Azure Firewall

category: IT Services
provider: Microsoft
commonfields:
  id: Azure Firewall
  version: -1
configuration:
- display: Default Resource Group Name
  name: resource_group
  required: true
  type: 14
  section: Connect
  additionalinfo: The parameter can be saved as 000-000 and added as an argument to each command, but Test button will fail.
- display: Client ID
  defaultvalue: 'f5b37a76-f937-4c57-a9b5-31dab1c7e236'
  name: client_id
  type: 14
  required: false
  section: Connect
- displaypassword: Default Subscription ID
  name: subscription_id
  required: true
  type: 9
  hiddenusername: true
  section: Connect
  additionalinfo: The parameter can be saved as 000-000 and added as an argument to each command, but Test button will fail.
- displaypassword: Tenant ID
  name: tenant_id
  type: 9
  hiddenusername: true
  required: false
  section: Connect
- displaypassword: Client Secret
  name: client_secret
  type: 9
  hiddenusername: true
  required: false
  section: Connect
- additionalinfo: Used for certificate authentication. As appears in the "Certificates & secrets" page of the app.
  display: Certificate Thumbprint
  name: certificate_thumbprint
  type: 14
  required: false
  section: Connect
- additionalinfo: Used for certificate authentication. The private key of the registered certificate.
  display: Private Key
  name: private_key
  type: 14
  hiddenusername: true
  required: false
  section: Connect
- additionalinfo: Relevant only if the integration is running on Azure VM. If selected, authenticates based on the value provided for the Azure Managed Identities Client ID field. If no value is provided for the Azure Managed Identities Client ID field, authenticates based on the System Assigned Managed Identity. For additional information, see the Help tab.
  display: Use Azure Managed Identities
  name: use_managed_identities
  type: 8
  required: false
  section: Connect
  advanced: true
- additionalinfo: The Managed Identities client ID for authentication - relevant only if the integration is running on Azure VM.
  displaypassword: Azure Managed Identities Client ID
  name: managed_identities_client_id
  hiddenusername: true
  type: 9
  required: false
  section: Connect
  advanced: true
- display: Use system proxy settings
  name: proxy
  required: false
  type: 8
  section: Connect
  advanced: true
- display: Trust any certificate (not secure)
  name: insecure
  type: 8
  required: false
  section: Connect
  advanced: true
description: Azure Firewall is a cloud-native and intelligent network firewall security service that provides breed threat protection for cloud workloads running in Azure. It's a fully stateful, firewall as a service, with built-in high availability and unrestricted cloud scalability.
display: Azure Firewall
name: Azure Firewall
script:
  commands:
  - description: Tests the connectivity to Azure.
    name: azure-firewall-auth-test
  - description: Run this command to start the authorization process and follow the instructions in the command results.
    name: azure-firewall-auth-start
  - description: Run this command to complete the authorization process. Should be used after running the azure-firewall-auth-start command.
    name: azure-firewall-auth-complete
  - description: Run this command if for some reason you need to rerun the authentication process.
    name: azure-firewall-auth-reset
  - arguments:
    - auto: PREDEFINED
      defaultValue: resource_group
      description: The resource that contains the firewalls to list.
      name: resource
      predefined:
      - resource_group
      - subscription
      required: true
    - defaultValue: '50'
      description: The maximum number of results to retrieve. Minimum value is 1.
      name: limit
    - defaultValue: '1'
      description: The page number of the results to retrieve. Minimum value is 1.
      name: page
    - name: subscription_id
      description: "The subscription ID. Note: This argument will override the instance parameter ‘Default Subscription ID'."
    - name: resource_group_name
      description: "The name of the resource group. Note: This argument will override the instance parameter ‘Default Resource Group Name'."
    description: List Azure firewalls in the specified resource group or subscription.
    name: azure-firewall-list
    outputs:
    - contextPath: AzureFirewall.Firewall.id
      description: Firewall resource ID.
      type: String
    - contextPath: AzureFirewall.Firewall.name
      description: Firewall resource name.
      type: String
    - contextPath: AzureFirewall.Firewall.location
      description: Firewall resource location.
      type: String
  - arguments:
    - description: Comma-separated list of firewall names to retrieve.
      isArray: true
      name: firewall_names
      required: true
    - auto: PREDEFINED
      defaultValue: 'True'
      description: Indicates if the command was scheduled.
      name: polling
      predefined:
      - 'True'
      - 'False'
    - defaultValue: '30'
      description: Indicates how long to wait between command executions (in seconds) when the 'polling' argument is true. Minimum value is 10 seconds.
      name: interval
    - defaultValue: '60'
      description: Indicates the time in seconds until the polling sequence times out.
      name: timeout
    - name: subscription_id
      description: "The subscription ID. Note: This argument will override the instance parameter ‘Default Subscription ID'."
    - name: resource_group_name
      description: "The name of the resource group. Note: This argument will override the instance parameter ‘Default Resource Group Name'."
    description: Retrieve Azure firewall information.
    name: azure-firewall-get
    polling: true
    outputs:
    - contextPath: AzureFirewall.Firewall.id
      description: Firewall resource ID.
      type: String
    - contextPath: AzureFirewall.Firewall.name
      description: Firewall resource name.
      type: String
    - contextPath: AzureFirewall.Firewall.location
      description: Firewall resource location.
      type: String
  - arguments:
    - description: The name of the Azure firewall that contains the collections.
      name: firewall_name
    - description: The name of the Azure policy that contains the collections.
      name: policy
    - auto: PREDEFINED
      description: The names of the rule collection type to retrieve.
      name: rule_type
      predefined:
      - application_rule
      - network_rule
      - nat_rule
      required: true
    - defaultValue: '50'
      description: The maximum number of results to retrieve. Minimum value is 1.
      name: limit
    - defaultValue: '1'
      description: The page number of the results to retrieve. Minimum value is 1.
      name: page
    - name: subscription_id
      description: "The subscription ID. Note: This argument will override the instance parameter ‘Default Subscription ID'."
    - name: resource_group_name
      description: "The name of the resource group. Note: This argument will override the instance parameter ‘Default Resource Group Name'."
    description: List the collection rules in the firewall or policy. One of the arguments 'firewall_name' or 'policy' must be provided.
    name: azure-firewall-rule-collection-list
    outputs:
    - contextPath: AzureFirewall.RuleCollection.name
      description: Rule collection unique name.
      type: String
  - arguments:
    - description: The name of the Azure firewall that contains the rules.
      name: firewall_name
    - description: The name of the Azure policy that contains the rules.
      name: policy
    - auto: PREDEFINED
      description: The names of the rule types to retrieve. Required when the "firewall_name" argument is provided.
      name: rule_type
      predefined:
      - application_rule
      - network_rule
      - nat_rule
    - description: The name of the rule collection that contains the rules.
      name: collection_name
      required: true
    - defaultValue: '50'
      description: The maximum number of results to retrieve. Minimum value is 1.
      name: limit
    - defaultValue: '1'
      description: The page number of the results to retrieve. Minimum value is 1.
      name: page
    - name: subscription_id
      description: "The subscription ID. Note: This argument will override the instance parameter ‘Default Subscription ID'."
    - name: resource_group_name
      description: "The name of the resource group. Note: This argument will override the instance parameter ‘Default Resource Group Name'."
    description: List rules in the firewall or in the policy. One of the arguments 'firewall_name' or 'policy' must be provided.
    name: azure-firewall-rule-list
    outputs:
    - contextPath: AzureFirewall.Rule.name
      description: Rule name.
      type: String
  - arguments:
    - description: The name of the firewall that contains the rule.
      name: firewall_name
    - description: The name of the Azure policy that contains the rules.
      name: policy
    - auto: PREDEFINED
      description: The name of the rule type collection that contains the rule. Required when the "firewall_name" argument is provided.
      name: rule_type
      predefined:
      - application_rule
      - network_rule
      - nat_rule
    - description: The name of the rule collection that contains the rule.
      name: collection_name
      required: true
    - description: The name of the rule to retrieve.
      name: rule_name
      required: true
    - name: subscription_id
      description: "The subscription ID. Note: This argument will override the instance parameter ‘Default Subscription ID'."
    - name: resource_group_name
      description: "The name of the resource group. Note: This argument will override the instance parameter ‘Default Resource Group Name'."
    description: Retrieve rule information. One of the arguments 'firewall_name' or 'policy' must be provided.
    name: azure-firewall-rule-get
    outputs:
    - contextPath: AzureFirewall.Rule.name
      description: Rule name.
      type: String
  - arguments:
    - description: The name of the Azure policy to create.
      name: policy_name
      required: true
    - auto: PREDEFINED
      defaultValue: Turned-off
      description: The operation mode for threat intelligence.
      name: threat_intelligence_mode
      predefined:
      - Alert
      - Deny
      - Turned-off
      required: true
    - description: Comma-separated list of IP addresses for the threat intelligence whitelist.
      isArray: true
      name: ips
    - description: 'Comma-separated list of fully qualified domain names for the threat intelligence whitelist. For example : *.microsoft.com,email.college.edu .'
      isArray: true
      name: domains
    - auto: PREDEFINED
      description: Policy resource region location.
      name: location
      predefined:
      - northcentralus
      - eastus
      - northeurope
      - westeurope
      - eastasia
      - southeastasia
      - eastus2
      - centralus
      - southcentralus
      - westus
      - japaneast
      - japanwest
      - australiaeast
      - australiasoutheast
      - brazilsouth
      - centralindia
      - southindia
      - westindia
      - canadacentral
      - canadaeast
      - uksouth
      - ukwest
      - westcentralus
      - westus2
      - koreacentral
      - francecentral
      - australiacentral
      - uaenorth
      - southafricanorth
      - switzerlandnorth
      - germanywestcentral
      - norwayeast
      - westus3
      - jioindiawest
      required: true
    - auto: PREDEFINED
      defaultValue: Standard
      description: Tier of an Azure policy.
      name: tier
      predefined:
      - Standard
      - Premium
      required: true
    - description: The ID of the parent firewall policy from which rules are inherited.
      name: base_policy_id
    - auto: PREDEFINED
      defaultValue: 'False'
      description: Whether to enable the DNS proxy on firewalls attached to the firewall policy.
      name: enable_proxy
      predefined:
      - 'True'
      - 'False'
    - description: Comma-separated list of custom DNS servers.
      isArray: true
      name: dns_servers
    - defaultValue: '30'
      description: Indicates how long to wait between command executions (in seconds) when the 'polling' argument is true. Minimum value is 10 seconds.
      name: interval
    - defaultValue: '60'
      description: Indicates the time in seconds until the polling sequence times out.
      name: timeout
    - name: subscription_id
      description: "The subscription ID. Note: This argument will override the instance parameter ‘Default Subscription ID'."
    - name: resource_group_name
      description: "The name of the resource group. Note: This argument will override the instance parameter ‘Default Resource Group Name'."
    description: Create a firewall policy. This command only creates the policy resource. In order to attach the policy to a firewall, run the 'azure-firewall-policy-attach' command.
    name: azure-firewall-policy-create
    polling: true
    outputs:
    - contextPath: AzureFirewall.Policy.id
      description: Policy resource ID.
      type: String
    - contextPath: AzureFirewall.Policy.name
      description: Policy resource name.
      type: String
  - arguments:
    - description: The name of the Azure policy to update.
      name: policy_name
      required: true
    - auto: PREDEFINED
      description: The operation mode for threat intelligence.
      name: threat_intelligence_mode
      predefined:
      - Alert
      - Deny
      - Turned-off
    - description: Comma-separated list of IP addresses for the threat intelligence whitelist.
      isArray: true
      name: ips
    - description: 'Comma-separated list of fully qualified domain names for the threat intelligence whitelist. For example : *.microsoft.com,email.college.edu .'
      isArray: true
      name: domains
    - description: The ID of the parent firewall policy from which rules are inherited.
      name: base_policy_id
    - auto: PREDEFINED
      description: Whether to enable the DNS Proxy on Firewalls attached to the Firewall Policy.
      name: enable_proxy
      predefined:
      - 'True'
      - 'False'
    - description: Comma-separated list of custom DNS servers.
      isArray: true
      name: dns_servers
    - defaultValue: '30'
      description: Indicates how long to wait between command executions (in seconds) when the 'polling' argument is true. Minimum value is 10 seconds.
      name: interval
    - defaultValue: '60'
      description: Indicates the time in seconds until the polling sequence times out.
      name: timeout
    - name: subscription_id
      description: "The subscription ID. Note: This argument will override the instance parameter ‘Default Subscription ID'."
    - name: resource_group_name
      description: "The name of the resource group. Note: This argument will override the instance parameter ‘Default Resource Group Name'."
    description: Update the policy resource. The command will update the provided arguments.
    polling: true
    name: azure-firewall-policy-update
    outputs:
    - contextPath: AzureFirewall.Policy.id
      description: Policy resource ID.
      type: String
    - contextPath: AzureFirewall.Policy.name
      description: Policy resource name.
      type: String
  - arguments:
    - description: Comma-separated list of policy names to retrieve.
      isArray: true
      name: policy_names
      required: true
    - auto: PREDEFINED
      defaultValue: 'True'
      description: Indicates if the command was scheduled.
      name: polling
      predefined:
      - 'True'
      - 'False'
    - defaultValue: '30'
      description: Indicates how long to wait between command executions (in seconds) when the 'polling' argument is true. Minimum value is 10 seconds.
      name: interval
    - defaultValue: '60'
      description: Indicates the time in seconds until the polling sequence times out.
      name: timeout
    - name: subscription_id
      description: "The subscription ID. Note: This argument will override the instance parameter ‘Default Subscription ID'."
    - name: resource_group_name
      description: "The name of the resource group. Note: This argument will override the instance parameter ‘Default Resource Group Name'."
    description: Retrieve policy information.
    polling: true
    name: azure-firewall-policy-get
    outputs:
    - contextPath: AzureFirewall.Policy.id
      description: Policy resource ID.
      type: String
    - contextPath: AzureFirewall.Policy.name
      description: Policy resource name.
      type: String
  - arguments:
    - description: Comma-separated list of policy names to delete.
      isArray: true
      name: policy_names
      required: true
    - name: subscription_id
      description: "The subscription ID. Note: This argument will override the instance parameter ‘Default Subscription ID'."
    - name: resource_group_name
      description: "The name of the resource group. Note: This argument will override the instance parameter ‘Default Resource Group Name'."
    description: Delete policy resource.
    name: azure-firewall-policy-delete
  - arguments:
    - auto: PREDEFINED
      defaultValue: resource_group
      description: The resource that contains the policies to list.
      name: resource
      predefined:
      - resource_group
      - subscription
      required: true
    - defaultValue: '50'
      description: The maximum number of results to retrieve. Minimum value is 1.
      name: limit
    - defaultValue: '1'
      description: The page number of the results to retrieve. Minimum value is 1.
      name: page
    - name: subscription_id
      description: "The subscription ID. Note: This argument will override the instance parameter ‘Default Subscription ID'."
    - name: resource_group_name
      description: "The name of the resource group. Note: This argument will override the instance parameter ‘Default Resource Group Name'."
    description: List the policy in the resource group or subscription.
    name: azure-firewall-policy-list
    outputs:
    - contextPath: AzureFirewall.Policy.id
      description: Policy resource ID.
      type: String
    - contextPath: AzureFirewall.Policy.name
      description: Policy resource name.
      type: String
  - arguments:
    - description: Comma-separated list of firewall names to which the policy will be attached.
      isArray: true
      name: firewall_names
      required: true
    - description: The ID of the policy to attach.
      name: policy_id
      required: true
    - defaultValue: '30'
      description: Indicates how long to wait between command executions (in seconds) when the 'polling' argument is true. Minimum value is 10 seconds.
      name: interval
    - defaultValue: '60'
      description: Indicates the time in seconds until the polling sequence times out.
      name: timeout
    - name: subscription_id
      description: "The subscription ID. Note: This argument will override the instance parameter ‘Default Subscription ID'."
    - name: resource_group_name
      description: "The name of the resource group. Note: This argument will override the instance parameter ‘Default Resource Group Name'."
    description: Attach a policy to a firewall. The policy and firewall have to belong to the same tier.
    polling: true
    name: azure-firewall-policy-attach
    outputs:
    - contextPath: AzureFirewall.Firewall.id
      description: Firewall resource ID.
      type: String
    - contextPath: AzureFirewall.Firewall.name
      description: Firewall resource name.
      type: String
    - contextPath: AzureFirewall.Firewall.location
      description: Firewall resource location.
      type: String
  - arguments:
    - description: Comma-separated list of firewall names from which the policy will be removed.
      isArray: true
      name: firewall_names
      required: true
    - defaultValue: '30'
      description: Indicates how long to wait between command executions (in seconds) when the 'polling' argument is true. Minimum value is 10 seconds.
      name: interval
    - defaultValue: '60'
      description: Indicates the time in seconds until the polling sequence times out.
      name: timeout
    - name: subscription_id
      description: "The subscription ID. Note: This argument will override the instance parameter ‘Default Subscription ID'."
    - name: resource_group_name
      description: "The name of the resource group. Note: This argument will override the instance parameter ‘Default Resource Group Name'."
    description: Remove a policy from the firewall. This command will detach the policy and firewall, but will not delete the policy.
    polling: true
    name: azure-firewall-policy-detach
    outputs:
    - contextPath: AzureFirewall.Firewall.id
      description: Firewall resource ID.
      type: String
    - contextPath: AzureFirewall.Firewall.name
      description: Firewall resource name.
      type: String
    - contextPath: AzureFirewall.Firewall.location
      description: Firewall resource location.
      type: String
  - arguments:
    - description: The name of the firewall that contains the collection.
      name: firewall_name
    - description: The name of the policy that contains the collection.
      name: policy
    - description: The name of the network rule collection to create.
      name: collection_name
      required: true
    - description: The priority of the network rule collection resource. Minimum value is 100, maximum value is 65000.
      name: collection_priority
      required: true
    - auto: PREDEFINED
      description: The action type of a rule collection.
      name: action
      predefined:
      - Allow
      - Deny
      required: true
    - description: The name of the network rule to create.
      name: rule_name
      required: true
    - description: The description of the created rule.
      name: description
      required: true
    - auto: PREDEFINED
      description: Comma-separated list of protocols for the created rule.
      isArray: true
      name: protocols
      predefined:
      - TCP
      - UDP
      - ICMP
      - Any
      required: true
    - auto: PREDEFINED
      description: Rule source type.
      name: source_type
      predefined:
      - ip_address
      - ip_group
      required: true
    - description: Comma-separated list of source IP addresses for the created rule. Must be provided when the 'source_type' argument is assigned to 'ip_address'.
      isArray: true
      name: source_ips
    - description: Comma-separated list of source IP group IDs for the created rule. Must be provided when the 'source_type' argument is assigned to 'ip_group'.
      isArray: true
      name: source_ip_group_ids
    - auto: PREDEFINED
      description: Rule destination type.
      name: destination_type
      predefined:
      - ip_address
      - ip_group
      - service_tag
      - fqdn
      required: true
    - description: Comma-separated list of destinations for the created rule. Must be consistent with the provided 'destination_type' argument. Supports IP addresses, service tag names, IP group IDs and FQDN addresses.
      isArray: true
      name: destinations
      required: true
    - description: Comma-separated list of destination ports.
      isArray: true
      name: destination_ports
      required: true
    - defaultValue: '30'
      description: Indicates how long to wait between command executions (in seconds) when the 'polling' argument is true. Minimum value is 10 seconds.
      name: interval
    - defaultValue: '60'
      description: Indicates the time in seconds until the polling sequence times out.
      name: timeout
    - name: subscription_id
      description: "The subscription ID. Note: This argument will override the instance parameter ‘Default Subscription ID'."
    - name: resource_group_name
      description: "The name of the resource group. Note: This argument will override the instance parameter ‘Default Resource Group Name'."
    description: Create a network rule collection in a firewall or policy. The command will return firewall or policy rule collection resource information. One of the arguments 'firewall_name' or 'policy'  must be provided.
    polling: true
    name: azure-firewall-network-rule-collection-create
  - arguments:
    - description: The name of the firewall that contains the collection.
      name: firewall_name
    - description: The name of the policy the contains the collection.
      name: policy
    - description: The name of the network rule collection to delete.
      name: collection_name
      required: true
    - defaultValue: '30'
      description: Indicates how long to wait between command executions (in seconds) when the 'polling' argument is true. Minimum value is 10 seconds.
      name: interval
    - defaultValue: '60'
      description: Indicates the time in seconds until the polling sequence times out.
      name: timeout
    - name: subscription_id
      description: "The subscription ID. Note: This argument will override the instance parameter ‘Default Subscription ID'."
    - name: resource_group_name
      description: "The name of the resource group. Note: This argument will override the instance parameter ‘Default Resource Group Name'."
    description: Delete a network rule collection from the firewall or policy. One of the arguments 'firewall_name' or 'policy'  must be provided.
    polling: true
    name: azure-firewall-network-rule-collection-delete
  - arguments:
    - description: The name of the firewall that contains the collection.
      name: firewall_name
    - description: The name of the policy that contains the collection.
      name: policy
    - description: The name of the network rule collection that contains the rule.
      name: collection_name
      required: true
    - description: The name of the network rule to create.
      name: rule_name
      required: true
    - description: The description of the created rule.
      name: description
      required: true
    - auto: PREDEFINED
      description: Comma-separated list of protocols for the created rule.
      isArray: true
      name: protocols
      predefined:
      - TCP
      - UDP
      - ICMP
      - Any
      required: true
    - auto: PREDEFINED
      description: Rule source type.
      name: source_type
      predefined:
      - ip_address
      - ip_group
      required: true
    - description: Comma-separated list of source IP addresses for the created rule. Must be provided when the 'source_type' argument is assigned to 'ip_address'.
      isArray: true
      name: source_ips
    - description: Comma-separated list of source IP group IDs for the created rule. Must be provided when the 'source_type' argument is assigned to 'ip_group'.
      isArray: true
      name: source_ip_group_ids
    - auto: PREDEFINED
      description: Rule destination type.
      name: destination_type
      predefined:
      - ip_address
      - ip_group
      - service_tag
      - fqdn
      required: true
    - description: Comma-separated list of destinations for the created rule. Must be consistent with the provided 'destination_type' argument. Supports IP addresses, service tag names, IP group IDs and FQDN addresses.
      isArray: true
      name: destinations
      required: true
    - description: Comma-separated list of destination ports.
      isArray: true
      name: destination_ports
      required: true
    - defaultValue: '30'
      description: Indicates how long to wait between command executions (in seconds) when the 'polling' argument is true. Minimum value is 10 seconds.
      name: interval
    - defaultValue: '60'
      description: Indicates the time in seconds until the polling sequence times out.
      name: timeout
    - name: subscription_id
      description: "The subscription ID. Note: This argument will override the instance parameter ‘Default Subscription ID'."
    - name: resource_group_name
      description: "The name of the resource group. Note: This argument will override the instance parameter ‘Default Resource Group Name'."
    description: Create a network rule in the firewall or policy rule collection. One of the arguments 'firewall_name' or 'policy'  must be provided.
    polling: true
    name: azure-firewall-network-rule-create
  - arguments:
    - description: The name of the firewall that contains the collection.
      name: firewall_name
    - description: The name of the policy that contains the collection.
      name: policy
    - description: The name of the network rule collection to update.
      name: collection_name
      required: true
    - description: The name of the network rule to update.
      name: rule_name
      required: true
    - description: The new description of the rule.
      name: description
    - auto: PREDEFINED
      description: Comma-separated list of protocols for the rule.
      isArray: true
      name: protocols
      predefined:
      - TCP
      - UDP
      - ICMP
      - Any
    - auto: PREDEFINED
      description: Rule source type.
      name: source_type
      predefined:
      - ip_address
      - ip_group
    - description: Comma-separated list of source IP addresses for the created rule. Must be provided when the 'source_type' argument is assigned to 'ip_address'.
      isArray: true
      name: source_ips
    - description: Comma-separated list of source IP group IDs for the created rule. Must be provided when the 'source_type' argument is assigned to 'ip_group'.
      isArray: true
      name: source_ip_group_ids
    - auto: PREDEFINED
      description: Rule destination type. Must be provided when the 'destinations' argument is provided.
      name: destination_type
      predefined:
      - ip_address
      - ip_group
      - service_tag
      - fqdn
    - description: Comma-separated list of destinations for the created rule. Must be consistent with the provided 'destination_type' argument. Supports IP addresses, service tag names, IP group IDs and FQDN addresses.
      isArray: true
      name: destinations
    - description: Comma-separated list of destination ports.
      isArray: true
      name: destination_ports
    - defaultValue: '30'
      description: Indicates how long to wait between command executions (in seconds) when the 'polling' argument is true. Minimum value is 10 seconds.
      name: interval
    - defaultValue: '60'
      description: Indicates the time in seconds until the polling sequence times out.
      name: timeout
    - name: subscription_id
      description: "The subscription ID. Note: This argument will override the instance parameter ‘Default Subscription ID'."
    - name: resource_group_name
      description: "The name of the resource group. Note: This argument will override the instance parameter ‘Default Resource Group Name'."
    description: Update the network rule in the firewall. The provided arguments will replace the existing rule configuration. One of the arguments 'firewall_name' or 'policy'  must be provided. The command will not replace the rule source or destination types.
    polling: true
    name: azure-firewall-network-rule-update
  - arguments:
    - description: The name of the firewall that contains the collection.
      name: firewall_name
    - description: The name of the policy that contains the collection.
      name: policy
    - description: The name of the network rule collection to update.
      name: collection_name
      required: true
    - description: Comma-separated list of network rule names to delete from the collection.
      isArray: true
      name: rule_names
      required: true
    - defaultValue: '30'
      description: Indicates how long to wait between command executions (in seconds) when the 'polling' argument is true. Minimum value is 10 seconds.
      name: interval
    - defaultValue: '60'
      description: Indicates the time in seconds until the polling sequence times out.
      name: timeout
    - name: subscription_id
      description: "The subscription ID. Note: This argument will override the instance parameter ‘Default Subscription ID'."
    - name: resource_group_name
      description: "The name of the resource group. Note: This argument will override the instance parameter ‘Default Resource Group Name'."
    description: Delete a network rule from the collection. One of the arguments 'firewall_name' or 'policy'  must be provided.
    polling: true
    name: azure-firewall-network-rule-delete
  - arguments:
    - description: The name of the firewall that contains the collection.
      name: firewall_name
    - description: The name of the policy that contains the collection.
      name: policy
    - description: The name of the network rule collection to update.
      name: collection_name
      required: true
    - description: The priority of the network rule collection resource. Minimum value is 100, maximum value us 65000.
      name: priority
    - auto: PREDEFINED
      description: The action type of a rule collection.
      name: action
      predefined:
      - Allow
      - Deny
    - defaultValue: '30'
      description: Indicates how long to wait between command executions (in seconds) when the 'polling' argument is true. Minimum value is 10 seconds.
      name: interval
    - defaultValue: '60'
      description: Indicates the time in seconds until the polling sequence times out.
      name: timeout
    - name: subscription_id
      description: "The subscription ID. Note: This argument will override the instance parameter ‘Default Subscription ID'."
    - name: resource_group_name
      description: "The name of the resource group. Note: This argument will override the instance parameter ‘Default Resource Group Name'."
    description: Update a network rule collection in a firewall or policy. The command will update the provided arguments. One of the arguments 'firewall_name' or 'policy'  must be provided. The command will return firewall or policy rule collection resource information.
    polling: true
    name: azure-firewall-network-rule-collection-update
  - arguments:
    - auto: PREDEFINED
      description: The location that will be used as a reference for a version (not as a filter based on location, the command will retrieve the list of service tags with prefix details across all regions but limited to the cloud that your subscription belongs to).
      name: location
      predefined:
      - northcentralus
      - eastus
      - northeurope
      - westeurope
      - eastasia
      - southeastasia
      - eastus2
      - centralus
      - southcentralus
      - westus
      - japaneast
      - japanwest
      - australiaeast
      - australiasoutheast
      - brazilsouth
      - centralindia
      - southindia
      - westindia
      - canadacentral
      - canadaeast
      - uksouth
      - ukwest
      - westcentralus
      - westus2
      - koreacentral
      - francecentral
      - australiacentral
      - uaenorth
      - southafricanorth
      - switzerlandnorth
      - germanywestcentral
      - norwayeast
      - westus3
      - jioindiawest
      required: true
    - defaultValue: '50'
      description: The maximum number of results to retrieve. Minimum value is 1.
      name: limit
    - defaultValue: '1'
      description: The page number of the results to retrieve. Minimum value is 1.
      name: page
    - name: subscription_id
      description: "The subscription ID. Note: This argument will override the instance parameter ‘Default Subscription ID'."
    - name: resource_group_name
      description: "The name of the resource group. Note: This argument will override the instance parameter ‘Default Resource Group Name'."
    description: Retrieve service tags information.
    name: azure-firewall-service-tag-list
  - arguments:
    - description: The name of the IP group resource to create.
      name: ip_group_name
      required: true
    - description: Comma-separated list of IP addresses or IP address prefixes in the IP group resource.
      isArray: true
      name: ips
    - auto: PREDEFINED
      description: The location of the IP group resource.
      name: location
      predefined:
      - northcentralus
      - eastus
      - northeurope
      - westeurope
      - eastasia
      - southeastasia
      - eastus2
      - centralus
      - southcentralus
      - westus
      - japaneast
      - japanwest
      - australiaeast
      - australiasoutheast
      - brazilsouth
      - centralindia
      - southindia
      - westindia
      - canadacentral
      - canadaeast
      - uksouth
      - ukwest
      - westcentralus
      - westus2
      - koreacentral
      - francecentral
      - australiacentral
      - uaenorth
      - southafricanorth
      - switzerlandnorth
      - germanywestcentral
      - norwayeast
      - westus3
      - jioindiawest
      required: true
    - defaultValue: '30'
      description: Indicates how long to wait between command executions (in seconds) when the 'polling' argument is true. Minimum value is 10 seconds.
      name: interval
    - defaultValue: '60'
      description: Indicates the time in seconds until the polling sequence times out.
      name: timeout
    - name: subscription_id
      description: "The subscription ID. Note: This argument will override the instance parameter ‘Default Subscription ID'."
    - name: resource_group_name
      description: "The name of the resource group. Note: This argument will override the instance parameter ‘Default Resource Group Name'."
    description: Create an IP group.
    polling: true
    name: azure-firewall-ip-group-create
    outputs:
    - contextPath: AzureFirewall.IPGroup.id
      description: IP group resource ID.
      type: String
    - contextPath: AzureFirewall.IPGroup.name
      description: IP group resource name.
      type: String
    - contextPath: AzureFirewall.IPGroup.properties.ipAddresses
      description: List of IP addresses or IP address prefixes in the IP groups resource.
      type: String
  - arguments:
    - description: The name of the IP group resource to update.
      name: ip_group_name
      required: true
    - description: Comma-separated list of IP addresses or IP address prefixes to add to the IP group resource.
      isArray: true
      name: ips_to_add
    - description: Comma-separated list of IP addresses or IP address prefixes to remove from the IP group resource.
      isArray: true
      name: ips_to_remove
    - defaultValue: '30'
      description: Indicates how long to wait between command executions (in seconds) when the 'polling' argument is true. Minimum value is 10 seconds.
      name: interval
    - defaultValue: '60'
      description: Indicates the time in seconds until the polling sequence times out.
      name: timeout
    - name: subscription_id
      description: "The subscription ID. Note: This argument will override the instance parameter ‘Default Subscription ID'."
    - name: resource_group_name
      description: "The name of the resource group. Note: This argument will override the instance parameter ‘Default Resource Group Name'."
    description: Update an IP group. Add or remove IP addresses from the group.
    polling: true
    name: azure-firewall-ip-group-update
    outputs:
    - contextPath: AzureFirewall.IPGroup.id
      description: IP group resource ID.
      type: String
    - contextPath: AzureFirewall.IPGroup.name
      description: IP group resource name.
      type: String
    - contextPath: AzureFirewall.IPGroup.properties.ipAddresses
      description: List of IP addresses or IP address prefixes in the IP groups resource.
      type: String
  - arguments:
    - auto: PREDEFINED
      defaultValue: resource_group
      description: The resource that contains the IP groups to list.
      name: resource
      predefined:
      - resource_group
      - subscription
      required: true
    - defaultValue: '50'
      description: The maximum number of results to retrieve. Minimum value is 1.
      name: limit
    - defaultValue: '1'
      description: The page number of the results to retrieve. Minimum value is 1.
      name: page
    - name: subscription_id
      description: "The subscription ID. Note: This argument will override the instance parameter ‘Default Subscription ID'."
    - name: resource_group_name
      description: "The name of the resource group. Note: This argument will override the instance parameter ‘Default Resource Group Name'."
    description: List IP groups in a resource group or subscription.
    name: azure-firewall-ip-group-list
    outputs:
    - contextPath: AzureFirewall.IPGroup.id
      description: IP group resource ID.
      type: String
    - contextPath: AzureFirewall.IPGroup.name
      description: IP group resource name.
      type: String
    - contextPath: AzureFirewall.IPGroup.properties.ipAddresses
      description: List of IP addresses or IP address prefixes in the IP groups resource.
      type: String
  - arguments:
    - description: Comma-separated list of IP group names resource to retrieve.
      name: ip_group_names
      required: true
    - auto: PREDEFINED
      defaultValue: 'True'
      description: Indicates if the command was scheduled.
      name: polling
      predefined:
      - 'True'
      - 'False'
    - defaultValue: '30'
      description: Indicates how long to wait between command executions (in seconds) when the 'polling' argument is true. Minimum value is 10 seconds.
      name: interval
    - defaultValue: '60'
      description: Indicates the time in seconds until the polling sequence times out.
      name: timeout
    - name: subscription_id
      description: "The subscription ID. Note: This argument will override the instance parameter ‘Default Subscription ID'."
    - name: resource_group_name
      description: "The name of the resource group. Note: This argument will override the instance parameter ‘Default Resource Group Name'."
    description: Retrieve IP group information.
    polling: true
    name: azure-firewall-ip-group-get
    outputs:
    - contextPath: AzureFirewall.IPGroup.id
      description: IP group resource ID.
      type: String
    - contextPath: AzureFirewall.IPGroup.name
      description: IP group resource name.
      type: String
    - contextPath: AzureFirewall.IPGroup.properties.ipAddresses
      description: List of IP addresses or IP address prefixes in the IP groups resource.
      type: String
  - arguments:
    - description: Comma-separated list of IP group names resource to delete.
      isArray: true
      name: ip_group_names
      required: true
    - name: subscription_id
      description: "The subscription ID. Note: This argument will override the instance parameter ‘Default Subscription ID'."
    - name: resource_group_name
      description: "The name of the resource group. Note: This argument will override the instance parameter ‘Default Resource Group Name'."
    description: Delete an IP group resource.
    name: azure-firewall-ip-group-delete
  - name: azure-firewall-subscriptions-list
    description: List all subscriptions for a tenant.
    outputs:
    - contextPath: AzureFirewall.Subscription.authorizationSource
      description: The authorization source of the request.
      type: String
    - contextPath: AzureFirewall.Subscription.displayName
      description: The subscription display name.
      type: String
    - contextPath: AzureFirewall.Subscription.id
      description: The fully qualified ID for the subscription. For example, /subscriptions/8d65815f-a5b6-402f-9298-045155da7d74.
      type: String
    - contextPath: AzureFirewall.Subscription.managedByTenants
      description: An array containing the tenants managing the subscription.
      type: Unknown
    - contextPath: AzureFirewall.Subscription.state
      description: The subscription state. Possible values are Enabled, Warned, PastDue, Disabled, and Deleted.
      type: Unknown
    - contextPath: AzureFirewall.Subscription.subscriptionId
      description: The subscription ID.
      type: String
    - contextPath: AzureFirewall.Subscription.subscriptionPolicies
      description: The subscription policies.
      type: Unknown
    - contextPath: AzureFirewall.Subscription.tags
      description: The tags attached to the subscription.
      type: Object
    - contextPath: AzureFirewall.Subscription.tenantId
      description: The subscription tenant ID.
      type: String
  - name: azure-firewall-resource-group-list
    description: List all resource groups for a subscription.
    arguments:
    - name: subscription_id
      description: "The subscription ID. Note: This argument will override the instance parameter ‘Default Subscription ID'."
    - name: limit
      description: Limit on the number of resource groups to return.
      defaultValue: 50
    - name: tag
      description: A single tag in the form of '{"Tag Name":"Tag Value"}' to filter the list by.
    outputs:
    - contextPath: AzureFirewall.ResourceGroup.id
      description: The ID of the resource group.
      type: String
    - contextPath: AzureFirewall.ResourceGroup.location
      description: The location of the resource group.
      type: String
    - contextPath: AzureFirewall.ResourceGroup.managedBy
      description: The ID of the resource that manages this resource group.
      type: String
    - contextPath: AzureFirewall.ResourceGroup.name
      description: The name of the resource group.
      type: String
    - contextPath: AzureFirewall.ResourceGroup.properties.provisioningState
      description: The provisioning state.
      type: String
    - contextPath: AzureFirewall.ResourceGroup.tags
      description: The tags attached to the resource group.
      type: Object
    - contextPath: AzureFirewall.ResourceGroup.type
      description: The type of the resource group.
      type: String
  dockerimage: demisto/crypto:1.0.0.10120494
  runonce: false
  script: '-'
  subtype: python3
  type: python
fromversion: 6.1.0
tests:
- No tests (auto formatted)
sectionorder:
- Connect
- Collect