| apply-advanced |
apply-groups apply-groups-except apply-macro |
Apply advanced configuration logic |
| apply-macro-type |
name data |
Macro data for commit-script expansion |
| certificate-object |
name apply-groups apply-groups-except apply-macrocertificate |
|
| chain-member-type |
name apply-groups apply-groups-except apply-macroattack-type |
Chain member |
| custom-attack-group-type |
name apply-groups apply-groups-except apply-macroattack-group-description group-members |
Define custom attack group |
| custom-attack-type |
name apply-groups apply-groups-except apply-macroattack-description recommended-action severity time-binding detection-filter attack-type |
Define custom attack |
| dynamic-attack-group-type |
name apply-groups apply-groups-except apply-macroattack-group-description filters |
Define dynamic attack group |
| gvpn-ike-policy |
name apply-groups apply-groups-except apply-macromode description proposals certificate proposal-set pre-shared-key |
|
| gvpn-member |
apply-groups apply-groups-except apply-macroike ipsec |
|
| gvpn-member-ike |
apply-groups apply-groups-except apply-macrotraceoptions proposal policy gateway |
|
| gvpn-member-ike-proposal |
name apply-groups apply-groups-except apply-macrodescription authentication-method dh-group authentication-algorithm encryption-algorithm lifetime-seconds |
|
| gvpn-member-ipsec-vpn |
apply-groups apply-groups-except apply-macrovpn |
|
| idpd-traceoptions-type |
apply-groups apply-groups-except apply-macrono-remote-trace file flag level |
Trace options for idpd |
| idp-policy-type |
name rulebase-ips rulebase-exempt |
|
| ike-policy |
name apply-groups apply-groups-except apply-macromode description proposals local-certificate local-key-pair encoding identity pre-shared-key |
|
| ike-proposal |
name apply-groups apply-groups-except apply-macrodescription authentication-method dh-group authentication-algorithm encryption-algorithm lifetime-seconds |
|
| ipsec_gvpn_addr_object |
apply-groups apply-groups-except apply-macroaddress |
|
| ipsec_gvpn_fail_open_rule_object |
apply-groups apply-groups-except apply-macrorule |
|
| ipsec-gvpn-member-template |
name apply-groups apply-groups-except apply-macroike-gateway group match-direction tunnel-mtu df-bit forward-policy-mismatch fail-open |
Configure a Group VPN |
| ipsec_gvpn_rule_address_object |
name apply-groups apply-groups-except apply-macrosource-address destination-address |
|
| ipsec-internal-sa |
apply-groups apply-groups-except apply-macrodescription manual |
|
| ipsec-policy |
name apply-groups apply-groups-except apply-macrodescription perfect-forward-secrecy proposals proposal-set |
|
| ipsec-proposal |
name apply-groups apply-groups-except apply-macrodescription protocol authentication-algorithm encryption-algorithm lifetime-seconds |
|
| ipsec-sa |
name apply-groups apply-groups-except apply-macrodescription mode sa_choice |
|
| ipsec-template-monitor |
apply-groups apply-groups-except apply-macrooptimized source-interface destination-ip |
Configure VPN monitoring |
| ipsec-template-proxy-id |
apply-groups apply-groups-except apply-macrolocal remote service |
Proxy identity settings |
| ipsec-traceoptions |
apply-groups apply-groups-except apply-macroflag |
Data-plane IPSec tracing options |
| ipsec-trusted-channel-sa |
apply-groups apply-groups-except apply-macrodescription manual |
|
| ipsec-vpn-monitor |
apply-groups apply-groups-except apply-macrointerval threshold |
Configure VPN monitoring |
| ipsec-vpn-template |
name apply-groups apply-groups-except apply-macrobind-interface df-bit vpn-monitor negotiation establish-tunnels |
Configure an IPSec VPN |
| logical-system-type |
name apply-groups apply-groups-except apply-macromax-sessions |
Logical system name |
| log-object |
apply-groups apply-groups-except apply-macroexclude limit cache |
Configure auditable security logs |
| macro-data-type |
name value |
|
| macsec-trace-options |
apply-groups apply-groups-except apply-macrofile flag |
Trace options for MACSec Protocol |
| mka-trace-options |
apply-groups apply-groups-except apply-macrofile flag |
Trace options for MKA protocol |
| port-range |
name maximum-port |
Port ranges |
| proto-object |
name apply-groups apply-groups-except apply-macrotunable-name |
|
| security-authentication-key-chains |
apply-groups apply-groups-except apply-macrokey-chain |
|
| security-group |
security |
|
| security-group-vpn |
apply-groups apply-groups-except apply-macromember |
|
| security-ike |
apply-groups apply-groups-except apply-macrotraceoptions respond-bad-spi proposal policy gateway |
|
| security-ipsec-vpn |
apply-groups apply-groups-except apply-macrotraceoptions vpn-monitor-options proposal policy vpn security-association internal trusted-channel |
|
| security-macsec |
apply-groups apply-groups-except apply-macrotraceoptions connectivity-association interfaces |
|
| security-pki |
apply-groups apply-groups-except apply-macroca-profile trusted-ca-group trap auto-re-enrollment traceoptions |
|
| security-traceoptions |
apply-groups apply-groups-except apply-macrono-remote-trace file rate-limit flag level |
Trace options for key management process |
| tenant-system-type |
name apply-groups apply-groups-except apply-macromax-sessions |
Tenant name |
| tunable-object |
name apply-groups apply-groups-except apply-macrotunable-value |
|
| vendor-object |
name apply-groups apply-groups-except apply-macroproduct-name |
|