments []ForwardingControlRuleZpaAppSegmentArgs
    (set) The list of ZPA Application Segments for which this rule is applicable. This field is applicable only for the ZPA Gateway forwarding method.
    ZpaApplicationSegmentGroups ForwardingControlRuleZpaApplicationSegmentGroupsArgs
    (set) List of ZPA Application Segment Groups for which this rule is applicable. This field is applicable only for the ECZPA forwarding method (used for Zscaler Cloud Connector).
    ZpaApplicationSegments ForwardingControlRuleZpaApplicationSegmentsArgs
    (set) List of ZPA Application Segments for which this rule is applicable. This field is applicable only for the ECZPA forwarding method (used for Zscaler Cloud Connector).
    ZpaGateway ForwardingControlRuleZpaGatewayArgs
    (set) The ZPA Gateway for which this rule is applicable. This field is applicable only for the ZPA forwarding method.
    forwardMethod String
    The type of traffic forwarding method selected from the available options.
    order Integer
    Policy rules are evaluated in ascending numerical order (Rule 1 before Rule 2, and so on), and the Rule Order reflects this rule's place in the order.
    appServiceGroups ForwardingControlRuleAppServiceGroups
    (list) - Application service groups on which this rule is applied
    departments ForwardingControlRuleDepartments
    (list) Apply to any number of departments When not used it implies Any to apply the rule to all departments.
    description String
    (string) - Additional information about the forwarding rule
    destAddresses List<String>
    ** - (list) - IP addresses and fully qualified domain names (FQDNs), if the domain has multiple destination IP addresses or if its IP addresses may change. For IP addresses, you can enter individual IP addresses, subnets, or address ranges. If adding multiple items, hit Enter after each entry.
    destCountries List<String>
    ** - (list) estination countries for which the rule is applicable. If not set, the rule is not restricted to specific destination countries. Provide a 2 letter ISO3166 Alpha2 Country code.
    destIpCategories List<String>
    ** - (list) identify destinations based on the URL category of the domain, select Any to apply the rule to all categories or select the specific categories you want to control.
    destIpGroups ForwardingControlRuleDestIpGroups
    ** - (list) Any number of destination IP address groups that you want to control with this rule.
    destIpv6Groups ForwardingControlRuleDestIpv6Groups
    ** - (list) Destination IPv6 address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IPv6 address group.
    ecGroups ForwardingControlRuleEcGroups
    (list) - Name-ID pairs of the Zscaler Cloud Connector groups to which the forwarding rule applies
    groups ForwardingControlRuleGroups
    (list) You can manually select up to 8 groups. When not used it implies Any to apply the rule to all groups.
    labels ForwardingControlRuleLabels
    (list) Labels that are applicable to the rule.
    locationGroups ForwardingControlRuleLocationGroups
    (Optional) You can manually select up to 32 location groups. When not used it implies Any to apply the rule to all location groups.
    locations ForwardingControlRuleLocations
    (Optional) You can manually select up to 8 locations. When not used it implies Any to apply the rule to all groups.
    name String
    Name of the Firewall Filtering policy rule
    nwApplicationGroups ForwardingControlRuleNwApplicationGroups
    (list) Any number of application groups that you want to control with this rule. The service provides predefined applications that you can group, but not modify
    nwServiceGroups ForwardingControlRuleNwServiceGroups
    (list) Any number of predefined or custom network service groups to which the rule applies.
    nwServices ForwardingControlRuleNwServices
    (list) When not used it applies the rule to all network services or you can select specific network services. The Zscaler firewall has predefined services and you can configure up to 1,024 additional custom services.
    proxyGateway ForwardingControlRuleProxyGateway
    (set) The proxy gateway for which the rule is applicable. This field is applicable only for the PROXYCHAIN forwarding method.
    rank Integer
    Admin rank assigned to the forwarding rule
    resCategories List<String>
    ** - (list) List of destination domain categories to which the rule applies.
    srcIpGroups ForwardingControlRuleSrcIpGroups
    (list) Any number of source IP address groups that you want to control with this rule.
    srcIps List<String>
    (Optional) You can enter individual IP addresses, subnets, or address ranges.
    srcIpv6Groups ForwardingControlRuleSrcIpv6Groups
    (list) Source IPv6 address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IPv6 address group.
    state String
    (string) - Indicates whether the forwarding rule is enabled or disabled. Supported values are: ENABLED and DISABLED.
    type String
    The rule type selected from the available options. Supported Values: FORWARDING
    users ForwardingControlRuleUsers
    (list) You can manually select up to 4 general and/or special users. When not used it implies Any to apply the rule to all users.
    zpaAppSegments List<ForwardingControlRuleZpaAppSegment>
    (set) The list of ZPA Application Segments for which this rule is applicable. This field is applicable only for the ZPA Gateway forwarding method.
    zpaApplicationSegmentGroups ForwardingControlRuleZpaApplicationSegmentGroups
    (set) List of ZPA Application Segment Groups for which this rule is applicable. This field is applicable only for the ECZPA forwarding method (used for Zscaler Cloud Connector).
    zpaApplicationSegments ForwardingControlRuleZpaApplicationSegments
    (set) List of ZPA Application Segments for which this rule is applicable. This field is applicable only for the ECZPA forwarding method (used for Zscaler Cloud Connector).
    zpaGateway ForwardingControlRuleZpaGateway
    (set) The ZPA Gateway for which this rule is applicable. This field is applicable only for the ZPA forwarding method.
    forwardMethod string
    The type of traffic forwarding method selected from the available options.
    order number
    Policy rules are evaluated in ascending numerical order (Rule 1 before Rule 2, and so on), and the Rule Order reflects this rule's place in the order.
    appServiceGroups ForwardingControlRuleAppServiceGroups
    (list) - Application service groups on which this rule is applied
    departments ForwardingControlRuleDepartments
    (list) Apply to any number of departments When not used it implies Any to apply the rule to all departments.
    description string
    (string) - Additional information about the forwarding rule
    destAddresses string[]
    ** - (list) - IP addresses and fully qualified domain names (FQDNs), if the domain has multiple destination IP addresses or if its IP addresses may change. For IP addresses, you can enter individual IP addresses, subnets, or address ranges. If adding multiple items, hit Enter after each entry.
    destCountries string[]
    ** - (list) estination countries for which the rule is applicable. If not set, the rule is not restricted to specific destination countries. Provide a 2 letter ISO3166 Alpha2 Country code.
    destIpCategories string[]
    ** - (list) identify destinations based on the URL category of the domain, select Any to apply the rule to all categories or select the specific categories you want to control.
    destIpGroups ForwardingControlRuleDestIpGroups
    ** - (list) Any number of destination IP address groups that you want to control with this rule.
    destIpv6Groups ForwardingControlRuleDestIpv6Groups
    ** - (list) Destination IPv6 address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IPv6 address group.
    ecGroups ForwardingControlRuleEcGroups
    (list) - Name-ID pairs of the Zscaler Cloud Connector groups to which the forwarding rule applies
    groups ForwardingControlRuleGroups
    (list) You can manually select up to 8 groups. When not used it implies Any to apply the rule to all groups.
    labels ForwardingControlRuleLabels
    (list) Labels that are applicable to the rule.
    locationGroups ForwardingControlRuleLocationGroups
    (Optional) You can manually select up to 32 location groups. When not used it implies Any to apply the rule to all location groups.
    locations ForwardingControlRuleLocations
    (Optional) You can manually select up to 8 locations. When not used it implies Any to apply the rule to all groups.
    name string
    Name of the Firewall Filtering policy rule
    nwApplicationGroups ForwardingControlRuleNwApplicationGroups
    (list) Any number of application groups that you want to control with this rule. The service provides predefined applications that you can group, but not modify
    nwServiceGroups ForwardingControlRuleNwServiceGroups
    (list) Any number of predefined or custom network service groups to which the rule applies.
    nwServices ForwardingControlRuleNwServices
    (list) When not used it applies the rule to all network services or you can select specific network services. The Zscaler firewall has predefined services and you can configure up to 1,024 additional custom services.
    proxyGateway ForwardingControlRuleProxyGateway
    (set) The proxy gateway for which the rule is applicable. This field is applicable only for the PROXYCHAIN forwarding method.
    rank number
    Admin rank assigned to the forwarding rule
    resCategories string[]
    ** - (list) List of destination domain categories to which the rule applies.
    srcIpGroups ForwardingControlRuleSrcIpGroups
    (list) Any number of source IP address groups that you want to control with this rule.
    srcIps string[]
    (Optional) You can enter individual IP addresses, subnets, or address ranges.
    srcIpv6Groups ForwardingControlRuleSrcIpv6Groups
    (list) Source IPv6 address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IPv6 address group.
    state string
    (string) - Indicates whether the forwarding rule is enabled or disabled. Supported values are: ENABLED and DISABLED.
    type string
    The rule type selected from the available options. Supported Values: FORWARDING
    users ForwardingControlRuleUsers
    (list) You can manually select up to 4 general and/or special users. When not used it implies Any to apply the rule to all users.
    zpaAppSegments ForwardingControlRuleZpaAppSegment[]
    (set) The list of ZPA Application Segments for which this rule is applicable. This field is applicable only for the ZPA Gateway forwarding method.
    zpaApplicationSegmentGroups ForwardingControlRuleZpaApplicationSegmentGroups
    (set) List of ZPA Application Segment Groups for which this rule is applicable. This field is applicable only for the ECZPA forwarding method (used for Zscaler Cloud Connector).
    zpaApplicationSegments ForwardingControlRuleZpaApplicationSegments
    (set) List of ZPA Application Segments for which this rule is applicable. This field is applicable only for the ECZPA forwarding method (used for Zscaler Cloud Connector).
    zpaGateway ForwardingControlRuleZpaGateway
    (set) The ZPA Gateway for which this rule is applicable. This field is applicable only for the ZPA forwarding method.
    forward_method str
    The type of traffic forwarding method selected from the available options.
    order int
    Policy rules are evaluated in ascending numerical order (Rule 1 before Rule 2, and so on), and the Rule Order reflects this rule's place in the order.
    app_service_groups ForwardingControlRuleAppServiceGroupsArgs
    (list) - Application service groups on which this rule is applied
    departments ForwardingControlRuleDepartmentsArgs
    (list) Apply to any number of departments When not used it implies Any to apply the rule to all departments.
    description str
    (string) - Additional information about the forwarding rule
    dest_addresses Sequence[str]
    ** - (list) - IP addresses and fully qualified domain names (FQDNs), if the domain has multiple destination IP addresses or if its IP addresses may change. For IP addresses, you can enter individual IP addresses, subnets, or address ranges. If adding multiple items, hit Enter after each entry.
    dest_countries Sequence[str]
    ** - (list) estination countries for which the rule is applicable. If not set, the rule is not restricted to specific destination countries. Provide a 2 letter ISO3166 Alpha2 Country code.
    dest_ip_categories Sequence[str]
    ** - (list) identify destinations based on the URL category of the domain, select Any to apply the rule to all categories or select the specific categories you want to control.
    dest_ip_groups ForwardingControlRuleDestIpGroupsArgs
    ** - (list) Any number of destination IP address groups that you want to control with this rule.
    dest_ipv6_groups ForwardingControlRuleDestIpv6GroupsArgs
    ** - (list) Destination IPv6 address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IPv6 address group.
    ec_groups ForwardingControlRuleEcGroupsArgs
    (list) - Name-ID pairs of the Zscaler Cloud Connector groups to which the forwarding rule applies
    groups ForwardingControlRuleGroupsArgs
    (list) You can manually select up to 8 groups. When not used it implies Any to apply the rule to all groups.
    labels ForwardingControlRuleLabelsArgs
    (list) Labels that are applicable to the rule.
    location_groups ForwardingControlRuleLocationGroupsArgs
    (Optional) You can manually select up to 32 location groups. When not used it implies Any to apply the rule to all location groups.
    locations ForwardingControlRuleLocationsArgs
    (Optional) You can manually select up to 8 locations. When not used it implies Any to apply the rule to all groups.
    name str
    Name of the Firewall Filtering policy rule
    nw_application_groups ForwardingControlRuleNwApplicationGroupsArgs
    (list) Any number of application groups that you want to control with this rule. The service provides predefined applications that you can group, but not modify
    nw_service_groups ForwardingControlRuleNwServiceGroupsArgs
    (list) Any number of predefined or custom network service groups to which the rule applies.
    nw_services ForwardingControlRuleNwServicesArgs
    (list) When not used it applies the rule to all network services or you can select specific network services. The Zscaler firewall has predefined services and you can configure up to 1,024 additional custom services.
    proxy_gateway ForwardingControlRuleProxyGatewayArgs
    (set) The proxy gateway for which the rule is applicable. This field is applicable only for the PROXYCHAIN forwarding method.
    rank int
    Admin rank assigned to the forwarding rule
    res_categories Sequence[str]
    ** - (list) List of destination domain categories to which the rule applies.
    src_ip_groups ForwardingControlRuleSrcIpGroupsArgs
    (list) Any number of source IP address groups that you want to control with this rule.
    src_ips Sequence[str]
    (Optional) You can enter individual IP addresses, subnets, or address ranges.
    src_ipv6_groups ForwardingControlRuleSrcIpv6GroupsArgs
    (list) Source IPv6 address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IPv6 address group.
    state str
    (string) - Indicates whether the forwarding rule is enabled or disabled. Supported values are: ENABLED and DISABLED.
    type str
    The rule type selected from the available options. Supported Values: FORWARDING
    users ForwardingControlRuleUsersArgs
    (list) You can manually select up to 4 general and/or special users. When not used it implies Any to apply the rule to all users.
    zpa_app_segments Sequence[ForwardingControlRuleZpaAppSegmentArgs]
    (set) The list of ZPA Application Segments for which this rule is applicable. This field is applicable only for the ZPA Gateway forwarding method.
    zpa_application_segment_groups ForwardingControlRuleZpaApplicationSegmentGroupsArgs
    (set) List of ZPA Application Segment Groups for which this rule is applicable. This field is applicable only for the ECZPA forwarding method (used for Zscaler Cloud Connector).
    zpa_application_segments ForwardingControlRuleZpaApplicationSegmentsArgs
    (set) List of ZPA Application Segments for which this rule is applicable. This field is applicable only for the ECZPA forwarding method (used for Zscaler Cloud Connector).
    zpa_gateway ForwardingControlRuleZpaGatewayArgs
    (set) The ZPA Gateway for which this rule is applicable. This field is applicable only for the ZPA forwarding method.
    forwardMethod String
    The type of traffic forwarding method selected from the available options.
    order Number
    Policy rules are evaluated in ascending numerical order (Rule 1 before Rule 2, and so on), and the Rule Order reflects this rule's place in the order.
    appServiceGroups Property Map
    (list) - Application service groups on which this rule is applied
    departments Property Map
    (list) Apply to any number of departments When not used it implies Any to apply the rule to all departments.
    description String
    (string) - Additional information about the forwarding rule
    destAddresses List<String>
    ** - (list) - IP addresses and fully qualified domain names (FQDNs), if the domain has multiple destination IP addresses or if its IP addresses may change. For IP addresses, you can enter individual IP addresses, subnets, or address ranges. If adding multiple items, hit Enter after each entry.
    destCountries List<String>
    ** - (list) estination countries for which the rule is applicable. If not set, the rule is not restricted to specific destination countries. Provide a 2 letter ISO3166 Alpha2 Country code.
    destIpCategories List<String>
    ** - (list) identify destinations based on the URL category of the domain, select Any to apply the rule to all categories or select the specific categories you want to control.
    destIpGroups Property Map
    ** - (list) Any number of destination IP address groups that you want to control with this rule.
    destIpv6Groups Property Map
    ** - (list) Destination IPv6 address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IPv6 address group.
    ecGroups Property Map
    (list) - Name-ID pairs of the Zscaler Cloud Connector groups to which the forwarding rule applies
    groups Property Map
    (list) You can manually select up to 8 groups. When not used it implies Any to apply the rule to all groups.
    labels Property Map
    (list) Labels that are applicable to the rule.
    locationGroups Property Map
    (Optional) You can manually select up to 32 location groups. When not used it implies Any to apply the rule to all location groups.
    locations Property Map
    (Optional) You can manually select up to 8 locations. When not used it implies Any to apply the rule to all groups.
    name String
    Name of the Firewall Filtering policy rule
    nwApplicationGroups Property Map
    (list) Any number of application groups that you want to control with this rule. The service provides predefined applications that you can group, but not modify
    nwServiceGroups Property Map
    (list) Any number of predefined or custom network service groups to which the rule applies.
    nwServices Property Map
    (list) When not used it applies the rule to all network services or you can select specific network services. The Zscaler firewall has predefined services and you can configure up to 1,024 additional custom services.
    proxyGateway Property Map
    (set) The proxy gateway for which the rule is applicable. This field is applicable only for the PROXYCHAIN forwarding method.
    rank Number
    Admin rank assigned to the forwarding rule
    resCategories List<String>
    ** - (list) List of destination domain categories to which the rule applies.
    srcIpGroups Property Map
    (list) Any number of source IP address groups that you want to control with this rule.
    srcIps List<String>
    (Optional) You can enter individual IP addresses, subnets, or address ranges.
    srcIpv6Groups Property Map
    (list) Source IPv6 address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IPv6 address group.
    state String
    (string) - Indicates whether the forwarding rule is enabled or disabled. Supported values are: ENABLED and DISABLED.
    type String
    The rule type selected from the available options. Supported Values: FORWARDING
    users Property Map
    (list) You can manually select up to 4 general and/or special users. When not used it implies Any to apply the rule to all users.
    zpaAppSegments List<Property Map>
    (set) The list of ZPA Application Segments for which this rule is applicable. This field is applicable only for the ZPA Gateway forwarding method.
    zpaApplicationSegmentGroups Property Map
    (set) List of ZPA Application Segment Groups for which this rule is applicable. This field is applicable only for the ECZPA forwarding method (used for Zscaler Cloud Connector).
    zpaApplicationSegments Property Map
    (set) List of ZPA Application Segments for which this rule is applicable. This field is applicable only for the ECZPA forwarding method (used for Zscaler Cloud Connector).
    zpaGateway Property Map
    (set) The ZPA Gateway for which this rule is applicable. This field is applicable only for the ZPA forwarding method.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the ForwardingControlRule resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    RuleId int
    A unique identifier assigned to the forwarding rule
    Id string
    The provider-assigned unique ID for this managed resource.
    RuleId int
    A unique identifier assigned to the forwarding rule
    id String
    The provider-assigned unique ID for this managed resource.
    ruleId Integer
    A unique identifier assigned to the forwarding rule
    id string
    The provider-assigned unique ID for this managed resource.
    ruleId number
    A unique identifier assigned to the forwarding rule
    id str
    The provider-assigned unique ID for this managed resource.
    rule_id int
    A unique identifier assigned to the forwarding rule
    id String
    The provider-assigned unique ID for this managed resource.
    ruleId Number
    A unique identifier assigned to the forwarding rule

    Look up Existing ForwardingControlRule Resource

    Get an existing ForwardingControlRule resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: ForwardingControlRuleState, opts?: CustomResourceOptions): ForwardingControlRule
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        app_service_groups: Optional[ForwardingControlRuleAppServiceGroupsArgs] = None,
        departments: Optional[ForwardingControlRuleDepartmentsArgs] = None,
        description: Optional[str] = None,
        dest_addresses: Optional[Sequence[str]] = None,
        dest_countries: Optional[Sequence[str]] = None,
        dest_ip_categories: Optional[Sequence[str]] = None,
        dest_ip_groups: Optional[ForwardingControlRuleDestIpGroupsArgs] = None,
        dest_ipv6_groups: Optional[ForwardingControlRuleDestIpv6GroupsArgs] = None,
        ec_groups: Optional[ForwardingControlRuleEcGroupsArgs] = None,
        forward_method: Optional[str] = None,
        groups: Optional[ForwardingControlRuleGroupsArgs] = None,
        labels: Optional[ForwardingControlRuleLabelsArgs] = None,
        location_groups: Optional[ForwardingControlRuleLocationGroupsArgs] = None,
        locations: Optional[ForwardingControlRuleLocationsArgs] = None,
        name: Optional[str] = None,
        nw_application_groups: Optional[ForwardingControlRuleNwApplicationGroupsArgs] = None,
        nw_service_groups: Optional[ForwardingControlRuleNwServiceGroupsArgs] = None,
        nw_services: Optional[ForwardingControlRuleNwServicesArgs] = None,
        order: Optional[int] = None,
        proxy_gateway: Optional[ForwardingControlRuleProxyGatewayArgs] = None,
        rank: Optional[int] = None,
        res_categories: Optional[Sequence[str]] = None,
        rule_id: Optional[int] = None,
        src_ip_groups: Optional[ForwardingControlRuleSrcIpGroupsArgs] = None,
        src_ips: Optional[Sequence[str]] = None,
        src_ipv6_groups: Optional[ForwardingControlRuleSrcIpv6GroupsArgs] = None,
        state: Optional[str] = None,
        type: Optional[str] = None,
        users: Optional[ForwardingControlRuleUsersArgs] = None,
        zpa_app_segments: Optional[Sequence[ForwardingControlRuleZpaAppSegmentArgs]] = None,
        zpa_application_segment_groups: Optional[ForwardingControlRuleZpaApplicationSegmentGroupsArgs] = None,
        zpa_application_segments: Optional[ForwardingControlRuleZpaApplicationSegmentsArgs] = None,
        zpa_gateway: Optional[ForwardingControlRuleZpaGatewayArgs] = None) -> ForwardingControlRule
    func GetForwardingControlRule(ctx *Context, name string, id IDInput, state *ForwardingControlRuleState, opts ...ResourceOption) (*ForwardingControlRule, error)
    public static ForwardingControlRule Get(string name, Input<string> id, ForwardingControlRuleState? state, CustomResourceOptions? opts = null)
    public static ForwardingControlRule get(String name, Output<String> id, ForwardingControlRuleState state, CustomResourceOptions options)
    Resource lookup is not supported in YAML
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AppServiceGroups zscaler.PulumiPackage.Zia.Inputs.ForwardingControlRuleAppServiceGroups
    (list) - Application service groups on which this rule is applied
    Departments zscaler.PulumiPackage.Zia.Inputs.ForwardingControlRuleDepartments
    (list) Apply to any number of departments When not used it implies Any to apply the rule to all departments.
    Description string
    (string) - Additional information about the forwarding rule
    DestAddresses List<string>
    ** - (list) - IP addresses and fully qualified domain names (FQDNs), if the domain has multiple destination IP addresses or if its IP addresses may change. For IP addresses, you can enter individual IP addresses, subnets, or address ranges. If adding multiple items, hit Enter after each entry.
    DestCountries List<string>
    ** - (list) estination countries for which the rule is applicable. If not set, the rule is not restricted to specific destination countries. Provide a 2 letter ISO3166 Alpha2 Country code.
    DestIpCategories List<string>
    ** - (list) identify destinations based on the URL category of the domain, select Any to apply the rule to all categories or select the specific categories you want to control.
    DestIpGroups zscaler.PulumiPackage.Zia.Inputs.ForwardingControlRuleDestIpGroups
    ** - (list) Any number of destination IP address groups that you want to control with this rule.
    DestIpv6Groups zscaler.PulumiPackage.Zia.Inputs.ForwardingControlRuleDestIpv6Groups
    ** - (list) Destination IPv6 address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IPv6 address group.
    EcGroups zscaler.PulumiPackage.Zia.Inputs.ForwardingControlRuleEcGroups
    (list) - Name-ID pairs of the Zscaler Cloud Connector groups to which the forwarding rule applies
    ForwardMethod string
    The type of traffic forwarding method selected from the available options.
    Groups zscaler.PulumiPackage.Zia.Inputs.ForwardingControlRuleGroups
    (list) You can manually select up to 8 groups. When not used it implies Any to apply the rule to all groups.
    Labels zscaler.PulumiPackage.Zia.Inputs.ForwardingControlRuleLabels
    (list) Labels that are applicable to the rule.
    LocationGroups zscaler.PulumiPackage.Zia.Inputs.ForwardingControlRuleLocationGroups
    (Optional) You can manually select up to 32 location groups. When not used it implies Any to apply the rule to all location groups.
    Locations zscaler.PulumiPackage.Zia.Inputs.ForwardingControlRuleLocations
    (Optional) You can manually select up to 8 locations. When not used it implies Any to apply the rule to all groups.
    Name string
    Name of the Firewall Filtering policy rule
    NwApplicationGroups zscaler.PulumiPackage.Zia.Inputs.ForwardingControlRuleNwApplicationGroups
    (list) Any number of application groups that you want to control with this rule. The service provides predefined applications that you can group, but not modify
    NwServiceGroups zscaler.PulumiPackage.Zia.Inputs.ForwardingControlRuleNwServiceGroups
    (list) Any number of predefined or custom network service groups to which the rule applies.
    NwServices zscaler.PulumiPackage.Zia.Inputs.ForwardingControlRuleNwServices
    (list) When not used it applies the rule to all network services or you can select specific network services. The Zscaler firewall has predefined services and you can configure up to 1,024 additional custom services.
    Order int
    Policy rules are evaluated in ascending numerical order (Rule 1 before Rule 2, and so on), and the Rule Order reflects this rule's place in the order.
    ProxyGateway zscaler.PulumiPackage.Zia.Inputs.ForwardingControlRuleProxyGateway
    (set) The proxy gateway for which the rule is applicable. This field is applicable only for the PROXYCHAIN forwarding method.
    Rank int
    Admin rank assigned to the forwarding rule
    ResCategories List<string>
    ** - (list) List of destination domain categories to which the rule applies.
    RuleId int
    A unique identifier assigned to the forwarding rule
    SrcIpGroups zscaler.PulumiPackage.Zia.Inputs.ForwardingControlRuleSrcIpGroups
    (list) Any number of source IP address groups that you want to control with this rule.
    SrcIps List<string>
    (Optional) You can enter individual IP addresses, subnets, or address ranges.
    SrcIpv6Groups zscaler.PulumiPackage.Zia.Inputs.ForwardingControlRuleSrcIpv6Groups
    (list) Source IPv6 address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IPv6 address group.
    State string
    (string) - Indicates whether the forwarding rule is enabled or disabled. Supported values are: ENABLED and DISABLED.
    Type string
    The rule type selected from the available options. Supported Values: FORWARDING
    Users zscaler.PulumiPackage.Zia.Inputs.ForwardingControlRuleUsers
    (list) You can manually select up to 4 general and/or special users. When not used it implies Any to apply the rule to all users.
    ZpaAppSegments List<zscaler.PulumiPackage.Zia.Inputs.ForwardingControlRuleZpaAppSegment>
    (set) The list of ZPA Application Segments for which this rule is applicable. This field is applicable only for the ZPA Gateway forwarding method.
    ZpaApplicationSegmentGroups zscaler.PulumiPackage.Zia.Inputs.ForwardingControlRuleZpaApplicationSegmentGroups
    (set) List of ZPA Application Segment Groups for which this rule is applicable. This field is applicable only for the ECZPA forwarding method (used for Zscaler Cloud Connector).
    ZpaApplicationSegments zscaler.PulumiPackage.Zia.Inputs.ForwardingControlRuleZpaApplicationSegments
    (set) List of ZPA Application Segments for which this rule is applicable. This field is applicable only for the ECZPA forwarding method (used for Zscaler Cloud Connector).
    ZpaGateway zscaler.PulumiPackage.Zia.Inputs.ForwardingControlRuleZpaGateway
    (set) The ZPA Gateway for which this rule is applicable. This field is applicable only for the ZPA forwarding method.
    AppServiceGroups ForwardingControlRuleAppServiceGroupsArgs
    (list) - Application service groups on which this rule is applied
    Departments ForwardingControlRuleDepartmentsArgs
    (list) Apply to any number of departments When not used it implies Any to apply the rule to all departments.
    Description string
    (string) - Additional information about the forwarding rule
    DestAddresses []string
    ** - (list) - IP addresses and fully qualified domain names (FQDNs), if the domain has multiple destination IP addresses or if its IP addresses may change. For IP addresses, you can enter individual IP addresses, subnets, or address ranges. If adding multiple items, hit Enter after each entry.
    DestCountries []string
    ** - (list) estination countries for which the rule is applicable. If not set, the rule is not restricted to specific destination countries. Provide a 2 letter ISO3166 Alpha2 Country code.
    DestIpCategories []string
    ** - (list) identify destinations based on the URL category of the domain, select Any to apply the rule to all categories or select the specific categories you want to control.
    DestIpGroups ForwardingControlRuleDestIpGroupsArgs
    ** - (list) Any number of destination IP address groups that you want to control with this rule.
    DestIpv6Groups ForwardingControlRuleDestIpv6GroupsArgs
    ** - (list) Destination IPv6 address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IPv6 address group.
    EcGroups ForwardingControlRuleEcGroupsArgs
    (list) - Name-ID pairs of the Zscaler Cloud Connector groups to which the forwarding rule applies
    ForwardMethod string
    The type of traffic forwarding method selected from the available options.
    Groups ForwardingControlRuleGroupsArgs
    (list) You can manually select up to 8 groups. When not used it implies Any to apply the rule to all groups.
    Labels ForwardingControlRuleLabelsArgs
    (list) Labels that are applicable to the rule.
    LocationGroups ForwardingControlRuleLocationGroupsArgs
    (Optional) You can manually select up to 32 location groups. When not used it implies Any to apply the rule to all location groups.
    Locations ForwardingControlRuleLocationsArgs
    (Optional) You can manually select up to 8 locations. When not used it implies Any to apply the rule to all groups.
    Name string
    Name of the Firewall Filtering policy rule
    NwApplicationGroups ForwardingControlRuleNwApplicationGroupsArgs
    (list) Any number of application groups that you want to control with this rule. The service provides predefined applications that you can group, but not modify
    NwServiceGroups ForwardingControlRuleNwServiceGroupsArgs
    (list) Any number of predefined or custom network service groups to which the rule applies.
    NwServices ForwardingControlRuleNwServicesArgs
    (list) When not used it applies the rule to all network services or you can select specific network services. The Zscaler firewall has predefined services and you can configure up to 1,024 additional custom services.
    Order int
    Policy rules are evaluated in ascending numerical order (Rule 1 before Rule 2, and so on), and the Rule Order reflects this rule's place in the order.
    ProxyGateway ForwardingControlRuleProxyGatewayArgs
    (set) The proxy gateway for which the rule is applicable. This field is applicable only for the PROXYCHAIN forwarding method.
    Rank int
    Admin rank assigned to the forwarding rule
    ResCategories []string
    ** - (list) List of destination domain categories to which the rule applies.
    RuleId int
    A unique identifier assigned to the forwarding rule
    SrcIpGroups ForwardingControlRuleSrcIpGroupsArgs
    (list) Any number of source IP address groups that you want to control with this rule.
    SrcIps []string
    (Optional) You can enter individual IP addresses, subnets, or address ranges.
    SrcIpv6Groups ForwardingControlRuleSrcIpv6GroupsArgs
    (list) Source IPv6 address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IPv6 address group.
    State string
    (string) - Indicates whether the forwarding rule is enabled or disabled. Supported values are: ENABLED and DISABLED.
    Type string
    The rule type selected from the available options. Supported Values: FORWARDING
    Users ForwardingControlRuleUsersArgs
    (list) You can manually select up to 4 general and/or special users. When not used it implies Any to apply the rule to all users.
    ZpaAppSegments []ForwardingControlRuleZpaAppSegmentArgs
    (set) The list of ZPA Application Segments for which this rule is applicable. This field is applicable only for the ZPA Gateway forwarding method.
    ZpaApplicationSegmentGroups ForwardingControlRuleZpaApplicationSegmentGroupsArgs
    (set) List of ZPA Application Segment Groups for which this rule is applicable. This field is applicable only for the ECZPA forwarding method (used for Zscaler Cloud Connector).
    ZpaApplicationSegments ForwardingControlRuleZpaApplicationSegmentsArgs
    (set) List of ZPA Application Segments for which this rule is applicable. This field is applicable only for the ECZPA forwarding method (used for Zscaler Cloud Connector).
    ZpaGateway ForwardingControlRuleZpaGatewayArgs
    (set) The ZPA Gateway for which this rule is applicable. This field is applicable only for the ZPA forwarding method.
    appServiceGroups ForwardingControlRuleAppServiceGroups
    (list) - Application service groups on which this rule is applied
    departments ForwardingControlRuleDepartments
    (list) Apply to any number of departments When not used it implies Any to apply the rule to all departments.
    description String
    (string) - Additional information about the forwarding rule
    destAddresses List<String>
    ** - (list) - IP addresses and fully qualified domain names (FQDNs), if the domain has multiple destination IP addresses or if its IP addresses may change. For IP addresses, you can enter individual IP addresses, subnets, or address ranges. If adding multiple items, hit Enter after each entry.
    destCountries List<String>
    ** - (list) estination countries for which the rule is applicable. If not set, the rule is not restricted to specific destination countries. Provide a 2 letter ISO3166 Alpha2 Country code.
    destIpCategories List<String>
    ** - (list) identify destinations based on the URL category of the domain, select Any to apply the rule to all categories or select the specific categories you want to control.
    destIpGroups ForwardingControlRuleDestIpGroups
    ** - (list) Any number of destination IP address groups that you want to control with this rule.
    destIpv6Groups ForwardingControlRuleDestIpv6Groups
    ** - (list) Destination IPv6 address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IPv6 address group.
    ecGroups ForwardingControlRuleEcGroups
    (list) - Name-ID pairs of the Zscaler Cloud Connector groups to which the forwarding rule applies
    forwardMethod String
    The type of traffic forwarding method selected from the available options.
    groups ForwardingControlRuleGroups
    (list) You can manually select up to 8 groups. When not used it implies Any to apply the rule to all groups.
    labels ForwardingControlRuleLabels
    (list) Labels that are applicable to the rule.
    locationGroups ForwardingControlRuleLocationGroups
    (Optional) You can manually select up to 32 location groups. When not used it implies Any to apply the rule to all location groups.
    locations ForwardingControlRuleLocations
    (Optional) You can manually select up to 8 locations. When not used it implies Any to apply the rule to all groups.
    name String
    Name of the Firewall Filtering policy rule
    nwApplicationGroups ForwardingControlRuleNwApplicationGroups
    (list) Any number of application groups that you want to control with this rule. The service provides predefined applications that you can group, but not modify
    nwServiceGroups ForwardingControlRuleNwServiceGroups
    (list) Any number of predefined or custom network service groups to which the rule applies.
    nwServices ForwardingControlRuleNwServices
    (list) When not used it applies the rule to all network services or you can select specific network services. The Zscaler firewall has predefined services and you can configure up to 1,024 additional custom services.
    order Integer
    Policy rules are evaluated in ascending numerical order (Rule 1 before Rule 2, and so on), and the Rule Order reflects this rule's place in the order.
    proxyGateway ForwardingControlRuleProxyGateway
    (set) The proxy gateway for which the rule is applicable. This field is applicable only for the PROXYCHAIN forwarding method.
    rank Integer
    Admin rank assigned to the forwarding rule
    resCategories List<String>
    ** - (list) List of destination domain categories to which the rule applies.
    ruleId Integer
    A unique identifier assigned to the forwarding rule
    srcIpGroups ForwardingControlRuleSrcIpGroups
    (list) Any number of source IP address groups that you want to control with this rule.
    srcIps List<String>
    (Optional) You can enter individual IP addresses, subnets, or address ranges.
    srcIpv6Groups ForwardingControlRuleSrcIpv6Groups
    (list) Source IPv6 address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IPv6 address group.
    state String
    (string) - Indicates whether the forwarding rule is enabled or disabled. Supported values are: ENABLED and DISABLED.
    type String
    The rule type selected from the available options. Supported Values: FORWARDING
    users ForwardingControlRuleUsers
    (list) You can manually select up to 4 general and/or special users. When not used it implies Any to apply the rule to all users.
    zpaAppSegments List<ForwardingControlRuleZpaAppSegment>
    (set) The list of ZPA Application Segments for which this rule is applicable. This field is applicable only for the ZPA Gateway forwarding method.
    zpaApplicationSegmentGroups ForwardingControlRuleZpaApplicationSegmentGroups
    (set) List of ZPA Application Segment Groups for which this rule is applicable. This field is applicable only for the ECZPA forwarding method (used for Zscaler Cloud Connector).
    zpaApplicationSegments ForwardingControlRuleZpaApplicationSegments
    (set) List of ZPA Application Segments for which this rule is applicable. This field is applicable only for the ECZPA forwarding method (used for Zscaler Cloud Connector).
    zpaGateway ForwardingControlRuleZpaGateway
    (set) The ZPA Gateway for which this rule is applicable. This field is applicable only for the ZPA forwarding method.
    appServiceGroups ForwardingControlRuleAppServiceGroups
    (list) - Application service groups on which this rule is applied
    departments ForwardingControlRuleDepartments
    (list) Apply to any number of departments When not used it implies Any to apply the rule to all departments.
    description string
    (string) - Additional information about the forwarding rule
    destAddresses string[]
    ** - (list) - IP addresses and fully qualified domain names (FQDNs), if the domain has multiple destination IP addresses or if its IP addresses may change. For IP addresses, you can enter individual IP addresses, subnets, or address ranges. If adding multiple items, hit Enter after each entry.
    destCountries string[]
    ** - (list) estination countries for which the rule is applicable. If not set, the rule is not restricted to specific destination countries. Provide a 2 letter ISO3166 Alpha2 Country code.
    destIpCategories string[]
    ** - (list) identify destinations based on the URL category of the domain, select Any to apply the rule to all categories or select the specific categories you want to control.
    destIpGroups ForwardingControlRuleDestIpGroups
    ** - (list) Any number of destination IP address groups that you want to control with this rule.
    destIpv6Groups ForwardingControlRuleDestIpv6Groups
    ** - (list) Destination IPv6 address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IPv6 address group.
    ecGroups ForwardingControlRuleEcGroups
    (list) - Name-ID pairs of the Zscaler Cloud Connector groups to which the forwarding rule applies
    forwardMethod string
    The type of traffic forwarding method selected from the available options.
    groups ForwardingControlRuleGroups
    (list) You can manually select up to 8 groups. When not used it implies Any to apply the rule to all groups.
    labels ForwardingControlRuleLabels
    (list) Labels that are applicable to the rule.
    locationGroups ForwardingControlRuleLocationGroups
    (Optional) You can manually select up to 32 location groups. When not used it implies Any to apply the rule to all location groups.
    locations ForwardingControlRuleLocations
    (Optional) You can manually select up to 8 locations. When not used it implies Any to apply the rule to all groups.
    name string
    Name of the Firewall Filtering policy rule
    nwApplicationGroups ForwardingControlRuleNwApplicationGroups
    (list) Any number of application groups that you want to control with this rule. The service provides predefined applications that you can group, but not modify
    nwServiceGroups ForwardingControlRuleNwServiceGroups
    (list) Any number of predefined or custom network service groups to which the rule applies.
    nwServices ForwardingControlRuleNwServices
    (list) When not used it applies the rule to all network services or you can select specific network services. The Zscaler firewall has predefined services and you can configure up to 1,024 additional custom services.
    order number
    Policy rules are evaluated in ascending numerical order (Rule 1 before Rule 2, and so on), and the Rule Order reflects this rule's place in the order.
    proxyGateway ForwardingControlRuleProxyGateway
    (set) The proxy gateway for which the rule is applicable. This field is applicable only for the PROXYCHAIN forwarding method.
    rank number
    Admin rank assigned to the forwarding rule
    resCategories string[]
    ** - (list) List of destination domain categories to which the rule applies.
    ruleId number
    A unique identifier assigned to the forwarding rule
    srcIpGroups ForwardingControlRuleSrcIpGroups
    (list) Any number of source IP address groups that you want to control with this rule.
    srcIps string[]
    (Optional) You can enter individual IP addresses, subnets, or address ranges.
    srcIpv6Groups ForwardingControlRuleSrcIpv6Groups
    (list) Source IPv6 address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IPv6 address group.
    state string
    (string) - Indicates whether the forwarding rule is enabled or disabled. Supported values are: ENABLED and DISABLED.
    type string
    The rule type selected from the available options. Supported Values: FORWARDING
    users ForwardingControlRuleUsers
    (list) You can manually select up to 4 general and/or special users. When not used it implies Any to apply the rule to all users.
    zpaAppSegments ForwardingControlRuleZpaAppSegment[]
    (set) The list of ZPA Application Segments for which this rule is applicable. This field is applicable only for the ZPA Gateway forwarding method.
    zpaApplicationSegmentGroups ForwardingControlRuleZpaApplicationSegmentGroups
    (set) List of ZPA Application Segment Groups for which this rule is applicable. This field is applicable only for the ECZPA forwarding method (used for Zscaler Cloud Connector).
    zpaApplicationSegments ForwardingControlRuleZpaApplicationSegments
    (set) List of ZPA Application Segments for which this rule is applicable. This field is applicable only for the ECZPA forwarding method (used for Zscaler Cloud Connector).
    zpaGateway ForwardingControlRuleZpaGateway
    (set) The ZPA Gateway for which this rule is applicable. This field is applicable only for the ZPA forwarding method.
    app_service_groups ForwardingControlRuleAppServiceGroupsArgs
    (list) - Application service groups on which this rule is applied
    departments ForwardingControlRuleDepartmentsArgs
    (list) Apply to any number of departments When not used it implies Any to apply the rule to all departments.
    description str
    (string) - Additional information about the forwarding rule
    dest_addresses Sequence[str]
    ** - (list) - IP addresses and fully qualified domain names (FQDNs), if the domain has multiple destination IP addresses or if its IP addresses may change. For IP addresses, you can enter individual IP addresses, subnets, or address ranges. If adding multiple items, hit Enter after each entry.
    dest_countries Sequence[str]
    ** - (list) estination countries for which the rule is applicable. If not set, the rule is not restricted to specific destination countries. Provide a 2 letter ISO3166 Alpha2 Country code.
    dest_ip_categories Sequence[str]
    ** - (list) identify destinations based on the URL category of the domain, select Any to apply the rule to all categories or select the specific categories you want to control.
    dest_ip_groups ForwardingControlRuleDestIpGroupsArgs
    ** - (list) Any number of destination IP address groups that you want to control with this rule.
    dest_ipv6_groups ForwardingControlRuleDestIpv6GroupsArgs
    ** - (list) Destination IPv6 address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IPv6 address group.
    ec_groups ForwardingControlRuleEcGroupsArgs
    (list) - Name-ID pairs of the Zscaler Cloud Connector groups to which the forwarding rule applies
    forward_method str
    The type of traffic forwarding method selected from the available options.
    groups ForwardingControlRuleGroupsArgs
    (list) You can manually select up to 8 groups. When not used it implies Any to apply the rule to all groups.
    labels ForwardingControlRuleLabelsArgs
    (list) Labels that are applicable to the rule.
    location_groups ForwardingControlRuleLocationGroupsArgs
    (Optional) You can manually select up to 32 location groups. When not used it implies Any to apply the rule to all location groups.
    locations ForwardingControlRuleLocationsArgs
    (Optional) You can manually select up to 8 locations. When not used it implies Any to apply the rule to all groups.
    name str
    Name of the Firewall Filtering policy rule
    nw_application_groups ForwardingControlRuleNwApplicationGroupsArgs
    (list) Any number of application groups that you want to control with this rule. The service provides predefined applications that you can group, but not modify
    nw_service_groups ForwardingControlRuleNwServiceGroupsArgs
    (list) Any number of predefined or custom network service groups to which the rule applies.
    nw_services ForwardingControlRuleNwServicesArgs
    (list) When not used it applies the rule to all network services or you can select specific network services. The Zscaler firewall has predefined services and you can configure up to 1,024 additional custom services.
    order int
    Policy rules are evaluated in ascending numerical order (Rule 1 before Rule 2, and so on), and the Rule Order reflects this rule's place in the order.
    proxy_gateway ForwardingControlRuleProxyGatewayArgs
    (set) The proxy gateway for which the rule is applicable. This field is applicable only for the PROXYCHAIN forwarding method.
    rank int
    Admin rank assigned to the forwarding rule
    res_categories Sequence[str]
    ** - (list) List of destination domain categories to which the rule applies.
    rule_id int
    A unique identifier assigned to the forwarding rule
    src_ip_groups ForwardingControlRuleSrcIpGroupsArgs
    (list) Any number of source IP address groups that you want to control with this rule.
    src_ips Sequence[str]
    (Optional) You can enter individual IP addresses, subnets, or address ranges.
    src_ipv6_groups ForwardingControlRuleSrcIpv6GroupsArgs
    (list) Source IPv6 address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IPv6 address group.
    state str
    (string) - Indicates whether the forwarding rule is enabled or disabled. Supported values are: ENABLED and DISABLED.
    type str
    The rule type selected from the available options. Supported Values: FORWARDING
    users ForwardingControlRuleUsersArgs
    (list) You can manually select up to 4 general and/or special users. When not used it implies Any to apply the rule to all users.
    zpa_app_segments Sequence[ForwardingControlRuleZpaAppSegmentArgs]
    (set) The list of ZPA Application Segments for which this rule is applicable. This field is applicable only for the ZPA Gateway forwarding method.
    zpa_application_segment_groups ForwardingControlRuleZpaApplicationSegmentGroupsArgs
    (set) List of ZPA Application Segment Groups for which this rule is applicable. This field is applicable only for the ECZPA forwarding method (used for Zscaler Cloud Connector).
    zpa_application_segments ForwardingControlRuleZpaApplicationSegmentsArgs
    (set) List of ZPA Application Segments for which this rule is applicable. This field is applicable only for the ECZPA forwarding method (used for Zscaler Cloud Connector).
    zpa_gateway ForwardingControlRuleZpaGatewayArgs
    (set) The ZPA Gateway for which this rule is applicable. This field is applicable only for the ZPA forwarding method.
    appServiceGroups Property Map
    (list) - Application service groups on which this rule is applied
    departments Property Map
    (list) Apply to any number of departments When not used it implies Any to apply the rule to all departments.
    description String
    (string) - Additional information about the forwarding rule
    destAddresses List<String>
    ** - (list) - IP addresses and fully qualified domain names (FQDNs), if the domain has multiple destination IP addresses or if its IP addresses may change. For IP addresses, you can enter individual IP addresses, subnets, or address ranges. If adding multiple items, hit Enter after each entry.
    destCountries List<String>
    ** - (list) estination countries for which the rule is applicable. If not set, the rule is not restricted to specific destination countries. Provide a 2 letter ISO3166 Alpha2 Country code.
    destIpCategories List<String>
    ** - (list) identify destinations based on the URL category of the domain, select Any to apply the rule to all categories or select the specific categories you want to control.
    destIpGroups Property Map
    ** - (list) Any number of destination IP address groups that you want to control with this rule.
    destIpv6Groups Property Map
    ** - (list) Destination IPv6 address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IPv6 address group.
    ecGroups Property Map
    (list) - Name-ID pairs of the Zscaler Cloud Connector groups to which the forwarding rule applies
    forwardMethod String
    The type of traffic forwarding method selected from the available options.
    groups Property Map
    (list) You can manually select up to 8 groups. When not used it implies Any to apply the rule to all groups.
    labels Property Map
    (list) Labels that are applicable to the rule.
    locationGroups Property Map
    (Optional) You can manually select up to 32 location groups. When not used it implies Any to apply the rule to all location groups.
    locations Property Map
    (Optional) You can manually select up to 8 locations. When not used it implies Any to apply the rule to all groups.
    name String
    Name of the Firewall Filtering policy rule
    nwApplicationGroups Property Map
    (list) Any number of application groups that you want to control with this rule. The service provides predefined applications that you can group, but not modify
    nwServiceGroups Property Map
    (list) Any number of predefined or custom network service groups to which the rule applies.
    nwServices Property Map
    (list) When not used it applies the rule to all network services or you can select specific network services. The Zscaler firewall has predefined services and you can configure up to 1,024 additional custom services.
    order Number
    Policy rules are evaluated in ascending numerical order (Rule 1 before Rule 2, and so on), and the Rule Order reflects this rule's place in the order.
    proxyGateway Property Map
    (set) The proxy gateway for which the rule is applicable. This field is applicable only for the PROXYCHAIN forwarding method.
    rank Number
    Admin rank assigned to the forwarding rule
    resCategories List<String>
    ** - (list) List of destination domain categories to which the rule applies.
    ruleId Number
    A unique identifier assigned to the forwarding rule
    srcIpGroups Property Map
    (list) Any number of source IP address groups that you want to control with this rule.
    srcIps List<String>
    (Optional) You can enter individual IP addresses, subnets, or address ranges.
    srcIpv6Groups Property Map
    (list) Source IPv6 address groups for which the rule is applicable. If not set, the rule is not restricted to a specific source IPv6 address group.
    state String
    (string) - Indicates whether the forwarding rule is enabled or disabled. Supported values are: ENABLED and DISABLED.
    type String
    The rule type selected from the available options. Supported Values: FORWARDING
    users Property Map
    (list) You can manually select up to 4 general and/or special users. When not used it implies Any to apply the rule to all users.
    zpaAppSegments List<Property Map>
    (set) The list of ZPA Application Segments for which this rule is applicable. This field is applicable only for the ZPA Gateway forwarding method.
    zpaApplicationSegmentGroups Property Map
    (set) List of ZPA Application Segment Groups for which this rule is applicable. This field is applicable only for the ECZPA forwarding method (used for Zscaler Cloud Connector).
    zpaApplicationSegments Property Map
    (set) List of ZPA Application Segments for which this rule is applicable. This field is applicable only for the ECZPA forwarding method (used for Zscaler Cloud Connector).
    zpaGateway Property Map
    (set) The ZPA Gateway for which this rule is applicable. This field is applicable only for the ZPA forwarding method.

    Supporting Types

    ForwardingControlRuleAppServiceGroups, ForwardingControlRuleAppServiceGroupsArgs

    Ids List<int>
    (int) Identifier that uniquely identifies an entity
    Ids []int
    (int) Identifier that uniquely identifies an entity
    ids List<Integer>
    (int) Identifier that uniquely identifies an entity
    ids number[]
    (int) Identifier that uniquely identifies an entity
    ids Sequence[int]
    (int) Identifier that uniquely identifies an entity
    ids List<Number>
    (int) Identifier that uniquely identifies an entity

    ForwardingControlRuleDepartments, ForwardingControlRuleDepartmentsArgs

    Ids List<int>
    (int) Identifier that uniquely identifies an entity
    Ids []int
    (int) Identifier that uniquely identifies an entity
    ids List<Integer>
    (int) Identifier that uniquely identifies an entity
    ids number[]
    (int) Identifier that uniquely identifies an entity
    ids Sequence[int]
    (int) Identifier that uniquely identifies an entity
    ids List<Number>
    (int) Identifier that uniquely identifies an entity

    ForwardingControlRuleDestIpGroups, ForwardingControlRuleDestIpGroupsArgs

    Ids List<int>
    (int) Identifier that uniquely identifies an entity
    Ids []int
    (int) Identifier that uniquely identifies an entity
    ids List<Integer>
    (int) Identifier that uniquely identifies an entity
    ids number[]
    (int) Identifier that uniquely identifies an entity
    ids Sequence[int]
    (int) Identifier that uniquely identifies an entity
    ids List<Number>
    (int) Identifier that uniquely identifies an entity

    ForwardingControlRuleDestIpv6Groups, ForwardingControlRuleDestIpv6GroupsArgs

    Ids List<int>
    (int) Identifier that uniquely identifies an entity
    Ids []int
    (int) Identifier that uniquely identifies an entity
    ids List<Integer>
    (int) Identifier that uniquely identifies an entity
    ids number[]
    (int) Identifier that uniquely identifies an entity
    ids Sequence[int]
    (int) Identifier that uniquely identifies an entity
    ids List<Number>
    (int) Identifier that uniquely identifies an entity

    ForwardingControlRuleEcGroups, ForwardingControlRuleEcGroupsArgs

    Ids List<int>
    (int) Identifier that uniquely identifies an entity
    Ids []int
    (int) Identifier that uniquely identifies an entity
    ids List<Integer>
    (int) Identifier that uniquely identifies an entity
    ids number[]
    (int) Identifier that uniquely identifies an entity
    ids Sequence[int]
    (int) Identifier that uniquely identifies an entity
    ids List<Number>
    (int) Identifier that uniquely identifies an entity

    ForwardingControlRuleGroups, ForwardingControlRuleGroupsArgs

    Ids List<int>
    (int) Identifier that uniquely identifies an entity
    Ids []int
    (int) Identifier that uniquely identifies an entity
    ids List<Integer>
    (int) Identifier that uniquely identifies an entity
    ids number[]
    (int) Identifier that uniquely identifies an entity
    ids Sequence[int]
    (int) Identifier that uniquely identifies an entity
    ids List<Number>
    (int) Identifier that uniquely identifies an entity

    ForwardingControlRuleLabels, ForwardingControlRuleLabelsArgs

    Id int
    (int) Identifier that uniquely identifies an entity
    Id int
    (int) Identifier that uniquely identifies an entity
    id Integer
    (int) Identifier that uniquely identifies an entity
    id number
    (int) Identifier that uniquely identifies an entity
    id int
    (int) Identifier that uniquely identifies an entity
    id Number
    (int) Identifier that uniquely identifies an entity

    ForwardingControlRuleLocationGroups, ForwardingControlRuleLocationGroupsArgs

    Ids List<int>
    (int) Identifier that uniquely identifies an entity
    Ids []int
    (int) Identifier that uniquely identifies an entity
    ids List<Integer>
    (int) Identifier that uniquely identifies an entity
    ids number[]
    (int) Identifier that uniquely identifies an entity
    ids Sequence[int]
    (int) Identifier that uniquely identifies an entity
    ids List<Number>
    (int) Identifier that uniquely identifies an entity

    ForwardingControlRuleLocations, ForwardingControlRuleLocationsArgs

    Ids List<int>
    (int) Identifier that uniquely identifies an entity
    Ids []int
    (int) Identifier that uniquely identifies an entity
    ids List<Integer>
    (int) Identifier that uniquely identifies an entity
    ids number[]
    (int) Identifier that uniquely identifies an entity
    ids Sequence[int]
    (int) Identifier that uniquely identifies an entity
    ids List<Number>
    (int) Identifier that uniquely identifies an entity

    ForwardingControlRuleNwApplicationGroups, ForwardingControlRuleNwApplicationGroupsArgs

    Ids List<int>
    (int) Identifier that uniquely identifies an entity
    Ids []int
    (int) Identifier that uniquely identifies an entity
    ids List<Integer>
    (int) Identifier that uniquely identifies an entity
    ids number[]
    (int) Identifier that uniquely identifies an entity
    ids Sequence[int]
    (int) Identifier that uniquely identifies an entity
    ids List<Number>
    (int) Identifier that uniquely identifies an entity

    ForwardingControlRuleNwServiceGroups, ForwardingControlRuleNwServiceGroupsArgs

    Ids List<int>
    (int) Identifier that uniquely identifies an entity
    Ids []int
    (int) Identifier that uniquely identifies an entity
    ids List<Integer>
    (int) Identifier that uniquely identifies an entity
    ids number[]
    (int) Identifier that uniquely identifies an entity
    ids Sequence[int]
    (int) Identifier that uniquely identifies an entity
    ids List<Number>
    (int) Identifier that uniquely identifies an entity

    ForwardingControlRuleNwServices, ForwardingControlRuleNwServicesArgs

    Ids List<int>
    (int) Identifier that uniquely identifies an entity
    Ids []int
    (int) Identifier that uniquely identifies an entity
    ids List<Integer>
    (int) Identifier that uniquely identifies an entity
    ids number[]
    (int) Identifier that uniquely identifies an entity
    ids Sequence[int]
    (int) Identifier that uniquely identifies an entity
    ids List<Number>
    (int) Identifier that uniquely identifies an entity

    ForwardingControlRuleProxyGateway, ForwardingControlRuleProxyGatewayArgs

    Id int
    (int) Identifier that uniquely identifies an entity
    Name string
    Name of the Firewall Filtering policy rule
    Id int
    (int) Identifier that uniquely identifies an entity
    Name string
    Name of the Firewall Filtering policy rule
    id Integer
    (int) Identifier that uniquely identifies an entity
    name String
    Name of the Firewall Filtering policy rule
    id number
    (int) Identifier that uniquely identifies an entity
    name string
    Name of the Firewall Filtering policy rule
    id int
    (int) Identifier that uniquely identifies an entity
    name str
    Name of the Firewall Filtering policy rule
    id Number
    (int) Identifier that uniquely identifies an entity
    name String
    Name of the Firewall Filtering policy rule

    ForwardingControlRuleSrcIpGroups, ForwardingControlRuleSrcIpGroupsArgs

    Ids List<int>
    (int) Identifier that uniquely identifies an entity
    Ids []int
    (int) Identifier that uniquely identifies an entity
    ids List<Integer>
    (int) Identifier that uniquely identifies an entity
    ids number[]
    (int) Identifier that uniquely identifies an entity
    ids Sequence[int]
    (int) Identifier that uniquely identifies an entity
    ids List<Number>
    (int) Identifier that uniquely identifies an entity

    ForwardingControlRuleSrcIpv6Groups, ForwardingControlRuleSrcIpv6GroupsArgs

    Ids List<int>
    (int) Identifier that uniquely identifies an entity
    Ids []int
    (int) Identifier that uniquely identifies an entity
    ids List<Integer>
    (int) Identifier that uniquely identifies an entity
    ids number[]
    (int) Identifier that uniquely identifies an entity
    ids Sequence[int]
    (int) Identifier that uniquely identifies an entity
    ids List<Number>
    (int) Identifier that uniquely identifies an entity

    ForwardingControlRuleUsers, ForwardingControlRuleUsersArgs

    Ids List<int>
    (int) Identifier that uniquely identifies an entity
    Ids []int
    (int) Identifier that uniquely identifies an entity
    ids List<Integer>
    (int) Identifier that uniquely identifies an entity
    ids number[]
    (int) Identifier that uniquely identifies an entity
    ids Sequence[int]
    (int) Identifier that uniquely identifies an entity
    ids List<Number>
    (int) Identifier that uniquely identifies an entity

    ForwardingControlRuleZpaAppSegment, ForwardingControlRuleZpaAppSegmentArgs

    ExternalId string
    (int) Identifier that uniquely identifies an entity
    Name string
    Name of the Firewall Filtering policy rule
    ExternalId string
    (int) Identifier that uniquely identifies an entity
    Name string
    Name of the Firewall Filtering policy rule
    externalId String
    (int) Identifier that uniquely identifies an entity
    name String
    Name of the Firewall Filtering policy rule
    externalId string
    (int) Identifier that uniquely identifies an entity
    name string
    Name of the Firewall Filtering policy rule
    external_id str
    (int) Identifier that uniquely identifies an entity
    name str
    Name of the Firewall Filtering policy rule
    externalId String
    (int) Identifier that uniquely identifies an entity
    name String
    Name of the Firewall Filtering policy rule

    ForwardingControlRuleZpaApplicationSegmentGroups, ForwardingControlRuleZpaApplicationSegmentGroupsArgs

    Ids List<int>
    (int) Identifier that uniquely identifies an entity
    Ids []int
    (int) Identifier that uniquely identifies an entity
    ids List<Integer>
    (int) Identifier that uniquely identifies an entity
    ids number[]
    (int) Identifier that uniquely identifies an entity
    ids Sequence[int]
    (int) Identifier that uniquely identifies an entity
    ids List<Number>
    (int) Identifier that uniquely identifies an entity

    ForwardingControlRuleZpaApplicationSegments, ForwardingControlRuleZpaApplicationSegmentsArgs

    Ids List<int>
    (int) Identifier that uniquely identifies an entity
    Ids []int
    (int) Identifier that uniquely identifies an entity
    ids List<Integer>
    (int) Identifier that uniquely identifies an entity
    ids number[]
    (int) Identifier that uniquely identifies an entity
    ids Sequence[int]
    (int) Identifier that uniquely identifies an entity
    ids List<Number>
    (int) Identifier that uniquely identifies an entity

    ForwardingControlRuleZpaGateway, ForwardingControlRuleZpaGatewayArgs

    Id int
    (int) Identifier that uniquely identifies an entity
    Name string
    Name of the Firewall Filtering policy rule
    Id int
    (int) Identifier that uniquely identifies an entity
    Name string
    Name of the Firewall Filtering policy rule
    id Integer
    (int) Identifier that uniquely identifies an entity
    name String
    Name of the Firewall Filtering policy rule
    id number
    (int) Identifier that uniquely identifies an entity
    name string
    Name of the Firewall Filtering policy rule
    id int
    (int) Identifier that uniquely identifies an entity
    name str
    Name of the Firewall Filtering policy rule
    id Number
    (int) Identifier that uniquely identifies an entity
    name String
    Name of the Firewall Filtering policy rule

    Package Details

    Repository
    zia zscaler/pulumi-zia
    License
    MIT
    Notes
    This Pulumi package is based on the zia Terraform Provider.
    zia logo
    Zscaler Internet Access v0.0.6 published on Wednesday, Apr 10, 2024 by Zscaler
    zscaler/pulumi-zia