You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
"customInterceptProfile": { # CustomInterceptProfile defines the Packet Intercept Endpoint Group used to intercept traffic to a third-party firewall in a Firewall rule. # The custom TPPI configuration for the SecurityProfile.
116
-
"interceptEndpointGroup": "A String", # Required. The InterceptEndpointGroup to which traffic associated with the SP should be mirrored.
115
+
"customInterceptProfile": { # CustomInterceptProfile defines in-band integration behavior (intercept). It is used by firewall rules with an APPLY_SECURITY_PROFILE_GROUP action. # The custom TPPI configuration for the SecurityProfile.
116
+
"interceptEndpointGroup": "A String", # Required. The target InterceptEndpointGroup. When a firewall rule with this security profile attached matches a packet, the packet will be intercepted to the location-local target in this group.
117
117
},
118
-
"customMirroringProfile": { # CustomMirroringProfile defines an action for mirroring traffic to a collector's EndpointGroup # The custom Packet Mirroring v2 configuration for the SecurityProfile.
119
-
"mirroringEndpointGroup": "A String", # Required. The MirroringEndpointGroup to which traffic associated with the SP should be mirrored.
118
+
"customMirroringProfile": { # CustomMirroringProfile defines out-of-band integration behavior (mirroring). It is used by mirroring rules with a MIRROR action. # The custom Packet Mirroring v2 configuration for the SecurityProfile.
119
+
"mirroringEndpointGroup": "A String", # Required. The target MirroringEndpointGroup. When a mirroring rule with this security profile attached matches a packet, a replica will be mirrored to the location-local target in this group.
120
120
},
121
121
"description": "A String", # Optional. An optional description of the profile. Max length 512 characters.
122
122
"etag": "A String", # Output only. This checksum is computed by the server based on the value of other fields, and may be sent on update and delete requests to ensure the client has an up-to-date value before proceeding.
@@ -125,6 +125,12 @@ <h3>Method Details</h3>
125
125
},
126
126
"name": "A String", # Immutable. Identifier. Name of the SecurityProfile resource. It matches pattern `projects|organizations/*/locations/{location}/securityProfiles/{security_profile}`.
127
127
"threatPreventionProfile": { # ThreatPreventionProfile defines an action for specific threat signatures or severity levels. # The threat prevention configuration for the SecurityProfile.
128
+
"antivirusOverrides": [ # Optional. Configuration for overriding antivirus actions per protocol.
129
+
{ # Defines what action to take for antivirus threats per protocol.
130
+
"action": "A String", # Required. Threat action override. For some threat types, only a subset of actions applies.
131
+
"protocol": "A String", # Required. Protocol to match.
132
+
},
133
+
],
128
134
"severityOverrides": [ # Optional. Configuration for overriding threats actions by severity match.
129
135
{ # Defines what action to take for a specific severity match.
"customInterceptProfile": { # CustomInterceptProfile defines the Packet Intercept Endpoint Group used to intercept traffic to a third-party firewall in a Firewall rule. # The custom TPPI configuration for the SecurityProfile.
229
-
"interceptEndpointGroup": "A String", # Required. The InterceptEndpointGroup to which traffic associated with the SP should be mirrored.
234
+
"customInterceptProfile": { # CustomInterceptProfile defines in-band integration behavior (intercept). It is used by firewall rules with an APPLY_SECURITY_PROFILE_GROUP action. # The custom TPPI configuration for the SecurityProfile.
235
+
"interceptEndpointGroup": "A String", # Required. The target InterceptEndpointGroup. When a firewall rule with this security profile attached matches a packet, the packet will be intercepted to the location-local target in this group.
230
236
},
231
-
"customMirroringProfile": { # CustomMirroringProfile defines an action for mirroring traffic to a collector's EndpointGroup # The custom Packet Mirroring v2 configuration for the SecurityProfile.
232
-
"mirroringEndpointGroup": "A String", # Required. The MirroringEndpointGroup to which traffic associated with the SP should be mirrored.
237
+
"customMirroringProfile": { # CustomMirroringProfile defines out-of-band integration behavior (mirroring). It is used by mirroring rules with a MIRROR action. # The custom Packet Mirroring v2 configuration for the SecurityProfile.
238
+
"mirroringEndpointGroup": "A String", # Required. The target MirroringEndpointGroup. When a mirroring rule with this security profile attached matches a packet, a replica will be mirrored to the location-local target in this group.
233
239
},
234
240
"description": "A String", # Optional. An optional description of the profile. Max length 512 characters.
235
241
"etag": "A String", # Output only. This checksum is computed by the server based on the value of other fields, and may be sent on update and delete requests to ensure the client has an up-to-date value before proceeding.
@@ -238,6 +244,12 @@ <h3>Method Details</h3>
238
244
},
239
245
"name": "A String", # Immutable. Identifier. Name of the SecurityProfile resource. It matches pattern `projects|organizations/*/locations/{location}/securityProfiles/{security_profile}`.
240
246
"threatPreventionProfile": { # ThreatPreventionProfile defines an action for specific threat signatures or severity levels. # The threat prevention configuration for the SecurityProfile.
247
+
"antivirusOverrides": [ # Optional. Configuration for overriding antivirus actions per protocol.
248
+
{ # Defines what action to take for antivirus threats per protocol.
249
+
"action": "A String", # Required. Threat action override. For some threat types, only a subset of actions applies.
250
+
"protocol": "A String", # Required. Protocol to match.
251
+
},
252
+
],
241
253
"severityOverrides": [ # Optional. Configuration for overriding threats actions by severity match.
242
254
{ # Defines what action to take for a specific severity match.
"customInterceptProfile": { # CustomInterceptProfile defines the Packet Intercept Endpoint Group used to intercept traffic to a third-party firewall in a Firewall rule. # The custom TPPI configuration for the SecurityProfile.
282
-
"interceptEndpointGroup": "A String", # Required. The InterceptEndpointGroup to which traffic associated with the SP should be mirrored.
293
+
"customInterceptProfile": { # CustomInterceptProfile defines in-band integration behavior (intercept). It is used by firewall rules with an APPLY_SECURITY_PROFILE_GROUP action. # The custom TPPI configuration for the SecurityProfile.
294
+
"interceptEndpointGroup": "A String", # Required. The target InterceptEndpointGroup. When a firewall rule with this security profile attached matches a packet, the packet will be intercepted to the location-local target in this group.
283
295
},
284
-
"customMirroringProfile": { # CustomMirroringProfile defines an action for mirroring traffic to a collector's EndpointGroup # The custom Packet Mirroring v2 configuration for the SecurityProfile.
285
-
"mirroringEndpointGroup": "A String", # Required. The MirroringEndpointGroup to which traffic associated with the SP should be mirrored.
296
+
"customMirroringProfile": { # CustomMirroringProfile defines out-of-band integration behavior (mirroring). It is used by mirroring rules with a MIRROR action. # The custom Packet Mirroring v2 configuration for the SecurityProfile.
297
+
"mirroringEndpointGroup": "A String", # Required. The target MirroringEndpointGroup. When a mirroring rule with this security profile attached matches a packet, a replica will be mirrored to the location-local target in this group.
286
298
},
287
299
"description": "A String", # Optional. An optional description of the profile. Max length 512 characters.
288
300
"etag": "A String", # Output only. This checksum is computed by the server based on the value of other fields, and may be sent on update and delete requests to ensure the client has an up-to-date value before proceeding.
@@ -291,6 +303,12 @@ <h3>Method Details</h3>
291
303
},
292
304
"name": "A String", # Immutable. Identifier. Name of the SecurityProfile resource. It matches pattern `projects|organizations/*/locations/{location}/securityProfiles/{security_profile}`.
293
305
"threatPreventionProfile": { # ThreatPreventionProfile defines an action for specific threat signatures or severity levels. # The threat prevention configuration for the SecurityProfile.
306
+
"antivirusOverrides": [ # Optional. Configuration for overriding antivirus actions per protocol.
307
+
{ # Defines what action to take for antivirus threats per protocol.
308
+
"action": "A String", # Required. Threat action override. For some threat types, only a subset of actions applies.
309
+
"protocol": "A String", # Required. Protocol to match.
310
+
},
311
+
],
294
312
"severityOverrides": [ # Optional. Configuration for overriding threats actions by severity match.
295
313
{ # Defines what action to take for a specific severity match.
"customInterceptProfile": { # CustomInterceptProfile defines the Packet Intercept Endpoint Group used to intercept traffic to a third-party firewall in a Firewall rule. # The custom TPPI configuration for the SecurityProfile.
341
-
"interceptEndpointGroup": "A String", # Required. The InterceptEndpointGroup to which traffic associated with the SP should be mirrored.
358
+
"customInterceptProfile": { # CustomInterceptProfile defines in-band integration behavior (intercept). It is used by firewall rules with an APPLY_SECURITY_PROFILE_GROUP action. # The custom TPPI configuration for the SecurityProfile.
359
+
"interceptEndpointGroup": "A String", # Required. The target InterceptEndpointGroup. When a firewall rule with this security profile attached matches a packet, the packet will be intercepted to the location-local target in this group.
342
360
},
343
-
"customMirroringProfile": { # CustomMirroringProfile defines an action for mirroring traffic to a collector's EndpointGroup # The custom Packet Mirroring v2 configuration for the SecurityProfile.
344
-
"mirroringEndpointGroup": "A String", # Required. The MirroringEndpointGroup to which traffic associated with the SP should be mirrored.
361
+
"customMirroringProfile": { # CustomMirroringProfile defines out-of-band integration behavior (mirroring). It is used by mirroring rules with a MIRROR action. # The custom Packet Mirroring v2 configuration for the SecurityProfile.
362
+
"mirroringEndpointGroup": "A String", # Required. The target MirroringEndpointGroup. When a mirroring rule with this security profile attached matches a packet, a replica will be mirrored to the location-local target in this group.
345
363
},
346
364
"description": "A String", # Optional. An optional description of the profile. Max length 512 characters.
347
365
"etag": "A String", # Output only. This checksum is computed by the server based on the value of other fields, and may be sent on update and delete requests to ensure the client has an up-to-date value before proceeding.
@@ -350,6 +368,12 @@ <h3>Method Details</h3>
350
368
},
351
369
"name": "A String", # Immutable. Identifier. Name of the SecurityProfile resource. It matches pattern `projects|organizations/*/locations/{location}/securityProfiles/{security_profile}`.
352
370
"threatPreventionProfile": { # ThreatPreventionProfile defines an action for specific threat signatures or severity levels. # The threat prevention configuration for the SecurityProfile.
371
+
"antivirusOverrides": [ # Optional. Configuration for overriding antivirus actions per protocol.
372
+
{ # Defines what action to take for antivirus threats per protocol.
373
+
"action": "A String", # Required. Threat action override. For some threat types, only a subset of actions applies.
374
+
"protocol": "A String", # Required. Protocol to match.
375
+
},
376
+
],
353
377
"severityOverrides": [ # Optional. Configuration for overriding threats actions by severity match.
354
378
{ # Defines what action to take for a specific severity match.
0 commit comments