Details
| ID | Trend Micro Deep Security |
|---|---|
| Provider | TrendAI™ |
| Category | Endpoint |
| From Version | 6.0.0 |
| Docker Image | demisto/python3:3.12.13.10116658 |
| Supported Modules | Agentix XSIAM |
README
TrendAI™ Deep Security™
This integration was integrated and tested with version 20.0 of TrendAI™ Deep Security™, and v1 of the API.
Changes compared to TrendMicroDsm
Changes in commands
- trendmicro-create-computer - New command.
- trendmicro-search-computers - New command.
- trendmicro-get-computer - New command.
- trendmicro-list-computers - New command.
- trendmicro-modify-computer - New command.
- trendmicro-delete-computer - New command.
- trendmicro-get-computer-setting - New command.
- trendmicro-modify-computer-setting - New command.
- trendmicro-reset-computer-setting - New command.
- trendmicro-list-computer-groups - New command.
- trendmicro-create-computer-group - New command.
- trendmicro-search-computer-groups - New command.
- trendmicro-get-computer-group - New command.
- trendmicro-modify-computer-group - New command.
- trendmicro-delete-computer-group - New command.
- trendmicro-search-firewall-rules - New command.
- trendmicro-list-firewall-rules - New command.
- trendmicro-create-firewall-rule - New command.
- trendmicro-get-firewall-rule - New command.
- trendmicro-modify-firewall-rule - New command.
- trendmicro-delete-firewall-rule - New command.
- trendmicro-list-firewall-rule-ids-of-computer - New command.
- trendmicro-add-firewall-rule-ids-to-computer - New command.
- trendmicro-set-firewall-rule-ids-to-computer - New command.
- trendmicro-get-policy - New command.
- trendmicro-modify-policy - New command.
- trendmicro-delete-policy - New command.
- trendmicro-get-policy-setting - New command.
- trendmicro-modify-policy-setting - New command.
- trendmicro-reset-policy-setting - New command.
- trendmicro-list-policies - New command.
- trendmicro-search-policies - New command.
- trendmicro-create-policy - New command.
- trendmicro-remove-firewall-rule-id-from-computer - New command.
- trendmicro-list-default-policy-settings - New command.
- trendmicro-get-default-policy-setting - New command.
- trendmicro-modify-default-policy-setting - New command.
- trendmicro-reset-default-policy-setting - New command.
Configure TrendAI™ Deep Security™ in Cortex
| Parameter | Description | Required |
|---|---|---|
| Server URL | Server URL for TrendMicro console. e.g: https://ip:port/ | True |
| API Secret | The API secret key | True |
| API Version | The API version used | False |
| Trust any certificate (not secure) | False | |
| Use system proxy settings | False |
Commands
You can execute these commands from the CLI, as part of an automation, or in a playbook.
After you successfully execute a command, a DBot message appears in the War Room with the command details.
trendmicro-create-computer
Create a new computer
Base Command
trendmicro-create-computer
Input
| Argument Name | Description | Required |
|---|---|---|
| expand | Determines the computer information to include in the response. Notice that the information is appended to the context data only. Possible values are: none, all, computerStatus, tasks, securityUpdates, computerSettings, allSecurityModules, antiMalware, webReputation, activityMonitoring, firewall, intrusionPrevention, integrityMonitoring, logInspection, applicationControl, SAP, interfaces, ESXSummary, allVirtualMachineSummaries, azureARMVirtualMachineSummary, azureVMVirtualMachineSummary, ec2VirtualMachineSummary, noConnectorVirtualMachineSummary, vmwareVMVirtualMachineSummary, vcloudVMVirtualMachineSummary, workspaceVirtualMachineSummary, gcpVirtualMachineSummary. Default is none. | Optional |
| overrides | Show only overrides defined for the current computer. Possible values are: true, false. Default is false. | Optional |
| host_name | Hostname of the computer. | Optional |
| display_name | Display name of the computer. | Optional |
| description | Description of the computer. | Optional |
| group_id | ID of the computer group to which the computer belongs. | Optional |
| policy_id | ID of the policy assigned to the computer. | Optional |
| asset_importance_id | ID of the asset importance assigned to the computer. | Optional |
| relay_list_id | ID of the relay list that is assigned to the computer. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| TrendMicro.Computers.hostName | string | Hostname of the computer |
| TrendMicro.Computers.displayName | string | Display name of the computer |
| TrendMicro.Computers.description | string | Description of the computer |
| TrendMicro.Computers.groupID | integer | ID of the computer group to which the computer belongs |
| TrendMicro.Computers.policyID | integer | ID of the policy assigned to the computer |
| TrendMicro.Computers.assetImportanceID | integer | ID of the asset importance assigned to the computer |
| TrendMicro.Computers.relayListID | integer | ID of the relay list that is assigned to the computer |
Command Example
!trendmicro-create-computer host_name="example_computer"
Context Example
{
"TrendMicro": {
"Computers": {
"ID": 217,
"agentVersion": "0.0.0.0",
"description": "",
"displayName": "",
"groupID": 0,
"hostGUID": "55793E73-1CC8-40EE-DE11-0FC0A5D7D77D",
"hostName": "example_computer",
"lastIPUsed": "",
"platform": "Unknown",
"relayListID": 0
}
}
}
Human Readable Output
Details for the new computer example_computer
ID Host Name Group ID 217 example_computer 0
trendmicro-search-computers
Search for specific computers by some field name with a certain type. Every field has a specific type. It can be a simple type like a string, a numeric or a boolean. However, it can also be a choice, which is a string with specific options (enumeration). To search, you must provide the field_name & field_type, the operation to perform, and the value to search.
Base Command
trendmicro-search-computers
Input
| Argument Name | Description | Required |
|---|---|---|
| max_items | Limits the number of objects returned. | Optional |
| field_name | The field name to search for. Possible values are: hostName, displayName, description, groupID, policyID, assetImportanceID, relayListID. | Required |
| field_type | The type of the field. Possible values are: boolean, numeric, choice, id, string. | Required |
| operation | The search conditional to test on the field name. Possible values are: less-than, less-than-or-equal, equal, greater-than-or-equal, greater-than, not-equal. | Required |
| value | The value to compare. | Required |
| sort_by_object_id | If true, forces the response objects to be sorted by ID, overriding the default sort order. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| TrendMicro.Computers.hostName | string | Hostname of the computer |
| TrendMicro.Computers.displayName | string | Display name of the computer |
| TrendMicro.Computers.description | string | Description of the computer |
| TrendMicro.Computers.groupID | integer | ID of the computer group to which the computer belongs |
| TrendMicro.Computers.policyID | integer | ID of the policy assigned to the computer |
| TrendMicro.Computers.assetImportanceID | integer | ID of the asset importance assigned to the computer |
| TrendMicro.Computers.relayListID | integer | ID of the relay list that is assigned to the computer |
Command Example
!trendmicro-search-computers field_name=groupID field_type=numeric operation=equal value=0
Context Example
{
"TrendMicro": {
"Computers": [
{
"ID": 1,
"activityMonitoring": {
"moduleStatus": {
"agentStatus": "inactive",
"agentStatusMessage": "Not Activated"
},
"state": "off"
},
"agentVersion": "0.0.0.0",
"antiMalware": {
"manualScanConfigurationID": 2,
"moduleStatus": {
"agentStatus": "inactive",
"agentStatusMessage": "Not Activated"
},
"realTimeScanConfigurationID": 1,
"realTimeScanScheduleID": 4,
"scheduledScanConfigurationID": 3,
"state": "off"
},
"applicationControl": {
"blockUnrecognized": false,
"maintenanceModeStatus": "off",
"moduleStatus": {
"agentStatus": "inactive",
"agentStatusMessage": "Not Activated"
},
"state": "off"
},
"computerSettings": {
"activityMonitoringSettingActivityEnabled": {
"value": "On"
},
"activityMonitoringSettingIndicatorEnabled": {
"value": "Off"
},
"activityMonitoringSettingSyslogConfigId": {
"value": "0"
},
"antiMalwareSettingBehaviorMonitoringScanExclusionList": {
"value": ""
},
"antiMalwareSettingCombinedModeProtectionSource": {
"value": "Appliance preferred"
},
"antiMalwareSettingConnectedThreatDefenseSuspiciousFileDdanSubmissionEnabled": {
"value": "true"
},
"antiMalwareSettingConnectedThreatDefenseUseControlManagerSuspiciousObjectListEnabled": {
"value": "true"
},
"antiMalwareSettingDocumentExploitProtectionRuleExceptions": {
"value": ""
},
"antiMalwareSettingFileHashEnabled": {
"value": "false"
},
"antiMalwareSettingFileHashMd5Enabled": {
"value": "false"
},
"antiMalwareSettingFileHashSha256Enabled": {
"value": "false"
},
"antiMalwareSettingFileHashSizeMaxMbytes": {
"value": "128"
},
"antiMalwareSettingIdentifiedFilesSpaceMaxMbytes": {
"value": "1024"
},
"antiMalwareSettingMalwareScanMultithreadedProcessingEnabled": {
"value": "false"
},
"antiMalwareSettingNsxSecurityTaggingEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingOnRemediationFailureEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingRemoveOnCleanScanEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingValue": {
"value": "ANTI_VIRUS.VirusFound.threat=medium"
},
"antiMalwareSettingPredictiveMachineLearningExceptions": {
"value": ""
},
"antiMalwareSettingScanCacheOnDemandConfigId": {
"value": "1"
},
"antiMalwareSettingScanCacheRealTimeConfigId": {
"value": "2"
},
"antiMalwareSettingScanFileSizeMaxMbytes": {
"value": "0"
},
"antiMalwareSettingSmartProtectionGlobalServerEnabled": {
"value": "true"
},
"antiMalwareSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"antiMalwareSettingSmartProtectionLocalServerAllowOffDomainGlobal": {
"value": "false"
},
"antiMalwareSettingSmartProtectionLocalServerUrls": {
"value": ""
},
"antiMalwareSettingSmartProtectionServerConnectionLostWarningEnabled": {
"value": "true"
},
"antiMalwareSettingSmartScanState": {
"value": "Automatic"
},
"antiMalwareSettingSpywareApprovedList": {
"value": ""
},
"antiMalwareSettingSyslogConfigId": {
"value": "0"
},
"antiMalwareSettingVirtualApplianceOnDemandScanCacheEntriesMax": {
"value": "500000"
},
"antiMalwareSettingVirtualApplianceRealTimeScanCacheEntriesMax": {
"value": "500000"
},
"applicationControlSettingExecutionEnforcementLevel": {
"value": "Allow unrecognized software until it is explicitly blocked"
},
"applicationControlSettingRulesetMode": {
"value": "Use local ruleset"
},
"applicationControlSettingSharedRulesetId": {
"value": "0"
},
"applicationControlSettingSyslogConfigId": {
"value": "0"
},
"firewallSettingAntiEvasionCheckEvasiveRetransmit": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckFinNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckFragmentedPackets": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckOutNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckPaws": {
"value": "Ignore"
},
"firewallSettingAntiEvasionCheckRstNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpChecksum": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpCongestionFlags": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpPawsZero": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpRstFinFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSplitHandshake": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynFinFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynRstFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynWithData": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpUrgentFlags": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpZeroFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionSecurityPosture": {
"value": "Normal"
},
"firewallSettingAntiEvasionTcpPawsWindowPolicy": {
"value": "0"
},
"firewallSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"firewallSettingConfigPackageExceedsAlertMaxEnabled": {
"value": "true"
},
"firewallSettingEngineOptionAckTimeout": {
"value": "1 Second"
},
"firewallSettingEngineOptionAllowNullIpEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBlockIpv6Agent8AndEarlierEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBlockIpv6Agent9AndLaterEnabled": {
"value": "false"
},
"firewallSettingEngineOptionBlockSameSrcDstIpEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBootStartTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionBypassCiscoWaasConnectionsEnabled": {
"value": "false"
},
"firewallSettingEngineOptionCloseTimeout": {
"value": "0 Seconds"
},
"firewallSettingEngineOptionCloseWaitTimeout": {
"value": "2 Minutes"
},
"firewallSettingEngineOptionClosingTimeout": {
"value": "1 Second"
},
"firewallSettingEngineOptionColdStartTimeout": {
"value": "5 Minutes"
},
"firewallSettingEngineOptionConnectionCleanupTimeout": {
"value": "10 Seconds"
},
"firewallSettingEngineOptionConnectionsCleanupMax": {
"value": "1000"
},
"firewallSettingEngineOptionConnectionsNumIcmpMax": {
"value": "10000"
},
"firewallSettingEngineOptionConnectionsNumTcpMax": {
"value": "1000000"
},
"firewallSettingEngineOptionConnectionsNumUdpMax": {
"value": "1000000"
},
"firewallSettingEngineOptionDebugModeEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDebugPacketNumMax": {
"value": "8"
},
"firewallSettingEngineOptionDisconnectTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionDrop6To4BogonsAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropEvasiveRetransmitEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDropIpZeroPayloadEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6BogonsAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6ExtType0Enabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6FragmentsLowerThanMinMtuEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6ReservedAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6SiteLocalAddressesEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDropTeredoAnomaliesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropUnknownSslProtocolEnabled": {
"value": "true"
},
"firewallSettingEngineOptionErrorTimeout": {
"value": "10 Seconds"
},
"firewallSettingEngineOptionEstablishedTimeout": {
"value": "3 Hours"
},
"firewallSettingEngineOptionEventNodesMax": {
"value": "20000"
},
"firewallSettingEngineOptionFilterIpv4Tunnels": {
"value": "Disable Detection of IPv4 Tunnels"
},
"firewallSettingEngineOptionFilterIpv6Tunnels": {
"value": "Disable Detection of IPv6 Tunnels"
},
"firewallSettingEngineOptionFinWait1Timeout": {
"value": "2 Minutes"
},
"firewallSettingEngineOptionForceAllowDhcpDns": {
"value": "Allow DNS Query and DHCP Client"
},
"firewallSettingEngineOptionForceAllowIcmpType3Code4": {
"value": "Add Force Allow rule for ICMP type3 code4"
},
"firewallSettingEngineOptionFragmentOffsetMin": {
"value": "60"
},
"firewallSettingEngineOptionFragmentSizeMin": {
"value": "120"
},
"firewallSettingEngineOptionGenerateConnectionEventsIcmpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionGenerateConnectionEventsTcpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionGenerateConnectionEventsUdpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionIcmpTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionIgnoreStatusCode0": {
"value": "None"
},
"firewallSettingEngineOptionIgnoreStatusCode1": {
"value": "None"
},
"firewallSettingEngineOptionIgnoreStatusCode2": {
"value": "None"
},
"firewallSettingEngineOptionLastAckTimeout": {
"value": "3 Minutes"
},
"firewallSettingEngineOptionLogAllPacketDataEnabled": {
"value": "false"
},
"firewallSettingEngineOptionLogEventsPerSecondMax": {
"value": "100"
},
"firewallSettingEngineOptionLogOnePacketPeriod": {
"value": "5 Minutes"
},
"firewallSettingEngineOptionLogOnePacketWithinPeriodEnabled": {
"value": "false"
},
"firewallSettingEngineOptionLogPacketLengthMax": {
"value": "1500 Bytes"
},
"firewallSettingEngineOptionLoggingPolicy": {
"value": "Default"
},
"firewallSettingEngineOptionSilentTcpConnectionDropEnabled": {
"value": "false"
},
"firewallSettingEngineOptionSslSessionSize": {
"value": "Low - 2500"
},
"firewallSettingEngineOptionSslSessionTime": {
"value": "24 Hours"
},
"firewallSettingEngineOptionStrictTerodoPortCheckEnabled": {
"value": "true"
},
"firewallSettingEngineOptionSynRcvdTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionSynSentTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionTcpMssLimit": {
"value": "128 Bytes"
},
"firewallSettingEngineOptionTunnelDepthMax": {
"value": "1"
},
"firewallSettingEngineOptionTunnelDepthMaxExceededAction": {
"value": "Drop"
},
"firewallSettingEngineOptionUdpTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionVerifyTcpChecksumEnabled": {
"value": "false"
},
"firewallSettingEngineOptionsEnabled": {
"value": "true"
},
"firewallSettingEventLogFileCachedEntriesLifeTime": {
"value": "30 Minutes"
},
"firewallSettingEventLogFileCachedEntriesNum": {
"value": "128"
},
"firewallSettingEventLogFileCachedEntriesStaleTime": {
"value": "15 Minutes"
},
"firewallSettingEventLogFileIgnoreSourceIpListId": {
"value": ""
},
"firewallSettingEventLogFileRetainNum": {
"value": "3"
},
"firewallSettingEventLogFileSizeMax": {
"value": "4 MB"
},
"firewallSettingEventsOutOfAllowedPolicyEnabled": {
"value": "true"
},
"firewallSettingFailureResponseEngineSystem": {
"value": "Fail closed"
},
"firewallSettingFailureResponsePacketSanityCheck": {
"value": "Fail closed"
},
"firewallSettingInterfaceIsolationEnabled": {
"value": "false"
},
"firewallSettingInterfaceLimitOneActiveEnabled": {
"value": "false"
},
"firewallSettingInterfacePatterns": {
"value": ""
},
"firewallSettingNetworkEngineMode": {
"value": "Inline"
},
"firewallSettingReconnaissanceBlockFingerprintProbeDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockNetworkOrPortScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpNullScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpSynFinScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpXmasAttackDuration": {
"value": "No"
},
"firewallSettingReconnaissanceDetectFingerprintProbeEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectNetworkOrPortScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpNullScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpSynFinScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpXmasAttackEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceExcludeIpListId": {
"value": "1"
},
"firewallSettingReconnaissanceIncludeIpListId": {
"value": ""
},
"firewallSettingReconnaissanceNotifyFingerprintProbeEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyNetworkOrPortScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpNullScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpSynFinScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpXmasAttackEnabled": {
"value": "true"
},
"firewallSettingSyslogConfigId": {
"value": "0"
},
"firewallSettingVirtualAndContainerNetworkScanEnabled": {
"value": "false"
},
"integrityMonitoringSettingAutoApplyRecommendationsEnabled": {
"value": "No"
},
"integrityMonitoringSettingCombinedModeProtectionSource": {
"value": "Appliance preferred"
},
"integrityMonitoringSettingContentHashAlgorithm": {
"value": "sha1"
},
"integrityMonitoringSettingCpuUsageLevel": {
"value": "High"
},
"integrityMonitoringSettingRealtimeEnabled": {
"value": "false"
},
"integrityMonitoringSettingScanCacheConfigId": {
"value": "3"
},
"integrityMonitoringSettingSyslogConfigId": {
"value": "0"
},
"integrityMonitoringSettingVirtualApplianceOptimizationScanCacheEntriesMax": {
"value": "500000"
},
"intrusionPreventionSettingAutoApplyRecommendationsEnabled": {
"value": "Yes"
},
"intrusionPreventionSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"intrusionPreventionSettingEngineOptionFragmentedIpKeepMax": {
"value": "1000"
},
"intrusionPreventionSettingEngineOptionFragmentedIpPacketSendIcmpEnabled": {
"value": "true"
},
"intrusionPreventionSettingEngineOptionFragmentedIpTimeout": {
"value": "60 Seconds"
},
"intrusionPreventionSettingEngineOptionFragmentedIpUnconcernedMacAddressBypassEnabled": {
"value": "false"
},
"intrusionPreventionSettingEngineOptionsEnabled": {
"value": "false"
},
"intrusionPreventionSettingLogDataRuleFirstMatchEnabled": {
"value": "true"
},
"intrusionPreventionSettingNsxSecurityTaggingDetectModeLevel": {
"value": "No Tagging"
},
"intrusionPreventionSettingNsxSecurityTaggingPreventModeLevel": {
"value": "No Tagging"
},
"intrusionPreventionSettingVirtualAndContainerNetworkScanEnabled": {
"value": "true"
},
"logInspectionSettingAutoApplyRecommendationsEnabled": {
"value": "No"
},
"logInspectionSettingSeverityClippingAgentEventSendSyslogLevelMin": {
"value": "Medium (6)"
},
"logInspectionSettingSeverityClippingAgentEventStoreLevelMin": {
"value": "Medium (6)"
},
"logInspectionSettingSyslogConfigId": {
"value": "0"
},
"platformSettingAgentCommunicationsDirection": {
"value": "Agent/Appliance Initiated"
},
"platformSettingAgentEventsSendInterval": {
"value": "60 Seconds"
},
"platformSettingAgentSelfProtectionEnabled": {
"value": "false"
},
"platformSettingAgentSelfProtectionPassword": {
"value": ""
},
"platformSettingAgentSelfProtectionPasswordEnabled": {
"value": "false"
},
"platformSettingAutoAssignNewIntrusionPreventionRulesEnabled": {
"value": "true"
},
"platformSettingAutoUpdateAntiMalwareEngineEnabled": {
"value": "false"
},
"platformSettingCombinedModeNetworkGroupProtectionSource": {
"value": "Agent preferred"
},
"platformSettingEnvironmentVariableOverrides": {
"value": ""
},
"platformSettingHeartbeatInactiveVmOfflineAlertEnabled": {
"value": "false"
},
"platformSettingHeartbeatInterval": {
"value": "10 Minutes"
},
"platformSettingHeartbeatLocalTimeShiftAlertThreshold": {
"value": "Unlimited"
},
"platformSettingHeartbeatMissedAlertThreshold": {
"value": "5"
},
"platformSettingInactiveAgentCleanupOverrideEnabled": {
"value": "false"
},
"platformSettingNotificationsSuppressPopupsEnabled": {
"value": "false"
},
"platformSettingRecommendationOngoingScansInterval": {
"value": "7 Days"
},
"platformSettingRelayState": {
"value": "false"
},
"platformSettingScanCacheConcurrencyMax": {
"value": "1"
},
"platformSettingScanOpenPortListId": {
"value": "1-1024"
},
"platformSettingSmartProtectionAntiMalwareGlobalServerProxyId": {
"value": ""
},
"platformSettingSmartProtectionGlobalServerEnabled": {
"value": "true"
},
"platformSettingSmartProtectionGlobalServerProxyId": {
"value": ""
},
"platformSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"platformSettingTroubleshootingLoggingLevel": {
"value": "Do Not Override"
},
"webReputationSettingAlertingEnabled": {
"value": "false"
},
"webReputationSettingAllowedUrlDomains": {
"value": ""
},
"webReputationSettingAllowedUrls": {
"value": ""
},
"webReputationSettingBlockedUrlDomains": {
"value": ""
},
"webReputationSettingBlockedUrlKeywords": {
"value": ""
},
"webReputationSettingBlockedUrls": {
"value": ""
},
"webReputationSettingBlockingPageLink": {
"value": "http://sitesafety.trendmicro.com/"
},
"webReputationSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"webReputationSettingMonitorPortListId": {
"value": "80,8080"
},
"webReputationSettingSecurityBlockUntestedPagesEnabled": {
"value": "false"
},
"webReputationSettingSecurityLevel": {
"value": "Medium"
},
"webReputationSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerAllowOffDomainGlobal": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerEnabled": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerUrls": {
"value": ""
},
"webReputationSettingSmartProtectionServerConnectionLostWarningEnabled": {
"value": "true"
},
"webReputationSettingSmartProtectionWebReputationGlobalServerProxyId": {
"value": ""
},
"webReputationSettingSyslogConfigId": {
"value": "0"
}
},
"computerStatus": {
"agentStatus": "inactive",
"agentStatusMessages": [
"Unmanaged (Unknown)"
]
},
"description": "Modified Test",
"displayName": "testq1",
"firewall": {
"globalStatefulConfigurationID": 1,
"moduleStatus": {
"agentStatus": "inactive",
"agentStatusMessage": "Not Activated"
},
"ruleIDs": [
23,
28,
30
],
"state": "off"
},
"groupID": 0,
"hostGUID": "52DA6A2B-A3AD-4DA7-911C-3C8915E26BA5",
"hostName": "q1",
"integrityMonitoring": {
"moduleStatus": {
"agentStatus": "inactive",
"agentStatusMessage": "Not Activated"
},
"state": "off"
},
"intrusionPrevention": {
"moduleStatus": {
"agentStatus": "inactive",
"agentStatusMessage": "Not Activated"
},
"state": "off"
},
"lastIPUsed": "",
"lastSendPolicyRequest": 1622492018767,
"logInspection": {
"moduleStatus": {
"agentStatus": "inactive",
"agentStatusMessage": "Not Activated"
},
"state": "off"
},
"platform": "Unknown",
"policyID": 1,
"relayListID": 0,
"webReputation": {
"moduleStatus": {
"agentStatus": "inactive",
"agentStatusMessage": "Not Activated"
},
"state": "off"
}
},
{
"ID": 2,
"activityMonitoring": {
"moduleStatus": {
"agentStatus": "inactive",
"agentStatusMessage": "Not Activated"
},
"state": "off"
},
"agentVersion": "0.0.0.0",
"antiMalware": {
"manualScanConfigurationID": 0,
"moduleStatus": {
"agentStatus": "inactive",
"agentStatusMessage": "Not Activated"
},
"realTimeScanConfigurationID": 0,
"realTimeScanScheduleID": 0,
"scheduledScanConfigurationID": 0,
"state": "off"
},
"applicationControl": {
"blockUnrecognized": false,
"maintenanceModeStatus": "off",
"moduleStatus": {
"agentStatus": "inactive",
"agentStatusMessage": "Not Activated"
},
"state": "off"
},
"computerSettings": {
"activityMonitoringSettingActivityEnabled": {
"value": "Off"
},
"activityMonitoringSettingIndicatorEnabled": {
"value": "Off"
},
"activityMonitoringSettingSyslogConfigId": {
"value": "0"
},
"antiMalwareSettingBehaviorMonitoringScanExclusionList": {
"value": ""
},
"antiMalwareSettingCombinedModeProtectionSource": {
"value": "Appliance preferred"
},
"antiMalwareSettingConnectedThreatDefenseSuspiciousFileDdanSubmissionEnabled": {
"value": "true"
},
"antiMalwareSettingConnectedThreatDefenseUseControlManagerSuspiciousObjectListEnabled": {
"value": "true"
},
"antiMalwareSettingDocumentExploitProtectionRuleExceptions": {
"value": ""
},
"antiMalwareSettingFileHashEnabled": {
"value": "false"
},
"antiMalwareSettingFileHashMd5Enabled": {
"value": "false"
},
"antiMalwareSettingFileHashSha256Enabled": {
"value": "false"
},
"antiMalwareSettingFileHashSizeMaxMbytes": {
"value": "128"
},
"antiMalwareSettingIdentifiedFilesSpaceMaxMbytes": {
"value": "1024"
},
"antiMalwareSettingMalwareScanMultithreadedProcessingEnabled": {
"value": "false"
},
"antiMalwareSettingNsxSecurityTaggingEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingOnRemediationFailureEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingRemoveOnCleanScanEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingValue": {
"value": "ANTI_VIRUS.VirusFound.threat=medium"
},
"antiMalwareSettingPredictiveMachineLearningExceptions": {
"value": ""
},
"antiMalwareSettingScanCacheOnDemandConfigId": {
"value": ""
},
"antiMalwareSettingScanCacheRealTimeConfigId": {
"value": ""
},
"antiMalwareSettingScanFileSizeMaxMbytes": {
"value": "0"
},
"antiMalwareSettingSmartProtectionGlobalServerEnabled": {
"value": "true"
},
"antiMalwareSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"antiMalwareSettingSmartProtectionLocalServerAllowOffDomainGlobal": {
"value": "false"
},
"antiMalwareSettingSmartProtectionLocalServerUrls": {
"value": ""
},
"antiMalwareSettingSmartProtectionServerConnectionLostWarningEnabled": {
"value": "true"
},
"antiMalwareSettingSmartScanState": {
"value": "Automatic"
},
"antiMalwareSettingSpywareApprovedList": {
"value": ""
},
"antiMalwareSettingSyslogConfigId": {
"value": "0"
},
"antiMalwareSettingVirtualApplianceOnDemandScanCacheEntriesMax": {
"value": "500000"
},
"antiMalwareSettingVirtualApplianceRealTimeScanCacheEntriesMax": {
"value": "500000"
},
"applicationControlSettingExecutionEnforcementLevel": {
"value": "Allow unrecognized software until it is explicitly blocked"
},
"applicationControlSettingRulesetMode": {
"value": "Use local ruleset"
},
"applicationControlSettingSharedRulesetId": {
"value": "0"
},
"applicationControlSettingSyslogConfigId": {
"value": "0"
},
"firewallSettingAntiEvasionCheckEvasiveRetransmit": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckFinNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckFragmentedPackets": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckOutNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckPaws": {
"value": "Ignore"
},
"firewallSettingAntiEvasionCheckRstNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpChecksum": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpCongestionFlags": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpPawsZero": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpRstFinFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSplitHandshake": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynFinFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynRstFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynWithData": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpUrgentFlags": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpZeroFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionSecurityPosture": {
"value": "Normal"
},
"firewallSettingAntiEvasionTcpPawsWindowPolicy": {
"value": "0"
},
"firewallSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"firewallSettingConfigPackageExceedsAlertMaxEnabled": {
"value": "true"
},
"firewallSettingEngineOptionAckTimeout": {
"value": "1 Second"
},
"firewallSettingEngineOptionAllowNullIpEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBlockIpv6Agent8AndEarlierEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBlockIpv6Agent9AndLaterEnabled": {
"value": "false"
},
"firewallSettingEngineOptionBlockSameSrcDstIpEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBootStartTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionBypassCiscoWaasConnectionsEnabled": {
"value": "false"
},
"firewallSettingEngineOptionCloseTimeout": {
"value": "0 Seconds"
},
"firewallSettingEngineOptionCloseWaitTimeout": {
"value": "2 Minutes"
},
"firewallSettingEngineOptionClosingTimeout": {
"value": "1 Second"
},
"firewallSettingEngineOptionColdStartTimeout": {
"value": "5 Minutes"
},
"firewallSettingEngineOptionConnectionCleanupTimeout": {
"value": "10 Seconds"
},
"firewallSettingEngineOptionConnectionsCleanupMax": {
"value": "1000"
},
"firewallSettingEngineOptionConnectionsNumIcmpMax": {
"value": "10000"
},
"firewallSettingEngineOptionConnectionsNumTcpMax": {
"value": "1000000"
},
"firewallSettingEngineOptionConnectionsNumUdpMax": {
"value": "1000000"
},
"firewallSettingEngineOptionDebugModeEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDebugPacketNumMax": {
"value": "8"
},
"firewallSettingEngineOptionDisconnectTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionDrop6To4BogonsAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropEvasiveRetransmitEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDropIpZeroPayloadEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6BogonsAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6ExtType0Enabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6FragmentsLowerThanMinMtuEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6ReservedAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6SiteLocalAddressesEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDropTeredoAnomaliesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropUnknownSslProtocolEnabled": {
"value": "true"
},
"firewallSettingEngineOptionErrorTimeout": {
"value": "10 Seconds"
},
"firewallSettingEngineOptionEstablishedTimeout": {
"value": "3 Hours"
},
"firewallSettingEngineOptionEventNodesMax": {
"value": "20000"
},
"firewallSettingEngineOptionFilterIpv4Tunnels": {
"value": "Disable Detection of IPv4 Tunnels"
},
"firewallSettingEngineOptionFilterIpv6Tunnels": {
"value": "Disable Detection of IPv6 Tunnels"
},
"firewallSettingEngineOptionFinWait1Timeout": {
"value": "2 Minutes"
},
"firewallSettingEngineOptionForceAllowDhcpDns": {
"value": "Allow DNS Query and DHCP Client"
},
"firewallSettingEngineOptionForceAllowIcmpType3Code4": {
"value": "Add Force Allow rule for ICMP type3 code4"
},
"firewallSettingEngineOptionFragmentOffsetMin": {
"value": "60"
},
"firewallSettingEngineOptionFragmentSizeMin": {
"value": "120"
},
"firewallSettingEngineOptionGenerateConnectionEventsIcmpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionGenerateConnectionEventsTcpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionGenerateConnectionEventsUdpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionIcmpTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionIgnoreStatusCode0": {
"value": "None"
},
"firewallSettingEngineOptionIgnoreStatusCode1": {
"value": "None"
},
"firewallSettingEngineOptionIgnoreStatusCode2": {
"value": "None"
},
"firewallSettingEngineOptionLastAckTimeout": {
"value": "30 Seconds"
},
"firewallSettingEngineOptionLogAllPacketDataEnabled": {
"value": "false"
},
"firewallSettingEngineOptionLogEventsPerSecondMax": {
"value": "100"
},
"firewallSettingEngineOptionLogOnePacketPeriod": {
"value": "5 Minutes"
},
"firewallSettingEngineOptionLogOnePacketWithinPeriodEnabled": {
"value": "false"
},
"firewallSettingEngineOptionLogPacketLengthMax": {
"value": "1500 Bytes"
},
"firewallSettingEngineOptionLoggingPolicy": {
"value": "Default"
},
"firewallSettingEngineOptionSilentTcpConnectionDropEnabled": {
"value": "false"
},
"firewallSettingEngineOptionSslSessionSize": {
"value": "Low - 2500"
},
"firewallSettingEngineOptionSslSessionTime": {
"value": "24 Hours"
},
"firewallSettingEngineOptionStrictTerodoPortCheckEnabled": {
"value": "true"
},
"firewallSettingEngineOptionSynRcvdTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionSynSentTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionTcpMssLimit": {
"value": "128 Bytes"
},
"firewallSettingEngineOptionTunnelDepthMax": {
"value": "1"
},
"firewallSettingEngineOptionTunnelDepthMaxExceededAction": {
"value": "Drop"
},
"firewallSettingEngineOptionUdpTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionVerifyTcpChecksumEnabled": {
"value": "false"
},
"firewallSettingEngineOptionsEnabled": {
"value": "false"
},
"firewallSettingEventLogFileCachedEntriesLifeTime": {
"value": "30 Minutes"
},
"firewallSettingEventLogFileCachedEntriesNum": {
"value": "128"
},
"firewallSettingEventLogFileCachedEntriesStaleTime": {
"value": "15 Minutes"
},
"firewallSettingEventLogFileIgnoreSourceIpListId": {
"value": ""
},
"firewallSettingEventLogFileRetainNum": {
"value": "3"
},
"firewallSettingEventLogFileSizeMax": {
"value": "4 MB"
},
"firewallSettingEventsOutOfAllowedPolicyEnabled": {
"value": "true"
},
"firewallSettingFailureResponseEngineSystem": {
"value": "Fail closed"
},
"firewallSettingFailureResponsePacketSanityCheck": {
"value": "Fail closed"
},
"firewallSettingInterfaceIsolationEnabled": {
"value": "false"
},
"firewallSettingInterfaceLimitOneActiveEnabled": {
"value": "false"
},
"firewallSettingInterfacePatterns": {
"value": ""
},
"firewallSettingNetworkEngineMode": {
"value": "Inline"
},
"firewallSettingReconnaissanceBlockFingerprintProbeDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockNetworkOrPortScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpNullScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpSynFinScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpXmasAttackDuration": {
"value": "No"
},
"firewallSettingReconnaissanceDetectFingerprintProbeEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectNetworkOrPortScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpNullScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpSynFinScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpXmasAttackEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceExcludeIpListId": {
"value": ""
},
"firewallSettingReconnaissanceIncludeIpListId": {
"value": ""
},
"firewallSettingReconnaissanceNotifyFingerprintProbeEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyNetworkOrPortScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpNullScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpSynFinScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpXmasAttackEnabled": {
"value": "true"
},
"firewallSettingSyslogConfigId": {
"value": "0"
},
"firewallSettingVirtualAndContainerNetworkScanEnabled": {
"value": "false"
},
"integrityMonitoringSettingAutoApplyRecommendationsEnabled": {
"value": "No"
},
"integrityMonitoringSettingCombinedModeProtectionSource": {
"value": "Appliance preferred"
},
"integrityMonitoringSettingContentHashAlgorithm": {
"value": "sha1"
},
"integrityMonitoringSettingCpuUsageLevel": {
"value": "High"
},
"integrityMonitoringSettingRealtimeEnabled": {
"value": "false"
},
"integrityMonitoringSettingScanCacheConfigId": {
"value": ""
},
"integrityMonitoringSettingSyslogConfigId": {
"value": "0"
},
"integrityMonitoringSettingVirtualApplianceOptimizationScanCacheEntriesMax": {
"value": "500000"
},
"intrusionPreventionSettingAutoApplyRecommendationsEnabled": {
"value": "No"
},
"intrusionPreventionSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"intrusionPreventionSettingEngineOptionFragmentedIpKeepMax": {
"value": "1000"
},
"intrusionPreventionSettingEngineOptionFragmentedIpPacketSendIcmpEnabled": {
"value": "true"
},
"intrusionPreventionSettingEngineOptionFragmentedIpTimeout": {
"value": "60 Seconds"
},
"intrusionPreventionSettingEngineOptionFragmentedIpUnconcernedMacAddressBypassEnabled": {
"value": "false"
},
"intrusionPreventionSettingEngineOptionsEnabled": {
"value": "false"
},
"intrusionPreventionSettingLogDataRuleFirstMatchEnabled": {
"value": "true"
},
"intrusionPreventionSettingNsxSecurityTaggingDetectModeLevel": {
"value": "No Tagging"
},
"intrusionPreventionSettingNsxSecurityTaggingPreventModeLevel": {
"value": "No Tagging"
},
"intrusionPreventionSettingVirtualAndContainerNetworkScanEnabled": {
"value": "true"
},
"logInspectionSettingAutoApplyRecommendationsEnabled": {
"value": "No"
},
"logInspectionSettingSeverityClippingAgentEventSendSyslogLevelMin": {
"value": "Medium (6)"
},
"logInspectionSettingSeverityClippingAgentEventStoreLevelMin": {
"value": "Medium (6)"
},
"logInspectionSettingSyslogConfigId": {
"value": "0"
},
"platformSettingAgentCommunicationsDirection": {
"value": "Agent/Appliance Initiated"
},
"platformSettingAgentEventsSendInterval": {
"value": "60 Seconds"
},
"platformSettingAgentSelfProtectionEnabled": {
"value": "false"
},
"platformSettingAgentSelfProtectionPassword": {
"value": ""
},
"platformSettingAgentSelfProtectionPasswordEnabled": {
"value": "false"
},
"platformSettingAutoAssignNewIntrusionPreventionRulesEnabled": {
"value": "true"
},
"platformSettingAutoUpdateAntiMalwareEngineEnabled": {
"value": "false"
},
"platformSettingCombinedModeNetworkGroupProtectionSource": {
"value": "Agent preferred"
},
"platformSettingEnvironmentVariableOverrides": {
"value": ""
},
"platformSettingHeartbeatInactiveVmOfflineAlertEnabled": {
"value": "false"
},
"platformSettingHeartbeatInterval": {
"value": "10 Minutes"
},
"platformSettingHeartbeatLocalTimeShiftAlertThreshold": {
"value": "Unlimited"
},
"platformSettingHeartbeatMissedAlertThreshold": {
"value": "2"
},
"platformSettingInactiveAgentCleanupOverrideEnabled": {
"value": "false"
},
"platformSettingNotificationsSuppressPopupsEnabled": {
"value": "false"
},
"platformSettingRecommendationOngoingScansInterval": {
"value": "7 Days"
},
"platformSettingRelayState": {
"value": "false"
},
"platformSettingScanCacheConcurrencyMax": {
"value": "1"
},
"platformSettingScanOpenPortListId": {
"value": "1-1024"
},
"platformSettingSmartProtectionAntiMalwareGlobalServerProxyId": {
"value": ""
},
"platformSettingSmartProtectionGlobalServerEnabled": {
"value": "true"
},
"platformSettingSmartProtectionGlobalServerProxyId": {
"value": ""
},
"platformSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"platformSettingTroubleshootingLoggingLevel": {
"value": "Do Not Override"
},
"webReputationSettingAlertingEnabled": {
"value": "false"
},
"webReputationSettingAllowedUrlDomains": {
"value": ""
},
"webReputationSettingAllowedUrls": {
"value": ""
},
"webReputationSettingBlockedUrlDomains": {
"value": ""
},
"webReputationSettingBlockedUrlKeywords": {
"value": ""
},
"webReputationSettingBlockedUrls": {
"value": ""
},
"webReputationSettingBlockingPageLink": {
"value": "http://sitesafety.trendmicro.com/"
},
"webReputationSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"webReputationSettingMonitorPortListId": {
"value": "80,8080"
},
"webReputationSettingSecurityBlockUntestedPagesEnabled": {
"value": "false"
},
"webReputationSettingSecurityLevel": {
"value": "Medium"
},
"webReputationSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerAllowOffDomainGlobal": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerEnabled": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerUrls": {
"value": ""
},
"webReputationSettingSmartProtectionServerConnectionLostWarningEnabled": {
"value": "true"
},
"webReputationSettingSmartProtectionWebReputationGlobalServerProxyId": {
"value": ""
},
"webReputationSettingSyslogConfigId": {
"value": "0"
}
},
"computerStatus": {
"agentStatus": "inactive",
"agentStatusMessages": [
"Unmanaged (Unknown)"
]
},
"description": "Modified Test",
"displayName": "",
"firewall": {
"moduleStatus": {
"agentStatus": "inactive",
"agentStatusMessage": "Not Activated"
},
"state": "off"
},
"groupID": 0,
"hostGUID": "F2E3B97E-773E-B775-167F-571C4DF1D275",
"hostName": "q2",
"integrityMonitoring": {
"moduleStatus": {
"agentStatus": "inactive",
"agentStatusMessage": "Not Activated"
},
"state": "off"
},
"intrusionPrevention": {
"moduleStatus": {
"agentStatus": "inactive",
"agentStatusMessage": "Not Activated"
},
"state": "off"
},
"lastIPUsed": "",
"lastSendPolicyRequest": 1622492018767,
"logInspection": {
"moduleStatus": {
"agentStatus": "inactive",
"agentStatusMessage": "Not Activated"
},
"state": "off"
},
"platform": "Unknown",
"relayListID": 0,
"webReputation": {
"moduleStatus": {
"agentStatus": "inactive",
"agentStatusMessage": "Not Activated"
},
"state": "off"
}
},
{
"ID": 3,
"activityMonitoring": {
"moduleStatus": {
"agentStatus": "inactive",
"agentStatusMessage": "Not Activated"
},
"state": "off"
},
"agentVersion": "0.0.0.0",
"antiMalware": {
"manualScanConfigurationID": 0,
"moduleStatus": {
"agentStatus": "inactive",
"agentStatusMessage": "Not Activated"
},
"realTimeScanConfigurationID": 0,
"realTimeScanScheduleID": 0,
"scheduledScanConfigurationID": 0,
"state": "off"
},
"applicationControl": {
"blockUnrecognized": false,
"maintenanceModeStatus": "off",
"moduleStatus": {
"agentStatus": "inactive",
"agentStatusMessage": "Not Activated"
},
"state": "off"
},
"computerSettings": {
"activityMonitoringSettingActivityEnabled": {
"value": "Off"
},
"activityMonitoringSettingIndicatorEnabled": {
"value": "Off"
},
"activityMonitoringSettingSyslogConfigId": {
"value": "0"
},
"antiMalwareSettingBehaviorMonitoringScanExclusionList": {
"value": ""
},
"antiMalwareSettingCombinedModeProtectionSource": {
"value": "Appliance preferred"
},
"antiMalwareSettingConnectedThreatDefenseSuspiciousFileDdanSubmissionEnabled": {
"value": "true"
},
"antiMalwareSettingConnectedThreatDefenseUseControlManagerSuspiciousObjectListEnabled": {
"value": "true"
},
"antiMalwareSettingDocumentExploitProtectionRuleExceptions": {
"value": ""
},
"antiMalwareSettingFileHashEnabled": {
"value": "false"
},
"antiMalwareSettingFileHashMd5Enabled": {
"value": "false"
},
"antiMalwareSettingFileHashSha256Enabled": {
"value": "false"
},
"antiMalwareSettingFileHashSizeMaxMbytes": {
"value": "128"
},
"antiMalwareSettingIdentifiedFilesSpaceMaxMbytes": {
"value": "1024"
},
"antiMalwareSettingMalwareScanMultithreadedProcessingEnabled": {
"value": "false"
},
"antiMalwareSettingNsxSecurityTaggingEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingOnRemediationFailureEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingRemoveOnCleanScanEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingValue": {
"value": "ANTI_VIRUS.VirusFound.threat=medium"
},
"antiMalwareSettingPredictiveMachineLearningExceptions": {
"value": ""
},
"antiMalwareSettingScanCacheOnDemandConfigId": {
"value": ""
},
"antiMalwareSettingScanCacheRealTimeConfigId": {
"value": ""
},
"antiMalwareSettingScanFileSizeMaxMbytes": {
"value": "0"
},
"antiMalwareSettingSmartProtectionGlobalServerEnabled": {
"value": "true"
},
"antiMalwareSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"antiMalwareSettingSmartProtectionLocalServerAllowOffDomainGlobal": {
"value": "false"
},
"antiMalwareSettingSmartProtectionLocalServerUrls": {
"value": ""
},
"antiMalwareSettingSmartProtectionServerConnectionLostWarningEnabled": {
"value": "true"
},
"antiMalwareSettingSmartScanState": {
"value": "Automatic"
},
"antiMalwareSettingSpywareApprovedList": {
"value": ""
},
"antiMalwareSettingSyslogConfigId": {
"value": "0"
},
"antiMalwareSettingVirtualApplianceOnDemandScanCacheEntriesMax": {
"value": "500000"
},
"antiMalwareSettingVirtualApplianceRealTimeScanCacheEntriesMax": {
"value": "500000"
},
"applicationControlSettingExecutionEnforcementLevel": {
"value": "Allow unrecognized software until it is explicitly blocked"
},
"applicationControlSettingRulesetMode": {
"value": "Use local ruleset"
},
"applicationControlSettingSharedRulesetId": {
"value": "0"
},
"applicationControlSettingSyslogConfigId": {
"value": "0"
},
"firewallSettingAntiEvasionCheckEvasiveRetransmit": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckFinNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckFragmentedPackets": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckOutNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckPaws": {
"value": "Ignore"
},
"firewallSettingAntiEvasionCheckRstNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpChecksum": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpCongestionFlags": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpPawsZero": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpRstFinFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSplitHandshake": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynFinFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynRstFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynWithData": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpUrgentFlags": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpZeroFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionSecurityPosture": {
"value": "Normal"
},
"firewallSettingAntiEvasionTcpPawsWindowPolicy": {
"value": "0"
},
"firewallSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"firewallSettingConfigPackageExceedsAlertMaxEnabled": {
"value": "true"
},
"firewallSettingEngineOptionAckTimeout": {
"value": "1 Second"
},
"firewallSettingEngineOptionAllowNullIpEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBlockIpv6Agent8AndEarlierEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBlockIpv6Agent9AndLaterEnabled": {
"value": "false"
},
"firewallSettingEngineOptionBlockSameSrcDstIpEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBootStartTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionBypassCiscoWaasConnectionsEnabled": {
"value": "false"
},
"firewallSettingEngineOptionCloseTimeout": {
"value": "0 Seconds"
},
"firewallSettingEngineOptionCloseWaitTimeout": {
"value": "2 Minutes"
},
"firewallSettingEngineOptionClosingTimeout": {
"value": "1 Second"
},
"firewallSettingEngineOptionColdStartTimeout": {
"value": "5 Minutes"
},
"firewallSettingEngineOptionConnectionCleanupTimeout": {
"value": "10 Seconds"
},
"firewallSettingEngineOptionConnectionsCleanupMax": {
"value": "1000"
},
"firewallSettingEngineOptionConnectionsNumIcmpMax": {
"value": "10000"
},
"firewallSettingEngineOptionConnectionsNumTcpMax": {
"value": "1000000"
},
"firewallSettingEngineOptionConnectionsNumUdpMax": {
"value": "1000000"
},
"firewallSettingEngineOptionDebugModeEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDebugPacketNumMax": {
"value": "8"
},
"firewallSettingEngineOptionDisconnectTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionDrop6To4BogonsAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropEvasiveRetransmitEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDropIpZeroPayloadEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6BogonsAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6ExtType0Enabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6FragmentsLowerThanMinMtuEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6ReservedAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6SiteLocalAddressesEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDropTeredoAnomaliesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropUnknownSslProtocolEnabled": {
"value": "true"
},
"firewallSettingEngineOptionErrorTimeout": {
"value": "10 Seconds"
},
"firewallSettingEngineOptionEstablishedTimeout": {
"value": "3 Hours"
},
"firewallSettingEngineOptionEventNodesMax": {
"value": "20000"
},
"firewallSettingEngineOptionFilterIpv4Tunnels": {
"value": "Disable Detection of IPv4 Tunnels"
},
"firewallSettingEngineOptionFilterIpv6Tunnels": {
"value": "Disable Detection of IPv6 Tunnels"
},
"firewallSettingEngineOptionFinWait1Timeout": {
"value": "2 Minutes"
},
"firewallSettingEngineOptionForceAllowDhcpDns": {
"value": "Allow DNS Query and DHCP Client"
},
"firewallSettingEngineOptionForceAllowIcmpType3Code4": {
"value": "Add Force Allow rule for ICMP type3 code4"
},
"firewallSettingEngineOptionFragmentOffsetMin": {
"value": "60"
},
"firewallSettingEngineOptionFragmentSizeMin": {
"value": "120"
},
"firewallSettingEngineOptionGenerateConnectionEventsIcmpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionGenerateConnectionEventsTcpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionGenerateConnectionEventsUdpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionIcmpTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionIgnoreStatusCode0": {
"value": "None"
},
"firewallSettingEngineOptionIgnoreStatusCode1": {
"value": "None"
},
"firewallSettingEngineOptionIgnoreStatusCode2": {
"value": "None"
},
"firewallSettingEngineOptionLastAckTimeout": {
"value": "30 Seconds"
},
"firewallSettingEngineOptionLogAllPacketDataEnabled": {
"value": "false"
},
"firewallSettingEngineOptionLogEventsPerSecondMax": {
"value": "100"
},
"firewallSettingEngineOptionLogOnePacketPeriod": {
"value": "5 Minutes"
},
"firewallSettingEngineOptionLogOnePacketWithinPeriodEnabled": {
"value": "false"
},
"firewallSettingEngineOptionLogPacketLengthMax": {
"value": "1500 Bytes"
},
"firewallSettingEngineOptionLoggingPolicy": {
"value": "Default"
},
"firewallSettingEngineOptionSilentTcpConnectionDropEnabled": {
"value": "false"
},
"firewallSettingEngineOptionSslSessionSize": {
"value": "Low - 2500"
},
"firewallSettingEngineOptionSslSessionTime": {
"value": "24 Hours"
},
"firewallSettingEngineOptionStrictTerodoPortCheckEnabled": {
"value": "true"
},
"firewallSettingEngineOptionSynRcvdTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionSynSentTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionTcpMssLimit": {
"value": "128 Bytes"
},
"firewallSettingEngineOptionTunnelDepthMax": {
"value": "1"
},
"firewallSettingEngineOptionTunnelDepthMaxExceededAction": {
"value": "Drop"
},
"firewallSettingEngineOptionUdpTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionVerifyTcpChecksumEnabled": {
"value": "false"
},
"firewallSettingEngineOptionsEnabled": {
"value": "false"
},
"firewallSettingEventLogFileCachedEntriesLifeTime": {
"value": "30 Minutes"
},
"firewallSettingEventLogFileCachedEntriesNum": {
"value": "128"
},
"firewallSettingEventLogFileCachedEntriesStaleTime": {
"value": "15 Minutes"
},
"firewallSettingEventLogFileIgnoreSourceIpListId": {
"value": ""
},
"firewallSettingEventLogFileRetainNum": {
"value": "3"
},
"firewallSettingEventLogFileSizeMax": {
"value": "4 MB"
},
"firewallSettingEventsOutOfAllowedPolicyEnabled": {
"value": "true"
},
"firewallSettingFailureResponseEngineSystem": {
"value": "Fail closed"
},
"firewallSettingFailureResponsePacketSanityCheck": {
"value": "Fail closed"
},
"firewallSettingInterfaceIsolationEnabled": {
"value": "false"
},
"firewallSettingInterfaceLimitOneActiveEnabled": {
"value": "false"
},
"firewallSettingInterfacePatterns": {
"value": ""
},
"firewallSettingNetworkEngineMode": {
"value": "Inline"
},
"firewallSettingReconnaissanceBlockFingerprintProbeDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockNetworkOrPortScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpNullScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpSynFinScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpXmasAttackDuration": {
"value": "No"
},
"firewallSettingReconnaissanceDetectFingerprintProbeEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectNetworkOrPortScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpNullScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpSynFinScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpXmasAttackEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceExcludeIpListId": {
"value": ""
},
"firewallSettingReconnaissanceIncludeIpListId": {
"value": ""
},
"firewallSettingReconnaissanceNotifyFingerprintProbeEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyNetworkOrPortScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpNullScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpSynFinScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpXmasAttackEnabled": {
"value": "true"
},
"firewallSettingSyslogConfigId": {
"value": "0"
},
"firewallSettingVirtualAndContainerNetworkScanEnabled": {
"value": "false"
},
"integrityMonitoringSettingAutoApplyRecommendationsEnabled": {
"value": "No"
},
"integrityMonitoringSettingCombinedModeProtectionSource": {
"value": "Appliance preferred"
},
"integrityMonitoringSettingContentHashAlgorithm": {
"value": "sha1"
},
"integrityMonitoringSettingCpuUsageLevel": {
"value": "High"
},
"integrityMonitoringSettingRealtimeEnabled": {
"value": "false"
},
"integrityMonitoringSettingScanCacheConfigId": {
"value": ""
},
"integrityMonitoringSettingSyslogConfigId": {
"value": "0"
},
"integrityMonitoringSettingVirtualApplianceOptimizationScanCacheEntriesMax": {
"value": "500000"
},
"intrusionPreventionSettingAutoApplyRecommendationsEnabled": {
"value": "No"
},
"intrusionPreventionSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"intrusionPreventionSettingEngineOptionFragmentedIpKeepMax": {
"value": "1000"
},
"intrusionPreventionSettingEngineOptionFragmentedIpPacketSendIcmpEnabled": {
"value": "true"
},
"intrusionPreventionSettingEngineOptionFragmentedIpTimeout": {
"value": "60 Seconds"
},
"intrusionPreventionSettingEngineOptionFragmentedIpUnconcernedMacAddressBypassEnabled": {
"value": "false"
},
"intrusionPreventionSettingEngineOptionsEnabled": {
"value": "false"
},
"intrusionPreventionSettingLogDataRuleFirstMatchEnabled": {
"value": "true"
},
"intrusionPreventionSettingNsxSecurityTaggingDetectModeLevel": {
"value": "No Tagging"
},
"intrusionPreventionSettingNsxSecurityTaggingPreventModeLevel": {
"value": "No Tagging"
},
"intrusionPreventionSettingVirtualAndContainerNetworkScanEnabled": {
"value": "true"
},
"logInspectionSettingAutoApplyRecommendationsEnabled": {
"value": "No"
},
"logInspectionSettingSeverityClippingAgentEventSendSyslogLevelMin": {
"value": "Medium (6)"
},
"logInspectionSettingSeverityClippingAgentEventStoreLevelMin": {
"value": "Medium (6)"
},
"logInspectionSettingSyslogConfigId": {
"value": "0"
},
"platformSettingAgentCommunicationsDirection": {
"value": "Agent/Appliance Initiated"
},
"platformSettingAgentEventsSendInterval": {
"value": "60 Seconds"
},
"platformSettingAgentSelfProtectionEnabled": {
"value": "false"
},
"platformSettingAgentSelfProtectionPassword": {
"value": ""
},
"platformSettingAgentSelfProtectionPasswordEnabled": {
"value": "false"
},
"platformSettingAutoAssignNewIntrusionPreventionRulesEnabled": {
"value": "true"
},
"platformSettingAutoUpdateAntiMalwareEngineEnabled": {
"value": "false"
},
"platformSettingCombinedModeNetworkGroupProtectionSource": {
"value": "Agent preferred"
},
"platformSettingEnvironmentVariableOverrides": {
"value": ""
},
"platformSettingHeartbeatInactiveVmOfflineAlertEnabled": {
"value": "false"
},
"platformSettingHeartbeatInterval": {
"value": "10 Minutes"
},
"platformSettingHeartbeatLocalTimeShiftAlertThreshold": {
"value": "Unlimited"
},
"platformSettingHeartbeatMissedAlertThreshold": {
"value": "2"
},
"platformSettingInactiveAgentCleanupOverrideEnabled": {
"value": "false"
},
"platformSettingNotificationsSuppressPopupsEnabled": {
"value": "false"
},
"platformSettingRecommendationOngoingScansInterval": {
"value": "7 Days"
},
"platformSettingRelayState": {
"value": "false"
},
"platformSettingScanCacheConcurrencyMax": {
"value": "1"
},
"platformSettingScanOpenPortListId": {
"value": "1-1024"
},
"platformSettingSmartProtectionAntiMalwareGlobalServerProxyId": {
"value": ""
},
"platformSettingSmartProtectionGlobalServerEnabled": {
"value": "true"
},
"platformSettingSmartProtectionGlobalServerProxyId": {
"value": ""
},
"platformSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"platformSettingTroubleshootingLoggingLevel": {
"value": "Do Not Override"
},
"webReputationSettingAlertingEnabled": {
"value": "false"
},
"webReputationSettingAllowedUrlDomains": {
"value": ""
},
"webReputationSettingAllowedUrls": {
"value": ""
},
"webReputationSettingBlockedUrlDomains": {
"value": ""
},
"webReputationSettingBlockedUrlKeywords": {
"value": ""
},
"webReputationSettingBlockedUrls": {
"value": ""
},
"webReputationSettingBlockingPageLink": {
"value": "http://sitesafety.trendmicro.com/"
},
"webReputationSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"webReputationSettingMonitorPortListId": {
"value": "80,8080"
},
"webReputationSettingSecurityBlockUntestedPagesEnabled": {
"value": "false"
},
"webReputationSettingSecurityLevel": {
"value": "Medium"
},
"webReputationSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerAllowOffDomainGlobal": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerEnabled": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerUrls": {
"value": ""
},
"webReputationSettingSmartProtectionServerConnectionLostWarningEnabled": {
"value": "true"
},
"webReputationSettingSmartProtectionWebReputationGlobalServerProxyId": {
"value": ""
},
"webReputationSettingSyslogConfigId": {
"value": "0"
}
},
"computerStatus": {
"agentStatus": "inactive",
"agentStatusMessages": [
"Unmanaged (Unknown)"
]
},
"description": "Modified Test",
"displayName": "",
"firewall": {
"moduleStatus": {
"agentStatus": "inactive",
"agentStatusMessage": "Not Activated"
},
"state": "off"
},
"groupID": 0,
"hostGUID": "950C88D8-90FD-3F4F-02E4-DF1EC0E0D801",
"hostName": "poc",
"integrityMonitoring": {
"moduleStatus": {
"agentStatus": "inactive",
"agentStatusMessage": "Not Activated"
},
"state": "off"
},
"intrusionPrevention": {
"moduleStatus": {
"agentStatus": "inactive",
"agentStatusMessage": "Not Activated"
},
"state": "off"
},
"lastIPUsed": "",
"lastSendPolicyRequest": 1622492018767,
"logInspection": {
"moduleStatus": {
"agentStatus": "inactive",
"agentStatusMessage": "Not Activated"
},
"state": "off"
},
"platform": "Unknown",
"relayListID": 0,
"webReputation": {
"moduleStatus": {
"agentStatus": "inactive",
"agentStatusMessage": "Not Activated"
},
"state": "off"
}
},
{
"ID": 34,
"activityMonitoring": {
"moduleStatus": {
"agentStatus": "inactive",
"agentStatusMessage": "Not Activated"
},
"state": "off"
},
"agentVersion": "0.0.0.0",
"antiMalware": {
"manualScanConfigurationID": 2,
"moduleStatus": {
"agentStatus": "inactive",
"agentStatusMessage": "Not Activated"
},
"realTimeScanConfigurationID": 1,
"realTimeScanScheduleID": 4,
"scheduledScanConfigurationID": 3,
"state": "off"
},
"applicationControl": {
"blockUnrecognized": false,
"maintenanceModeStatus": "off",
"moduleStatus": {
"agentStatus": "inactive",
"agentStatusMessage": "Not Activated"
},
"state": "off"
},
"computerSettings": {
"activityMonitoringSettingActivityEnabled": {
"value": "Off"
},
"activityMonitoringSettingIndicatorEnabled": {
"value": "Off"
},
"activityMonitoringSettingSyslogConfigId": {
"value": "0"
},
"antiMalwareSettingBehaviorMonitoringScanExclusionList": {
"value": ""
},
"antiMalwareSettingCombinedModeProtectionSource": {
"value": "Appliance preferred"
},
"antiMalwareSettingConnectedThreatDefenseSuspiciousFileDdanSubmissionEnabled": {
"value": "true"
},
"antiMalwareSettingConnectedThreatDefenseUseControlManagerSuspiciousObjectListEnabled": {
"value": "true"
},
"antiMalwareSettingDocumentExploitProtectionRuleExceptions": {
"value": ""
},
"antiMalwareSettingFileHashEnabled": {
"value": "false"
},
"antiMalwareSettingFileHashMd5Enabled": {
"value": "false"
},
"antiMalwareSettingFileHashSha256Enabled": {
"value": "false"
},
"antiMalwareSettingFileHashSizeMaxMbytes": {
"value": "128"
},
"antiMalwareSettingIdentifiedFilesSpaceMaxMbytes": {
"value": "1024"
},
"antiMalwareSettingMalwareScanMultithreadedProcessingEnabled": {
"value": "false"
},
"antiMalwareSettingNsxSecurityTaggingEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingOnRemediationFailureEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingRemoveOnCleanScanEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingValue": {
"value": "ANTI_VIRUS.VirusFound.threat=medium"
},
"antiMalwareSettingPredictiveMachineLearningExceptions": {
"value": ""
},
"antiMalwareSettingScanCacheOnDemandConfigId": {
"value": "1"
},
"antiMalwareSettingScanCacheRealTimeConfigId": {
"value": "2"
},
"antiMalwareSettingScanFileSizeMaxMbytes": {
"value": "0"
},
"antiMalwareSettingSmartProtectionGlobalServerEnabled": {
"value": "true"
},
"antiMalwareSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"antiMalwareSettingSmartProtectionLocalServerAllowOffDomainGlobal": {
"value": "false"
},
"antiMalwareSettingSmartProtectionLocalServerUrls": {
"value": ""
},
"antiMalwareSettingSmartProtectionServerConnectionLostWarningEnabled": {
"value": "true"
},
"antiMalwareSettingSmartScanState": {
"value": "Automatic"
},
"antiMalwareSettingSpywareApprovedList": {
"value": ""
},
"antiMalwareSettingSyslogConfigId": {
"value": "0"
},
"antiMalwareSettingVirtualApplianceOnDemandScanCacheEntriesMax": {
"value": "500000"
},
"antiMalwareSettingVirtualApplianceRealTimeScanCacheEntriesMax": {
"value": "500000"
},
"applicationControlSettingExecutionEnforcementLevel": {
"value": "Allow unrecognized software until it is explicitly blocked"
},
"applicationControlSettingRulesetMode": {
"value": "Use local ruleset"
},
"applicationControlSettingSharedRulesetId": {
"value": "0"
},
"applicationControlSettingSyslogConfigId": {
"value": "0"
},
"firewallSettingAntiEvasionCheckEvasiveRetransmit": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckFinNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckFragmentedPackets": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckOutNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckPaws": {
"value": "Ignore"
},
"firewallSettingAntiEvasionCheckRstNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpChecksum": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpCongestionFlags": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpPawsZero": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpRstFinFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSplitHandshake": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynFinFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynRstFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynWithData": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpUrgentFlags": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpZeroFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionSecurityPosture": {
"value": "Normal"
},
"firewallSettingAntiEvasionTcpPawsWindowPolicy": {
"value": "0"
},
"firewallSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"firewallSettingConfigPackageExceedsAlertMaxEnabled": {
"value": "true"
},
"firewallSettingEngineOptionAckTimeout": {
"value": "1 Second"
},
"firewallSettingEngineOptionAllowNullIpEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBlockIpv6Agent8AndEarlierEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBlockIpv6Agent9AndLaterEnabled": {
"value": "false"
},
"firewallSettingEngineOptionBlockSameSrcDstIpEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBootStartTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionBypassCiscoWaasConnectionsEnabled": {
"value": "false"
},
"firewallSettingEngineOptionCloseTimeout": {
"value": "0 Seconds"
},
"firewallSettingEngineOptionCloseWaitTimeout": {
"value": "2 Minutes"
},
"firewallSettingEngineOptionClosingTimeout": {
"value": "1 Second"
},
"firewallSettingEngineOptionColdStartTimeout": {
"value": "5 Minutes"
},
"firewallSettingEngineOptionConnectionCleanupTimeout": {
"value": "10 Seconds"
},
"firewallSettingEngineOptionConnectionsCleanupMax": {
"value": "1000"
},
"firewallSettingEngineOptionConnectionsNumIcmpMax": {
"value": "10000"
},
"firewallSettingEngineOptionConnectionsNumTcpMax": {
"value": "1000000"
},
"firewallSettingEngineOptionConnectionsNumUdpMax": {
"value": "1000000"
},
"firewallSettingEngineOptionDebugModeEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDebugPacketNumMax": {
"value": "8"
},
"firewallSettingEngineOptionDisconnectTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionDrop6To4BogonsAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropEvasiveRetransmitEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDropIpZeroPayloadEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6BogonsAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6ExtType0Enabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6FragmentsLowerThanMinMtuEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6ReservedAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6SiteLocalAddressesEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDropTeredoAnomaliesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropUnknownSslProtocolEnabled": {
"value": "true"
},
"firewallSettingEngineOptionErrorTimeout": {
"value": "10 Seconds"
},
"firewallSettingEngineOptionEstablishedTimeout": {
"value": "3 Hours"
},
"firewallSettingEngineOptionEventNodesMax": {
"value": "20000"
},
"firewallSettingEngineOptionFilterIpv4Tunnels": {
"value": "Disable Detection of IPv4 Tunnels"
},
"firewallSettingEngineOptionFilterIpv6Tunnels": {
"value": "Disable Detection of IPv6 Tunnels"
},
"firewallSettingEngineOptionFinWait1Timeout": {
"value": "2 Minutes"
},
"firewallSettingEngineOptionForceAllowDhcpDns": {
"value": "Allow DNS Query and DHCP Client"
},
"firewallSettingEngineOptionForceAllowIcmpType3Code4": {
"value": "Add Force Allow rule for ICMP type3 code4"
},
"firewallSettingEngineOptionFragmentOffsetMin": {
"value": "60"
},
"firewallSettingEngineOptionFragmentSizeMin": {
"value": "120"
},
"firewallSettingEngineOptionGenerateConnectionEventsIcmpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionGenerateConnectionEventsTcpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionGenerateConnectionEventsUdpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionIcmpTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionIgnoreStatusCode0": {
"value": "None"
},
"firewallSettingEngineOptionIgnoreStatusCode1": {
"value": "None"
},
"firewallSettingEngineOptionIgnoreStatusCode2": {
"value": "None"
},
"firewallSettingEngineOptionLastAckTimeout": {
"value": "3 Minutes"
},
"firewallSettingEngineOptionLogAllPacketDataEnabled": {
"value": "false"
},
"firewallSettingEngineOptionLogEventsPerSecondMax": {
"value": "100"
},
"firewallSettingEngineOptionLogOnePacketPeriod": {
"value": "5 Minutes"
},
"firewallSettingEngineOptionLogOnePacketWithinPeriodEnabled": {
"value": "false"
},
"firewallSettingEngineOptionLogPacketLengthMax": {
"value": "1500 Bytes"
},
"firewallSettingEngineOptionLoggingPolicy": {
"value": "Default"
},
"firewallSettingEngineOptionSilentTcpConnectionDropEnabled": {
"value": "false"
},
"firewallSettingEngineOptionSslSessionSize": {
"value": "Low - 2500"
},
"firewallSettingEngineOptionSslSessionTime": {
"value": "24 Hours"
},
"firewallSettingEngineOptionStrictTerodoPortCheckEnabled": {
"value": "true"
},
"firewallSettingEngineOptionSynRcvdTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionSynSentTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionTcpMssLimit": {
"value": "128 Bytes"
},
"firewallSettingEngineOptionTunnelDepthMax": {
"value": "1"
},
"firewallSettingEngineOptionTunnelDepthMaxExceededAction": {
"value": "Drop"
},
"firewallSettingEngineOptionUdpTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionVerifyTcpChecksumEnabled": {
"value": "false"
},
"firewallSettingEngineOptionsEnabled": {
"value": "true"
},
"firewallSettingEventLogFileCachedEntriesLifeTime": {
"value": "30 Minutes"
},
"firewallSettingEventLogFileCachedEntriesNum": {
"value": "128"
},
"firewallSettingEventLogFileCachedEntriesStaleTime": {
"value": "15 Minutes"
},
"firewallSettingEventLogFileIgnoreSourceIpListId": {
"value": ""
},
"firewallSettingEventLogFileRetainNum": {
"value": "3"
},
"firewallSettingEventLogFileSizeMax": {
"value": "4 MB"
},
"firewallSettingEventsOutOfAllowedPolicyEnabled": {
"value": "true"
},
"firewallSettingFailureResponseEngineSystem": {
"value": "Fail closed"
},
"firewallSettingFailureResponsePacketSanityCheck": {
"value": "Fail closed"
},
"firewallSettingInterfaceIsolationEnabled": {
"value": "false"
},
"firewallSettingInterfaceLimitOneActiveEnabled": {
"value": "false"
},
"firewallSettingInterfacePatterns": {
"value": ""
},
"firewallSettingNetworkEngineMode": {
"value": "Inline"
},
"firewallSettingReconnaissanceBlockFingerprintProbeDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockNetworkOrPortScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpNullScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpSynFinScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpXmasAttackDuration": {
"value": "No"
},
"firewallSettingReconnaissanceDetectFingerprintProbeEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectNetworkOrPortScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpNullScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpSynFinScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpXmasAttackEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceExcludeIpListId": {
"value": "1"
},
"firewallSettingReconnaissanceIncludeIpListId": {
"value": ""
},
"firewallSettingReconnaissanceNotifyFingerprintProbeEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyNetworkOrPortScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpNullScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpSynFinScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpXmasAttackEnabled": {
"value": "true"
},
"firewallSettingSyslogConfigId": {
"value": "0"
},
"firewallSettingVirtualAndContainerNetworkScanEnabled": {
"value": "false"
},
"integrityMonitoringSettingAutoApplyRecommendationsEnabled": {
"value": "No"
},
"integrityMonitoringSettingCombinedModeProtectionSource": {
"value": "Appliance preferred"
},
"integrityMonitoringSettingContentHashAlgorithm": {
"value": "sha1"
},
"integrityMonitoringSettingCpuUsageLevel": {
"value": "High"
},
"integrityMonitoringSettingRealtimeEnabled": {
"value": "false"
},
"integrityMonitoringSettingScanCacheConfigId": {
"value": "3"
},
"integrityMonitoringSettingSyslogConfigId": {
"value": "0"
},
"integrityMonitoringSettingVirtualApplianceOptimizationScanCacheEntriesMax": {
"value": "500000"
},
"intrusionPreventionSettingAutoApplyRecommendationsEnabled": {
"value": "Yes"
},
"intrusionPreventionSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"intrusionPreventionSettingEngineOptionFragmentedIpKeepMax": {
"value": "1000"
},
"intrusionPreventionSettingEngineOptionFragmentedIpPacketSendIcmpEnabled": {
"value": "true"
},
"intrusionPreventionSettingEngineOptionFragmentedIpTimeout": {
"value": "60 Seconds"
},
"intrusionPreventionSettingEngineOptionFragmentedIpUnconcernedMacAddressBypassEnabled": {
"value": "false"
},
"intrusionPreventionSettingEngineOptionsEnabled": {
"value": "false"
},
"intrusionPreventionSettingLogDataRuleFirstMatchEnabled": {
"value": "true"
},
"intrusionPreventionSettingNsxSecurityTaggingDetectModeLevel": {
"value": "No Tagging"
},
"intrusionPreventionSettingNsxSecurityTaggingPreventModeLevel": {
"value": "No Tagging"
},
"intrusionPreventionSettingVirtualAndContainerNetworkScanEnabled": {
"value": "true"
},
"logInspectionSettingAutoApplyRecommendationsEnabled": {
"value": "No"
},
"logInspectionSettingSeverityClippingAgentEventSendSyslogLevelMin": {
"value": "Medium (6)"
},
"logInspectionSettingSeverityClippingAgentEventStoreLevelMin": {
"value": "Medium (6)"
},
"logInspectionSettingSyslogConfigId": {
"value": "0"
},
"platformSettingAgentCommunicationsDirection": {
"value": "Agent/Appliance Initiated"
},
"platformSettingAgentEventsSendInterval": {
"value": "60 Seconds"
},
"platformSettingAgentSelfProtectionEnabled": {
"value": "false"
},
"platformSettingAgentSelfProtectionPassword": {
"value": ""
},
"platformSettingAgentSelfProtectionPasswordEnabled": {
"value": "false"
},
"platformSettingAutoAssignNewIntrusionPreventionRulesEnabled": {
"value": "true"
},
"platformSettingAutoUpdateAntiMalwareEngineEnabled": {
"value": "false"
},
"platformSettingCombinedModeNetworkGroupProtectionSource": {
"value": "Agent preferred"
},
"platformSettingEnvironmentVariableOverrides": {
"value": ""
},
"platformSettingHeartbeatInactiveVmOfflineAlertEnabled": {
"value": "false"
},
"platformSettingHeartbeatInterval": {
"value": "10 Minutes"
},
"platformSettingHeartbeatLocalTimeShiftAlertThreshold": {
"value": "Unlimited"
},
"platformSettingHeartbeatMissedAlertThreshold": {
"value": "5"
},
"platformSettingInactiveAgentCleanupOverrideEnabled": {
"value": "false"
},
"platformSettingNotificationsSuppressPopupsEnabled": {
"value": "false"
},
"platformSettingRecommendationOngoingScansInterval": {
"value": "7 Days"
},
"platformSettingRelayState": {
"value": "false"
},
"platformSettingScanCacheConcurrencyMax": {
"value": "1"
},
"platformSettingScanOpenPortListId": {
"value": "1-1024"
},
"platformSettingSmartProtectionAntiMalwareGlobalServerProxyId": {
"value": ""
},
"platformSettingSmartProtectionGlobalServerEnabled": {
"value": "true"
},
"platformSettingSmartProtectionGlobalServerProxyId": {
"value": ""
},
"platformSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"platformSettingTroubleshootingLoggingLevel": {
"value": "Do Not Override"
},
"webReputationSettingAlertingEnabled": {
"value": "false"
},
"webReputationSettingAllowedUrlDomains": {
"value": ""
},
"webReputationSettingAllowedUrls": {
"value": ""
},
"webReputationSettingBlockedUrlDomains": {
"value": ""
},
"webReputationSettingBlockedUrlKeywords": {
"value": ""
},
"webReputationSettingBlockedUrls": {
"value": ""
},
"webReputationSettingBlockingPageLink": {
"value": "http://sitesafety.trendmicro.com/"
},
"webReputationSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"webReputationSettingMonitorPortListId": {
"value": "80,8080"
},
"webReputationSettingSecurityBlockUntestedPagesEnabled": {
"value": "false"
},
"webReputationSettingSecurityLevel": {
"value": "Medium"
},
"webReputationSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerAllowOffDomainGlobal": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerEnabled": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerUrls": {
"value": ""
},
"webReputationSettingSmartProtectionServerConnectionLostWarningEnabled": {
"value": "true"
},
"webReputationSettingSmartProtectionWebReputationGlobalServerProxyId": {
"value": ""
},
"webReputationSettingSyslogConfigId": {
"value": "0"
}
},
"computerStatus": {
"agentStatus": "inactive",
"agentStatusMessages": [
"Unmanaged (Unknown)"
]
},
"description": "Modified Test",
"displayName": "",
"firewall": {
"globalStatefulConfigurationID": 1,
"moduleStatus": {
"agentStatus": "inactive",
"agentStatusMessage": "Not Activated"
},
"ruleIDs": [
23,
28
],
"state": "off"
},
"groupID": 0,
"hostGUID": "D371794B-C7C0-A81F-8DA0-D658A26B1DD4",
"hostName": "aaaaa",
"integrityMonitoring": {
"moduleStatus": {
"agentStatus": "inactive",
"agentStatusMessage": "Not Activated"
},
"state": "off"
},
"intrusionPrevention": {
"moduleStatus": {
"agentStatus": "inactive",
"agentStatusMessage": "Not Activated"
},
"state": "off"
},
"lastIPUsed": "",
"lastSendPolicyRequest": 1622492018767,
"logInspection": {
"moduleStatus": {
"agentStatus": "inactive",
"agentStatusMessage": "Not Activated"
},
"state": "off"
},
"platform": "Unknown",
"policyID": 1,
"relayListID": 0,
"webReputation": {
"moduleStatus": {
"agentStatus": "inactive",
"agentStatusMessage": "Not Activated"
},
"state": "off"
}
},
{
"ID": 166,
"activityMonitoring": {
"moduleStatus": {
"agentStatus": "inactive",
"agentStatusMessage": "Not Activated"
},
"state": "off"
},
"agentVersion": "0.0.0.0",
"antiMalware": {
"manualScanConfigurationID": 0,
"moduleStatus": {
"agentStatus": "inactive",
"agentStatusMessage": "Not Activated"
},
"realTimeScanConfigurationID": 0,
"realTimeScanScheduleID": 0,
"scheduledScanConfigurationID": 0,
"state": "off"
},
"applicationControl": {
"blockUnrecognized": false,
"maintenanceModeStatus": "off",
"moduleStatus": {
"agentStatus": "inactive",
"agentStatusMessage": "Not Activated"
},
"state": "off"
},
"computerSettings": {
"activityMonitoringSettingActivityEnabled": {
"value": "Off"
},
"activityMonitoringSettingIndicatorEnabled": {
"value": "Off"
},
"activityMonitoringSettingSyslogConfigId": {
"value": "0"
},
"antiMalwareSettingBehaviorMonitoringScanExclusionList": {
"value": ""
},
"antiMalwareSettingCombinedModeProtectionSource": {
"value": "Appliance preferred"
},
"antiMalwareSettingConnectedThreatDefenseSuspiciousFileDdanSubmissionEnabled": {
"value": "true"
},
"antiMalwareSettingConnectedThreatDefenseUseControlManagerSuspiciousObjectListEnabled": {
"value": "true"
},
"antiMalwareSettingDocumentExploitProtectionRuleExceptions": {
"value": ""
},
"antiMalwareSettingFileHashEnabled": {
"value": "false"
},
"antiMalwareSettingFileHashMd5Enabled": {
"value": "false"
},
"antiMalwareSettingFileHashSha256Enabled": {
"value": "false"
},
"antiMalwareSettingFileHashSizeMaxMbytes": {
"value": "128"
},
"antiMalwareSettingIdentifiedFilesSpaceMaxMbytes": {
"value": "1024"
},
"antiMalwareSettingMalwareScanMultithreadedProcessingEnabled": {
"value": "false"
},
"antiMalwareSettingNsxSecurityTaggingEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingOnRemediationFailureEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingRemoveOnCleanScanEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingValue": {
"value": "ANTI_VIRUS.VirusFound.threat=medium"
},
"antiMalwareSettingPredictiveMachineLearningExceptions": {
"value": ""
},
"antiMalwareSettingScanCacheOnDemandConfigId": {
"value": ""
},
"antiMalwareSettingScanCacheRealTimeConfigId": {
"value": ""
},
"antiMalwareSettingScanFileSizeMaxMbytes": {
"value": "0"
},
"antiMalwareSettingSmartProtectionGlobalServerEnabled": {
"value": "true"
},
"antiMalwareSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"antiMalwareSettingSmartProtectionLocalServerAllowOffDomainGlobal": {
"value": "false"
},
"antiMalwareSettingSmartProtectionLocalServerUrls": {
"value": ""
},
"antiMalwareSettingSmartProtectionServerConnectionLostWarningEnabled": {
"value": "true"
},
"antiMalwareSettingSmartScanState": {
"value": "Automatic"
},
"antiMalwareSettingSpywareApprovedList": {
"value": ""
},
"antiMalwareSettingSyslogConfigId": {
"value": "0"
},
"antiMalwareSettingVirtualApplianceOnDemandScanCacheEntriesMax": {
"value": "500000"
},
"antiMalwareSettingVirtualApplianceRealTimeScanCacheEntriesMax": {
"value": "500000"
},
"applicationControlSettingExecutionEnforcementLevel": {
"value": "Allow unrecognized software until it is explicitly blocked"
},
"applicationControlSettingRulesetMode": {
"value": "Use local ruleset"
},
"applicationControlSettingSharedRulesetId": {
"value": "0"
},
"applicationControlSettingSyslogConfigId": {
"value": "0"
},
"firewallSettingAntiEvasionCheckEvasiveRetransmit": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckFinNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckFragmentedPackets": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckOutNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckPaws": {
"value": "Ignore"
},
"firewallSettingAntiEvasionCheckRstNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpChecksum": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpCongestionFlags": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpPawsZero": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpRstFinFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSplitHandshake": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynFinFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynRstFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynWithData": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpUrgentFlags": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpZeroFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionSecurityPosture": {
"value": "Normal"
},
"firewallSettingAntiEvasionTcpPawsWindowPolicy": {
"value": "0"
},
"firewallSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"firewallSettingConfigPackageExceedsAlertMaxEnabled": {
"value": "true"
},
"firewallSettingEngineOptionAckTimeout": {
"value": "1 Second"
},
"firewallSettingEngineOptionAllowNullIpEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBlockIpv6Agent8AndEarlierEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBlockIpv6Agent9AndLaterEnabled": {
"value": "false"
},
"firewallSettingEngineOptionBlockSameSrcDstIpEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBootStartTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionBypassCiscoWaasConnectionsEnabled": {
"value": "false"
},
"firewallSettingEngineOptionCloseTimeout": {
"value": "0 Seconds"
},
"firewallSettingEngineOptionCloseWaitTimeout": {
"value": "2 Minutes"
},
"firewallSettingEngineOptionClosingTimeout": {
"value": "1 Second"
},
"firewallSettingEngineOptionColdStartTimeout": {
"value": "5 Minutes"
},
"firewallSettingEngineOptionConnectionCleanupTimeout": {
"value": "10 Seconds"
},
"firewallSettingEngineOptionConnectionsCleanupMax": {
"value": "1000"
},
"firewallSettingEngineOptionConnectionsNumIcmpMax": {
"value": "10000"
},
"firewallSettingEngineOptionConnectionsNumTcpMax": {
"value": "1000000"
},
"firewallSettingEngineOptionConnectionsNumUdpMax": {
"value": "1000000"
},
"firewallSettingEngineOptionDebugModeEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDebugPacketNumMax": {
"value": "8"
},
"firewallSettingEngineOptionDisconnectTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionDrop6To4BogonsAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropEvasiveRetransmitEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDropIpZeroPayloadEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6BogonsAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6ExtType0Enabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6FragmentsLowerThanMinMtuEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6ReservedAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6SiteLocalAddressesEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDropTeredoAnomaliesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropUnknownSslProtocolEnabled": {
"value": "true"
},
"firewallSettingEngineOptionErrorTimeout": {
"value": "10 Seconds"
},
"firewallSettingEngineOptionEstablishedTimeout": {
"value": "3 Hours"
},
"firewallSettingEngineOptionEventNodesMax": {
"value": "20000"
},
"firewallSettingEngineOptionFilterIpv4Tunnels": {
"value": "Disable Detection of IPv4 Tunnels"
},
"firewallSettingEngineOptionFilterIpv6Tunnels": {
"value": "Disable Detection of IPv6 Tunnels"
},
"firewallSettingEngineOptionFinWait1Timeout": {
"value": "2 Minutes"
},
"firewallSettingEngineOptionForceAllowDhcpDns": {
"value": "Allow DNS Query and DHCP Client"
},
"firewallSettingEngineOptionForceAllowIcmpType3Code4": {
"value": "Add Force Allow rule for ICMP type3 code4"
},
"firewallSettingEngineOptionFragmentOffsetMin": {
"value": "60"
},
"firewallSettingEngineOptionFragmentSizeMin": {
"value": "120"
},
"firewallSettingEngineOptionGenerateConnectionEventsIcmpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionGenerateConnectionEventsTcpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionGenerateConnectionEventsUdpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionIcmpTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionIgnoreStatusCode0": {
"value": "None"
},
"firewallSettingEngineOptionIgnoreStatusCode1": {
"value": "None"
},
"firewallSettingEngineOptionIgnoreStatusCode2": {
"value": "None"
},
"firewallSettingEngineOptionLastAckTimeout": {
"value": "30 Seconds"
},
"firewallSettingEngineOptionLogAllPacketDataEnabled": {
"value": "false"
},
"firewallSettingEngineOptionLogEventsPerSecondMax": {
"value": "100"
},
"firewallSettingEngineOptionLogOnePacketPeriod": {
"value": "5 Minutes"
},
"firewallSettingEngineOptionLogOnePacketWithinPeriodEnabled": {
"value": "false"
},
"firewallSettingEngineOptionLogPacketLengthMax": {
"value": "1500 Bytes"
},
"firewallSettingEngineOptionLoggingPolicy": {
"value": "Default"
},
"firewallSettingEngineOptionSilentTcpConnectionDropEnabled": {
"value": "false"
},
"firewallSettingEngineOptionSslSessionSize": {
"value": "Low - 2500"
},
"firewallSettingEngineOptionSslSessionTime": {
"value": "24 Hours"
},
"firewallSettingEngineOptionStrictTerodoPortCheckEnabled": {
"value": "true"
},
"firewallSettingEngineOptionSynRcvdTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionSynSentTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionTcpMssLimit": {
"value": "128 Bytes"
},
"firewallSettingEngineOptionTunnelDepthMax": {
"value": "1"
},
"firewallSettingEngineOptionTunnelDepthMaxExceededAction": {
"value": "Drop"
},
"firewallSettingEngineOptionUdpTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionVerifyTcpChecksumEnabled": {
"value": "false"
},
"firewallSettingEngineOptionsEnabled": {
"value": "false"
},
"firewallSettingEventLogFileCachedEntriesLifeTime": {
"value": "30 Minutes"
},
"firewallSettingEventLogFileCachedEntriesNum": {
"value": "128"
},
"firewallSettingEventLogFileCachedEntriesStaleTime": {
"value": "15 Minutes"
},
"firewallSettingEventLogFileIgnoreSourceIpListId": {
"value": ""
},
"firewallSettingEventLogFileRetainNum": {
"value": "3"
},
"firewallSettingEventLogFileSizeMax": {
"value": "4 MB"
},
"firewallSettingEventsOutOfAllowedPolicyEnabled": {
"value": "true"
},
"firewallSettingFailureResponseEngineSystem": {
"value": "Fail closed"
},
"firewallSettingFailureResponsePacketSanityCheck": {
"value": "Fail closed"
},
"firewallSettingInterfaceIsolationEnabled": {
"value": "false"
},
"firewallSettingInterfaceLimitOneActiveEnabled": {
"value": "false"
},
"firewallSettingInterfacePatterns": {
"value": ""
},
"firewallSettingNetworkEngineMode": {
"value": "Inline"
},
"firewallSettingReconnaissanceBlockFingerprintProbeDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockNetworkOrPortScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpNullScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpSynFinScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpXmasAttackDuration": {
"value": "No"
},
"firewallSettingReconnaissanceDetectFingerprintProbeEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectNetworkOrPortScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpNullScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpSynFinScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpXmasAttackEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceExcludeIpListId": {
"value": ""
},
"firewallSettingReconnaissanceIncludeIpListId": {
"value": ""
},
"firewallSettingReconnaissanceNotifyFingerprintProbeEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyNetworkOrPortScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpNullScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpSynFinScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpXmasAttackEnabled": {
"value": "true"
},
"firewallSettingSyslogConfigId": {
"value": "0"
},
"firewallSettingVirtualAndContainerNetworkScanEnabled": {
"value": "false"
},
"integrityMonitoringSettingAutoApplyRecommendationsEnabled": {
"value": "No"
},
"integrityMonitoringSettingCombinedModeProtectionSource": {
"value": "Appliance preferred"
},
"integrityMonitoringSettingContentHashAlgorithm": {
"value": "sha1"
},
"integrityMonitoringSettingCpuUsageLevel": {
"value": "High"
},
"integrityMonitoringSettingRealtimeEnabled": {
"value": "false"
},
"integrityMonitoringSettingScanCacheConfigId": {
"value": ""
},
"integrityMonitoringSettingSyslogConfigId": {
"value": "0"
},
"integrityMonitoringSettingVirtualApplianceOptimizationScanCacheEntriesMax": {
"value": "500000"
},
"intrusionPreventionSettingAutoApplyRecommendationsEnabled": {
"value": "No"
},
"intrusionPreventionSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"intrusionPreventionSettingEngineOptionFragmentedIpKeepMax": {
"value": "1000"
},
"intrusionPreventionSettingEngineOptionFragmentedIpPacketSendIcmpEnabled": {
"value": "true"
},
"intrusionPreventionSettingEngineOptionFragmentedIpTimeout": {
"value": "60 Seconds"
},
"intrusionPreventionSettingEngineOptionFragmentedIpUnconcernedMacAddressBypassEnabled": {
"value": "false"
},
"intrusionPreventionSettingEngineOptionsEnabled": {
"value": "false"
},
"intrusionPreventionSettingLogDataRuleFirstMatchEnabled": {
"value": "true"
},
"intrusionPreventionSettingNsxSecurityTaggingDetectModeLevel": {
"value": "No Tagging"
},
"intrusionPreventionSettingNsxSecurityTaggingPreventModeLevel": {
"value": "No Tagging"
},
"intrusionPreventionSettingVirtualAndContainerNetworkScanEnabled": {
"value": "true"
},
"logInspectionSettingAutoApplyRecommendationsEnabled": {
"value": "No"
},
"logInspectionSettingSeverityClippingAgentEventSendSyslogLevelMin": {
"value": "Medium (6)"
},
"logInspectionSettingSeverityClippingAgentEventStoreLevelMin": {
"value": "Medium (6)"
},
"logInspectionSettingSyslogConfigId": {
"value": "0"
},
"platformSettingAgentCommunicationsDirection": {
"value": "Agent/Appliance Initiated"
},
"platformSettingAgentEventsSendInterval": {
"value": "60 Seconds"
},
"platformSettingAgentSelfProtectionEnabled": {
"value": "false"
},
"platformSettingAgentSelfProtectionPassword": {
"value": ""
},
"platformSettingAgentSelfProtectionPasswordEnabled": {
"value": "false"
},
"platformSettingAutoAssignNewIntrusionPreventionRulesEnabled": {
"value": "true"
},
"platformSettingAutoUpdateAntiMalwareEngineEnabled": {
"value": "false"
},
"platformSettingCombinedModeNetworkGroupProtectionSource": {
"value": "Agent preferred"
},
"platformSettingEnvironmentVariableOverrides": {
"value": ""
},
"platformSettingHeartbeatInactiveVmOfflineAlertEnabled": {
"value": "false"
},
"platformSettingHeartbeatInterval": {
"value": "10 Minutes"
},
"platformSettingHeartbeatLocalTimeShiftAlertThreshold": {
"value": "Unlimited"
},
"platformSettingHeartbeatMissedAlertThreshold": {
"value": "2"
},
"platformSettingInactiveAgentCleanupOverrideEnabled": {
"value": "false"
},
"platformSettingNotificationsSuppressPopupsEnabled": {
"value": "false"
},
"platformSettingRecommendationOngoingScansInterval": {
"value": "7 Days"
},
"platformSettingRelayState": {
"value": "false"
},
"platformSettingScanCacheConcurrencyMax": {
"value": "1"
},
"platformSettingScanOpenPortListId": {
"value": "1-1024"
},
"platformSettingSmartProtectionAntiMalwareGlobalServerProxyId": {
"value": ""
},
"platformSettingSmartProtectionGlobalServerEnabled": {
"value": "true"
},
"platformSettingSmartProtectionGlobalServerProxyId": {
"value": ""
},
"platformSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"platformSettingTroubleshootingLoggingLevel": {
"value": "Do Not Override"
},
"webReputationSettingAlertingEnabled": {
"value": "false"
},
"webReputationSettingAllowedUrlDomains": {
"value": ""
},
"webReputationSettingAllowedUrls": {
"value": ""
},
"webReputationSettingBlockedUrlDomains": {
"value": ""
},
"webReputationSettingBlockedUrlKeywords": {
"value": ""
},
"webReputationSettingBlockedUrls": {
"value": ""
},
"webReputationSettingBlockingPageLink": {
"value": "http://sitesafety.trendmicro.com/"
},
"webReputationSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"webReputationSettingMonitorPortListId": {
"value": "80,8080"
},
"webReputationSettingSecurityBlockUntestedPagesEnabled": {
"value": "false"
},
"webReputationSettingSecurityLevel": {
"value": "Medium"
},
"webReputationSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerAllowOffDomainGlobal": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerEnabled": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerUrls": {
"value": ""
},
"webReputationSettingSmartProtectionServerConnectionLostWarningEnabled": {
"value": "true"
},
"webReputationSettingSmartProtectionWebReputationGlobalServerProxyId": {
"value": ""
},
"webReputationSettingSyslogConfigId": {
"value": "0"
}
},
"computerStatus": {
"agentStatus": "inactive",
"agentStatusMessages": [
"Unmanaged (Unknown)"
]
},
"description": "Modified Test",
"displayName": "",
"firewall": {
"moduleStatus": {
"agentStatus": "inactive",
"agentStatusMessage": "Not Activated"
},
"state": "off"
},
"groupID": 0,
"hostGUID": "6F786725-039C-CCEE-1BD2-43E63DFED122",
"hostName": "poc1",
"integrityMonitoring": {
"moduleStatus": {
"agentStatus": "inactive",
"agentStatusMessage": "Not Activated"
},
"state": "off"
},
"intrusionPrevention": {
"moduleStatus": {
"agentStatus": "inactive",
"agentStatusMessage": "Not Activated"
},
"state": "off"
},
"lastIPUsed": "",
"lastSendPolicyRequest": 1622492018767,
"logInspection": {
"moduleStatus": {
"agentStatus": "inactive",
"agentStatusMessage": "Not Activated"
},
"state": "off"
},
"platform": "Unknown",
"relayListID": 0,
"webReputation": {
"moduleStatus": {
"agentStatus": "inactive",
"agentStatusMessage": "Not Activated"
},
"state": "off"
}
},
{
"ID": 216,
"activityMonitoring": {
"moduleStatus": {
"agentStatus": "inactive",
"agentStatusMessage": "Not Activated"
},
"state": "off"
},
"agentVersion": "0.0.0.0",
"antiMalware": {
"manualScanConfigurationID": 0,
"moduleStatus": {
"agentStatus": "inactive",
"agentStatusMessage": "Not Activated"
},
"realTimeScanConfigurationID": 0,
"realTimeScanScheduleID": 0,
"scheduledScanConfigurationID": 0,
"state": "off"
},
"applicationControl": {
"blockUnrecognized": false,
"maintenanceModeStatus": "off",
"moduleStatus": {
"agentStatus": "inactive",
"agentStatusMessage": "Not Activated"
},
"state": "off"
},
"computerSettings": {
"activityMonitoringSettingActivityEnabled": {
"value": "Off"
},
"activityMonitoringSettingIndicatorEnabled": {
"value": "Off"
},
"activityMonitoringSettingSyslogConfigId": {
"value": "0"
},
"antiMalwareSettingBehaviorMonitoringScanExclusionList": {
"value": ""
},
"antiMalwareSettingCombinedModeProtectionSource": {
"value": "Appliance preferred"
},
"antiMalwareSettingConnectedThreatDefenseSuspiciousFileDdanSubmissionEnabled": {
"value": "true"
},
"antiMalwareSettingConnectedThreatDefenseUseControlManagerSuspiciousObjectListEnabled": {
"value": "true"
},
"antiMalwareSettingDocumentExploitProtectionRuleExceptions": {
"value": ""
},
"antiMalwareSettingFileHashEnabled": {
"value": "false"
},
"antiMalwareSettingFileHashMd5Enabled": {
"value": "false"
},
"antiMalwareSettingFileHashSha256Enabled": {
"value": "false"
},
"antiMalwareSettingFileHashSizeMaxMbytes": {
"value": "128"
},
"antiMalwareSettingIdentifiedFilesSpaceMaxMbytes": {
"value": "1024"
},
"antiMalwareSettingMalwareScanMultithreadedProcessingEnabled": {
"value": "false"
},
"antiMalwareSettingNsxSecurityTaggingEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingOnRemediationFailureEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingRemoveOnCleanScanEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingValue": {
"value": "ANTI_VIRUS.VirusFound.threat=medium"
},
"antiMalwareSettingPredictiveMachineLearningExceptions": {
"value": ""
},
"antiMalwareSettingScanCacheOnDemandConfigId": {
"value": ""
},
"antiMalwareSettingScanCacheRealTimeConfigId": {
"value": ""
},
"antiMalwareSettingScanFileSizeMaxMbytes": {
"value": "0"
},
"antiMalwareSettingSmartProtectionGlobalServerEnabled": {
"value": "true"
},
"antiMalwareSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"antiMalwareSettingSmartProtectionLocalServerAllowOffDomainGlobal": {
"value": "false"
},
"antiMalwareSettingSmartProtectionLocalServerUrls": {
"value": ""
},
"antiMalwareSettingSmartProtectionServerConnectionLostWarningEnabled": {
"value": "true"
},
"antiMalwareSettingSmartScanState": {
"value": "Automatic"
},
"antiMalwareSettingSpywareApprovedList": {
"value": ""
},
"antiMalwareSettingSyslogConfigId": {
"value": "0"
},
"antiMalwareSettingVirtualApplianceOnDemandScanCacheEntriesMax": {
"value": "500000"
},
"antiMalwareSettingVirtualApplianceRealTimeScanCacheEntriesMax": {
"value": "500000"
},
"applicationControlSettingExecutionEnforcementLevel": {
"value": "Allow unrecognized software until it is explicitly blocked"
},
"applicationControlSettingRulesetMode": {
"value": "Use local ruleset"
},
"applicationControlSettingSharedRulesetId": {
"value": "0"
},
"applicationControlSettingSyslogConfigId": {
"value": "0"
},
"firewallSettingAntiEvasionCheckEvasiveRetransmit": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckFinNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckFragmentedPackets": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckOutNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckPaws": {
"value": "Ignore"
},
"firewallSettingAntiEvasionCheckRstNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpChecksum": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpCongestionFlags": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpPawsZero": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpRstFinFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSplitHandshake": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynFinFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynRstFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynWithData": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpUrgentFlags": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpZeroFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionSecurityPosture": {
"value": "Normal"
},
"firewallSettingAntiEvasionTcpPawsWindowPolicy": {
"value": "0"
},
"firewallSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"firewallSettingConfigPackageExceedsAlertMaxEnabled": {
"value": "true"
},
"firewallSettingEngineOptionAckTimeout": {
"value": "1 Second"
},
"firewallSettingEngineOptionAllowNullIpEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBlockIpv6Agent8AndEarlierEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBlockIpv6Agent9AndLaterEnabled": {
"value": "false"
},
"firewallSettingEngineOptionBlockSameSrcDstIpEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBootStartTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionBypassCiscoWaasConnectionsEnabled": {
"value": "false"
},
"firewallSettingEngineOptionCloseTimeout": {
"value": "0 Seconds"
},
"firewallSettingEngineOptionCloseWaitTimeout": {
"value": "2 Minutes"
},
"firewallSettingEngineOptionClosingTimeout": {
"value": "1 Second"
},
"firewallSettingEngineOptionColdStartTimeout": {
"value": "5 Minutes"
},
"firewallSettingEngineOptionConnectionCleanupTimeout": {
"value": "10 Seconds"
},
"firewallSettingEngineOptionConnectionsCleanupMax": {
"value": "1000"
},
"firewallSettingEngineOptionConnectionsNumIcmpMax": {
"value": "10000"
},
"firewallSettingEngineOptionConnectionsNumTcpMax": {
"value": "1000000"
},
"firewallSettingEngineOptionConnectionsNumUdpMax": {
"value": "1000000"
},
"firewallSettingEngineOptionDebugModeEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDebugPacketNumMax": {
"value": "8"
},
"firewallSettingEngineOptionDisconnectTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionDrop6To4BogonsAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropEvasiveRetransmitEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDropIpZeroPayloadEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6BogonsAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6ExtType0Enabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6FragmentsLowerThanMinMtuEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6ReservedAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6SiteLocalAddressesEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDropTeredoAnomaliesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropUnknownSslProtocolEnabled": {
"value": "true"
},
"firewallSettingEngineOptionErrorTimeout": {
"value": "10 Seconds"
},
"firewallSettingEngineOptionEstablishedTimeout": {
"value": "3 Hours"
},
"firewallSettingEngineOptionEventNodesMax": {
"value": "20000"
},
"firewallSettingEngineOptionFilterIpv4Tunnels": {
"value": "Disable Detection of IPv4 Tunnels"
},
"firewallSettingEngineOptionFilterIpv6Tunnels": {
"value": "Disable Detection of IPv6 Tunnels"
},
"firewallSettingEngineOptionFinWait1Timeout": {
"value": "2 Minutes"
},
"firewallSettingEngineOptionForceAllowDhcpDns": {
"value": "Allow DNS Query and DHCP Client"
},
"firewallSettingEngineOptionForceAllowIcmpType3Code4": {
"value": "Add Force Allow rule for ICMP type3 code4"
},
"firewallSettingEngineOptionFragmentOffsetMin": {
"value": "60"
},
"firewallSettingEngineOptionFragmentSizeMin": {
"value": "120"
},
"firewallSettingEngineOptionGenerateConnectionEventsIcmpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionGenerateConnectionEventsTcpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionGenerateConnectionEventsUdpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionIcmpTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionIgnoreStatusCode0": {
"value": "None"
},
"firewallSettingEngineOptionIgnoreStatusCode1": {
"value": "None"
},
"firewallSettingEngineOptionIgnoreStatusCode2": {
"value": "None"
},
"firewallSettingEngineOptionLastAckTimeout": {
"value": "30 Seconds"
},
"firewallSettingEngineOptionLogAllPacketDataEnabled": {
"value": "false"
},
"firewallSettingEngineOptionLogEventsPerSecondMax": {
"value": "100"
},
"firewallSettingEngineOptionLogOnePacketPeriod": {
"value": "5 Minutes"
},
"firewallSettingEngineOptionLogOnePacketWithinPeriodEnabled": {
"value": "false"
},
"firewallSettingEngineOptionLogPacketLengthMax": {
"value": "1500 Bytes"
},
"firewallSettingEngineOptionLoggingPolicy": {
"value": "Default"
},
"firewallSettingEngineOptionSilentTcpConnectionDropEnabled": {
"value": "false"
},
"firewallSettingEngineOptionSslSessionSize": {
"value": "Low - 2500"
},
"firewallSettingEngineOptionSslSessionTime": {
"value": "24 Hours"
},
"firewallSettingEngineOptionStrictTerodoPortCheckEnabled": {
"value": "true"
},
"firewallSettingEngineOptionSynRcvdTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionSynSentTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionTcpMssLimit": {
"value": "128 Bytes"
},
"firewallSettingEngineOptionTunnelDepthMax": {
"value": "1"
},
"firewallSettingEngineOptionTunnelDepthMaxExceededAction": {
"value": "Drop"
},
"firewallSettingEngineOptionUdpTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionVerifyTcpChecksumEnabled": {
"value": "false"
},
"firewallSettingEngineOptionsEnabled": {
"value": "false"
},
"firewallSettingEventLogFileCachedEntriesLifeTime": {
"value": "30 Minutes"
},
"firewallSettingEventLogFileCachedEntriesNum": {
"value": "128"
},
"firewallSettingEventLogFileCachedEntriesStaleTime": {
"value": "15 Minutes"
},
"firewallSettingEventLogFileIgnoreSourceIpListId": {
"value": ""
},
"firewallSettingEventLogFileRetainNum": {
"value": "3"
},
"firewallSettingEventLogFileSizeMax": {
"value": "4 MB"
},
"firewallSettingEventsOutOfAllowedPolicyEnabled": {
"value": "true"
},
"firewallSettingFailureResponseEngineSystem": {
"value": "Fail closed"
},
"firewallSettingFailureResponsePacketSanityCheck": {
"value": "Fail closed"
},
"firewallSettingInterfaceIsolationEnabled": {
"value": "false"
},
"firewallSettingInterfaceLimitOneActiveEnabled": {
"value": "false"
},
"firewallSettingInterfacePatterns": {
"value": ""
},
"firewallSettingNetworkEngineMode": {
"value": "Inline"
},
"firewallSettingReconnaissanceBlockFingerprintProbeDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockNetworkOrPortScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpNullScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpSynFinScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpXmasAttackDuration": {
"value": "No"
},
"firewallSettingReconnaissanceDetectFingerprintProbeEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectNetworkOrPortScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpNullScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpSynFinScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpXmasAttackEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceExcludeIpListId": {
"value": ""
},
"firewallSettingReconnaissanceIncludeIpListId": {
"value": ""
},
"firewallSettingReconnaissanceNotifyFingerprintProbeEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyNetworkOrPortScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpNullScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpSynFinScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpXmasAttackEnabled": {
"value": "true"
},
"firewallSettingSyslogConfigId": {
"value": "0"
},
"firewallSettingVirtualAndContainerNetworkScanEnabled": {
"value": "false"
},
"integrityMonitoringSettingAutoApplyRecommendationsEnabled": {
"value": "No"
},
"integrityMonitoringSettingCombinedModeProtectionSource": {
"value": "Appliance preferred"
},
"integrityMonitoringSettingContentHashAlgorithm": {
"value": "sha1"
},
"integrityMonitoringSettingCpuUsageLevel": {
"value": "High"
},
"integrityMonitoringSettingRealtimeEnabled": {
"value": "false"
},
"integrityMonitoringSettingScanCacheConfigId": {
"value": ""
},
"integrityMonitoringSettingSyslogConfigId": {
"value": "0"
},
"integrityMonitoringSettingVirtualApplianceOptimizationScanCacheEntriesMax": {
"value": "500000"
},
"intrusionPreventionSettingAutoApplyRecommendationsEnabled": {
"value": "No"
},
"intrusionPreventionSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"intrusionPreventionSettingEngineOptionFragmentedIpKeepMax": {
"value": "1000"
},
"intrusionPreventionSettingEngineOptionFragmentedIpPacketSendIcmpEnabled": {
"value": "true"
},
"intrusionPreventionSettingEngineOptionFragmentedIpTimeout": {
"value": "60 Seconds"
},
"intrusionPreventionSettingEngineOptionFragmentedIpUnconcernedMacAddressBypassEnabled": {
"value": "false"
},
"intrusionPreventionSettingEngineOptionsEnabled": {
"value": "false"
},
"intrusionPreventionSettingLogDataRuleFirstMatchEnabled": {
"value": "true"
},
"intrusionPreventionSettingNsxSecurityTaggingDetectModeLevel": {
"value": "No Tagging"
},
"intrusionPreventionSettingNsxSecurityTaggingPreventModeLevel": {
"value": "No Tagging"
},
"intrusionPreventionSettingVirtualAndContainerNetworkScanEnabled": {
"value": "true"
},
"logInspectionSettingAutoApplyRecommendationsEnabled": {
"value": "No"
},
"logInspectionSettingSeverityClippingAgentEventSendSyslogLevelMin": {
"value": "Medium (6)"
},
"logInspectionSettingSeverityClippingAgentEventStoreLevelMin": {
"value": "Medium (6)"
},
"logInspectionSettingSyslogConfigId": {
"value": "0"
},
"platformSettingAgentCommunicationsDirection": {
"value": "Agent/Appliance Initiated"
},
"platformSettingAgentEventsSendInterval": {
"value": "60 Seconds"
},
"platformSettingAgentSelfProtectionEnabled": {
"value": "false"
},
"platformSettingAgentSelfProtectionPassword": {
"value": ""
},
"platformSettingAgentSelfProtectionPasswordEnabled": {
"value": "false"
},
"platformSettingAutoAssignNewIntrusionPreventionRulesEnabled": {
"value": "true"
},
"platformSettingAutoUpdateAntiMalwareEngineEnabled": {
"value": "false"
},
"platformSettingCombinedModeNetworkGroupProtectionSource": {
"value": "Agent preferred"
},
"platformSettingEnvironmentVariableOverrides": {
"value": ""
},
"platformSettingHeartbeatInactiveVmOfflineAlertEnabled": {
"value": "false"
},
"platformSettingHeartbeatInterval": {
"value": "10 Minutes"
},
"platformSettingHeartbeatLocalTimeShiftAlertThreshold": {
"value": "Unlimited"
},
"platformSettingHeartbeatMissedAlertThreshold": {
"value": "2"
},
"platformSettingInactiveAgentCleanupOverrideEnabled": {
"value": "false"
},
"platformSettingNotificationsSuppressPopupsEnabled": {
"value": "false"
},
"platformSettingRecommendationOngoingScansInterval": {
"value": "7 Days"
},
"platformSettingRelayState": {
"value": "false"
},
"platformSettingScanCacheConcurrencyMax": {
"value": "1"
},
"platformSettingScanOpenPortListId": {
"value": "1-1024"
},
"platformSettingSmartProtectionAntiMalwareGlobalServerProxyId": {
"value": ""
},
"platformSettingSmartProtectionGlobalServerEnabled": {
"value": "true"
},
"platformSettingSmartProtectionGlobalServerProxyId": {
"value": ""
},
"platformSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"platformSettingTroubleshootingLoggingLevel": {
"value": "Do Not Override"
},
"webReputationSettingAlertingEnabled": {
"value": "false"
},
"webReputationSettingAllowedUrlDomains": {
"value": ""
},
"webReputationSettingAllowedUrls": {
"value": ""
},
"webReputationSettingBlockedUrlDomains": {
"value": ""
},
"webReputationSettingBlockedUrlKeywords": {
"value": ""
},
"webReputationSettingBlockedUrls": {
"value": ""
},
"webReputationSettingBlockingPageLink": {
"value": "http://sitesafety.trendmicro.com/"
},
"webReputationSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"webReputationSettingMonitorPortListId": {
"value": "80,8080"
},
"webReputationSettingSecurityBlockUntestedPagesEnabled": {
"value": "false"
},
"webReputationSettingSecurityLevel": {
"value": "Medium"
},
"webReputationSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerAllowOffDomainGlobal": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerEnabled": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerUrls": {
"value": ""
},
"webReputationSettingSmartProtectionServerConnectionLostWarningEnabled": {
"value": "true"
},
"webReputationSettingSmartProtectionWebReputationGlobalServerProxyId": {
"value": ""
},
"webReputationSettingSyslogConfigId": {
"value": "0"
}
},
"computerStatus": {
"agentStatus": "inactive",
"agentStatusMessages": [
"Unmanaged (Unknown)"
]
},
"description": "",
"displayName": "",
"firewall": {
"moduleStatus": {
"agentStatus": "inactive",
"agentStatusMessage": "Not Activated"
},
"state": "off"
},
"groupID": 0,
"hostGUID": "08397785-21E7-2029-A203-0635247ED6D8",
"hostName": "example_computer",
"integrityMonitoring": {
"moduleStatus": {
"agentStatus": "inactive",
"agentStatusMessage": "Not Activated"
},
"state": "off"
},
"intrusionPrevention": {
"moduleStatus": {
"agentStatus": "inactive",
"agentStatusMessage": "Not Activated"
},
"state": "off"
},
"lastIPUsed": "",
"logInspection": {
"moduleStatus": {
"agentStatus": "inactive",
"agentStatusMessage": "Not Activated"
},
"state": "off"
},
"platform": "Unknown",
"relayListID": 0,
"webReputation": {
"moduleStatus": {
"agentStatus": "inactive",
"agentStatusMessage": "Not Activated"
},
"state": "off"
}
}
]
}
}
Human Readable Output
Matched Computers
ID Host Name Description Group ID 1 q1 Modified Test 0 2 q2 Modified Test 0 3 poc Modified Test 0 34 aaaaa Modified Test 0 166 poc1 Modified Test 0 216 example_computer 0
trendmicro-get-computer
Get information about a certain computer
Base Command
trendmicro-get-computer
Input
| Argument Name | Description | Required |
|---|---|---|
| computer_id | The ID number of the computer to get. | Required |
| expand | Determines the computer information to include in the response. Notice that the information is appended to the context data only. Possible values are: none, all, computerStatus, tasks, securityUpdates, computerSettings, allSecurityModules, antiMalware, webReputation, activityMonitoring, firewall, intrusionPrevention, integrityMonitoring, logInspection, applicationControl, SAP, interfaces, ESXSummary, allVirtualMachineSummaries, azureARMVirtualMachineSummary, azureVMVirtualMachineSummary, ec2VirtualMachineSummary, noConnectorVirtualMachineSummary, vmwareVMVirtualMachineSummary, vcloudVMVirtualMachineSummary, workspaceVirtualMachineSummary, gcpVirtualMachineSummary. Default is none. | Optional |
| overrides | Show only overrides defined for the current computer. Possible values are: true, false. Default is false. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| TrendMicro.Computers.hostName | string | Hostname of the computer |
| TrendMicro.Computers.displayName | string | Display name of the computer |
| TrendMicro.Computers.description | string | Description of the computer |
| TrendMicro.Computers.groupID | integer | ID of the computer group to which the computer belongs |
| TrendMicro.Computers.policyID | integer | ID of the policy assigned to the computer |
| TrendMicro.Computers.assetImportanceID | integer | ID of the asset importance assigned to the computer |
| TrendMicro.Computers.relayListID | integer | ID of the relay list that is assigned to the computer |
Command Example
!trendmicro-get-computer computer_id=216
Context Example
{
"TrendMicro": {
"Computers": {
"ID": 216,
"agentVersion": "0.0.0.0",
"description": "",
"displayName": "",
"groupID": 0,
"hostGUID": "08397785-21E7-2029-A203-0635247ED6D8",
"hostName": "example_computer",
"lastIPUsed": "",
"platform": "Unknown",
"relayListID": 0
}
}
}
Human Readable Output
Details for the computer example_computer
ID Host Name Group ID 216 example_computer 0
trendmicro-list-computers
Get information of all existing computers
Base Command
trendmicro-list-computers
Input
| Argument Name | Description | Required |
|---|---|---|
| expand | Determines the computer information to include in the response. Notice that the information is appended to the context data only. Possible values are: none, all, computerStatus, tasks, securityUpdates, computerSettings, allSecurityModules, antiMalware, webReputation, activityMonitoring, firewall, intrusionPrevention, integrityMonitoring, logInspection, applicationControl, SAP, interfaces, ESXSummary, allVirtualMachineSummaries, azureARMVirtualMachineSummary, azureVMVirtualMachineSummary, ec2VirtualMachineSummary, noConnectorVirtualMachineSummary, vmwareVMVirtualMachineSummary, vcloudVMVirtualMachineSummary, workspaceVirtualMachineSummary, gcpVirtualMachineSummary. Default is none. | Optional |
| overrides | Show only overrides defined for the current computer. Possible values are: true, false. Default is false. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| TrendMicro.Computers.hostName | string | Hostname of the computer |
| TrendMicro.Computers.displayName | string | Display name of the computer |
| TrendMicro.Computers.description | string | Description of the computer |
| TrendMicro.Computers.groupID | integer | ID of the computer group to which the computer belongs |
| TrendMicro.Computers.policyID | integer | ID of the policy assigned to the computer |
| TrendMicro.Computers.assetImportanceID | integer | ID of the asset importance assigned to the computer |
| TrendMicro.Computers.relayListID | integer | ID of the relay list that is assigned to the computer |
Command Example
!trendmicro-list-computers expand="firewall"
Context Example
{
"TrendMicro": {
"Computers": [
{
"ID": 1,
"agentVersion": "0.0.0.0",
"description": "Modified Test",
"displayName": "testq1",
"firewall": {
"globalStatefulConfigurationID": 1,
"moduleStatus": {
"agentStatus": "inactive",
"agentStatusMessage": "Not Activated"
},
"ruleIDs": [
23,
28,
30
],
"state": "off"
},
"groupID": 0,
"hostGUID": "52DA6A2B-A3AD-4DA7-911C-3C8915E26BA5",
"hostName": "q1",
"lastIPUsed": "",
"lastSendPolicyRequest": 1622492018767,
"platform": "Unknown",
"policyID": 1,
"relayListID": 0
},
{
"ID": 2,
"agentVersion": "0.0.0.0",
"description": "Modified Test",
"displayName": "",
"firewall": {
"moduleStatus": {
"agentStatus": "inactive",
"agentStatusMessage": "Not Activated"
},
"state": "off"
},
"groupID": 0,
"hostGUID": "F2E3B97E-773E-B775-167F-571C4DF1D275",
"hostName": "q2",
"lastIPUsed": "",
"lastSendPolicyRequest": 1622492018767,
"platform": "Unknown",
"relayListID": 0
},
{
"ID": 3,
"agentVersion": "0.0.0.0",
"description": "Modified Test",
"displayName": "",
"firewall": {
"moduleStatus": {
"agentStatus": "inactive",
"agentStatusMessage": "Not Activated"
},
"state": "off"
},
"groupID": 0,
"hostGUID": "950C88D8-90FD-3F4F-02E4-DF1EC0E0D801",
"hostName": "poc",
"lastIPUsed": "",
"lastSendPolicyRequest": 1622492018767,
"platform": "Unknown",
"relayListID": 0
},
{
"ID": 34,
"agentVersion": "0.0.0.0",
"description": "Modified Test",
"displayName": "",
"firewall": {
"globalStatefulConfigurationID": 1,
"moduleStatus": {
"agentStatus": "inactive",
"agentStatusMessage": "Not Activated"
},
"ruleIDs": [
23,
28
],
"state": "off"
},
"groupID": 0,
"hostGUID": "D371794B-C7C0-A81F-8DA0-D658A26B1DD4",
"hostName": "aaaaa",
"lastIPUsed": "",
"lastSendPolicyRequest": 1622492018767,
"platform": "Unknown",
"policyID": 1,
"relayListID": 0
},
{
"ID": 166,
"agentVersion": "0.0.0.0",
"description": "Modified Test",
"displayName": "",
"firewall": {
"moduleStatus": {
"agentStatus": "inactive",
"agentStatusMessage": "Not Activated"
},
"state": "off"
},
"groupID": 0,
"hostGUID": "6F786725-039C-CCEE-1BD2-43E63DFED122",
"hostName": "poc1",
"lastIPUsed": "",
"lastSendPolicyRequest": 1622492018767,
"platform": "Unknown",
"relayListID": 0
},
{
"ID": 216,
"agentVersion": "0.0.0.0",
"description": "",
"displayName": "",
"firewall": {
"moduleStatus": {
"agentStatus": "inactive",
"agentStatusMessage": "Not Activated"
},
"state": "off"
},
"groupID": 0,
"hostGUID": "08397785-21E7-2029-A203-0635247ED6D8",
"hostName": "example_computer",
"lastIPUsed": "",
"platform": "Unknown",
"relayListID": 0
}
]
}
}
Human Readable Output
All computers list
ID Host Name Description Group ID 1 q1 Modified Test 0 2 q2 Modified Test 0 3 poc Modified Test 0 34 aaaaa Modified Test 0 166 poc1 Modified Test 0 216 example_computer 0
trendmicro-modify-computer
Modify properties of a certain computer
Base Command
trendmicro-modify-computer
Input
| Argument Name | Description | Required |
|---|---|---|
| computer_id | The ID number of the computer to modify. | Required |
| expand | Determines the computer information to include in the response. Notice that the information is appended to the context data only. Possible values are: none, all, computerStatus, tasks, securityUpdates, computerSettings, allSecurityModules, antiMalware, webReputation, activityMonitoring, firewall, intrusionPrevention, integrityMonitoring, logInspection, applicationControl, SAP, interfaces, ESXSummary, allVirtualMachineSummaries, azureARMVirtualMachineSummary, azureVMVirtualMachineSummary, ec2VirtualMachineSummary, noConnectorVirtualMachineSummary, vmwareVMVirtualMachineSummary, vcloudVMVirtualMachineSummary, workspaceVirtualMachineSummary, gcpVirtualMachineSummary. Default is none. | Optional |
| host_name | Hostname of the computer. | Optional |
| display_name | Display name of the computer. | Optional |
| description | Description of the computer. | Optional |
| group_id | ID of the computer group to which the computer belongs. | Optional |
| policy_id | ID of the policy assigned to the computer. | Optional |
| asset_importance_id | ID of the asset importance assigned to the computer. | Optional |
| relay_list_id | ID of the relay list that is assigned to the computer. | Optional |
| overrides | Show the value only if defined for the current computer. Possible values are: true, false. Default is false. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| TrendMicro.Computers.hostName | string | Hostname of the computer |
| TrendMicro.Computers.displayName | string | Display name of the computer |
| TrendMicro.Computers.description | string | Description of the computer |
| TrendMicro.Computers.groupID | integer | ID of the computer group to which the computer belongs |
| TrendMicro.Computers.policyID | integer | ID of the policy assigned to the computer |
| TrendMicro.Computers.assetImportanceID | integer | ID of the asset importance assigned to the computer |
| TrendMicro.Computers.relayListID | integer | ID of the relay list that is assigned to the computer |
Command Example
!trendmicro-modify-computer computer_id=216 description="Example computer description"
Context Example
{
"TrendMicro": {
"Computers": {
"ID": 216,
"agentVersion": "0.0.0.0",
"description": "Example computer description",
"displayName": "",
"groupID": 0,
"hostGUID": "08397785-21E7-2029-A203-0635247ED6D8",
"hostName": "example_computer",
"lastIPUsed": "",
"lastSendPolicyRequest": 1622492628442,
"platform": "Unknown",
"relayListID": 0
}
}
}
Human Readable Output
Details for the computer example_computer
ID Host Name Description Group ID 216 example_computer Example computer description 0
trendmicro-delete-computer
Delete a certain computer
Base Command
trendmicro-delete-computer
Input
| Argument Name | Description | Required |
|---|---|---|
| computer_id | The ID number of the computer to delete. | Required |
Context Output
There is no context output for this command.
Command Example
!trendmicro-delete-computer computer_id=216
Human Readable Output
The computer was successfully deleted!
trendmicro-get-computer-setting
Get information about a setting of a certain computer
Base Command
trendmicro-get-computer-setting
Input
| Argument Name | Description | Required |
|---|---|---|
| computer_id | The ID number of the computer. | Required |
| name | The name of the setting. Possible values are: logInspectionSettingSeverityClippingAgentEventSendSyslogLevelMin, firewallSettingEngineOptionConnectionsCleanupMax, firewallSettingEngineOptionVerifyTcpChecksumEnabled, antiMalwareSettingScanCacheOnDemandConfigId, applicationControlSettingSharedRulesetId, webReputationSettingSmartProtectionServerConnectionLostWarningEnabled, applicationControlSettingExecutionEnforcementLevel, webReputationSettingBlockedUrlDomains, firewallSettingEngineOptionSynSentTimeout, platformSettingAgentSelfProtectionPassword, firewallSettingReconnaissanceBlockTcpXmasAttackDuration, intrusionPreventionSettingVirtualAndContainerNetworkScanEnabled, logInspectionSettingSyslogConfigId, firewallSettingEngineOptionDebugModeEnabled, firewallSettingVirtualAndContainerNetworkScanEnabled, antiMalwareSettingFileHashSha256Enabled, firewallSettingReconnaissanceNotifyFingerprintProbeEnabled, firewallSettingEventLogFileRetainNum, firewallSettingAntiEvasionCheckTcpPawsZero, antiMalwareSettingConnectedThreatDefenseUseControlManagerSuspiciousObjectListEnabled, intrusionPreventionSettingEngineOptionFragmentedIpKeepMax, firewallSettingEngineOptionDrop6To4BogonsAddressesEnabled, logInspectionSettingSeverityClippingAgentEventStoreLevelMin, platformSettingScanCacheConcurrencyMax, antiMalwareSettingSyslogConfigId, firewallSettingAntiEvasionTcpPawsWindowPolicy, firewallSettingReconnaissanceDetectTcpXmasAttackEnabled, applicationControlSettingRulesetMode, antiMalwareSettingSmartProtectionGlobalServerUseProxyEnabled, webReputationSettingSmartProtectionLocalServerAllowOffDomainGlobal, integrityMonitoringSettingCombinedModeProtectionSource, firewallSettingEngineOptionCloseWaitTimeout, platformSettingScanOpenPortListId, platformSettingAgentSelfProtectionPasswordEnabled, firewallSettingEngineOptionAckTimeout, firewallSettingEventLogFileCachedEntriesStaleTime, firewallSettingCombinedModeProtectionSource, platformSettingAgentEventsSendInterval, platformSettingInactiveAgentCleanupOverrideEnabled, firewallSettingFailureResponseEngineSystem, platformSettingRelayState, firewallSettingEngineOptionDropEvasiveRetransmitEnabled, activityMonitoringSettingIndicatorEnabled, intrusionPreventionSettingEngineOptionFragmentedIpTimeout, firewallSettingAntiEvasionCheckTcpZeroFlags, webReputationSettingSmartProtectionGlobalServerUseProxyEnabled, intrusionPreventionSettingNsxSecurityTaggingPreventModeLevel, firewallSettingReconnaissanceNotifyTcpXmasAttackEnabled, firewallSettingEngineOptionUdpTimeout, webReputationSettingSmartProtectionLocalServerEnabled, firewallSettingEngineOptionTcpMssLimit, firewallSettingEngineOptionColdStartTimeout, firewallSettingEngineOptionEstablishedTimeout, antiMalwareSettingIdentifiedFilesSpaceMaxMbytes, firewallSettingEngineOptionAllowNullIpEnabled, platformSettingNotificationsSuppressPopupsEnabled, firewallSettingAntiEvasionCheckTcpRstFinFlags, firewallSettingEngineOptionDisconnectTimeout, firewallSettingEngineOptionCloseTimeout, firewallSettingEngineOptionTunnelDepthMaxExceededAction, firewallSettingReconnaissanceDetectTcpNullScanEnabled, platformSettingSmartProtectionAntiMalwareGlobalServerProxyId, firewallSettingEngineOptionFilterIpv4Tunnels, webReputationSettingSmartProtectionLocalServerUrls, firewallSettingEngineOptionLogOnePacketPeriod, firewallSettingEngineOptionFilterIpv6Tunnels, firewallSettingAntiEvasionCheckTcpCongestionFlags, platformSettingHeartbeatMissedAlertThreshold, intrusionPreventionSettingEngineOptionsEnabled, firewallSettingEngineOptionConnectionsNumUdpMax, integrityMonitoringSettingAutoApplyRecommendationsEnabled, firewallSettingEngineOptionTunnelDepthMax, firewallSettingEngineOptionDropUnknownSslProtocolEnabled, antiMalwareSettingNsxSecurityTaggingValue, intrusionPreventionSettingLogDataRuleFirstMatchEnabled, firewallSettingEngineOptionLoggingPolicy, platformSettingTroubleshootingLoggingLevel, antiMalwareSettingVirtualApplianceOnDemandScanCacheEntriesMax, webReputationSettingCombinedModeProtectionSource, firewallSettingEngineOptionClosingTimeout, firewallSettingAntiEvasionCheckPaws, intrusionPreventionSettingAutoApplyRecommendationsEnabled, firewallSettingReconnaissanceDetectFingerprintProbeEnabled, antiMalwareSettingNsxSecurityTaggingRemoveOnCleanScanEnabled, firewallSettingEngineOptionLogPacketLengthMax, firewallSettingEngineOptionDropTeredoAnomaliesEnabled, webReputationSettingSecurityLevel, firewallSettingEngineOptionDropIpv6SiteLocalAddressesEnabled, activityMonitoringSettingActivityEnabled, firewallSettingEngineOptionStrictTerodoPortCheckEnabled, webReputationSettingBlockedUrlKeywords, webReputationSettingSyslogConfigId, firewallSettingFailureResponsePacketSanityCheck, firewallSettingNetworkEngineMode, firewallSettingEventLogFileSizeMax, antiMalwareSettingMalwareScanMultithreadedProcessingEnabled, firewallSettingReconnaissanceDetectTcpSynFinScanEnabled, firewallSettingEngineOptionDropIpZeroPayloadEnabled, firewallSettingEngineOptionBlockIpv6Agent8AndEarlierEnabled, intrusionPreventionSettingEngineOptionFragmentedIpPacketSendIcmpEnabled, antiMalwareSettingPredictiveMachineLearningExceptions, firewallSettingEngineOptionLogEventsPerSecondMax, firewallSettingEngineOptionSslSessionTime, antiMalwareSettingBehaviorMonitoringScanExclusionList, antiMalwareSettingSmartProtectionGlobalServerEnabled, firewallSettingEngineOptionLogOnePacketWithinPeriodEnabled, firewallSettingEngineOptionGenerateConnectionEventsIcmpEnabled, platformSettingHeartbeatInactiveVmOfflineAlertEnabled, webReputationSettingSmartProtectionWebReputationGlobalServerProxyId, antiMalwareSettingNsxSecurityTaggingEnabled, firewallSettingAntiEvasionCheckFragmentedPackets, firewallSettingEngineOptionConnectionsNumIcmpMax, firewallSettingAntiEvasionCheckTcpSplitHandshake, antiMalwareSettingCombinedModeProtectionSource, firewallSettingEngineOptionEventNodesMax, webReputationSettingMonitorPortListId, applicationControlSettingSyslogConfigId, firewallSettingAntiEvasionCheckOutNoConnection, firewallSettingEngineOptionBlockIpv6Agent9AndLaterEnabled, integrityMonitoringSettingVirtualApplianceOptimizationScanCacheEntriesMax, firewallSettingReconnaissanceNotifyTcpNullScanEnabled, firewallSettingEngineOptionIgnoreStatusCode1, firewallSettingEngineOptionIgnoreStatusCode0, firewallSettingEngineOptionIgnoreStatusCode2, firewallSettingEngineOptionSslSessionSize, antiMalwareSettingScanCacheRealTimeConfigId, platformSettingRecommendationOngoingScansInterval, platformSettingSmartProtectionGlobalServerUseProxyEnabled, firewallSettingInterfaceLimitOneActiveEnabled, firewallSettingAntiEvasionCheckTcpChecksum, firewallSettingEngineOptionDropIpv6ExtType0Enabled, antiMalwareSettingScanFileSizeMaxMbytes, firewallSettingEngineOptionGenerateConnectionEventsTcpEnabled, antiMalwareSettingFileHashSizeMaxMbytes, firewallSettingEventLogFileCachedEntriesLifeTime, platformSettingSmartProtectionGlobalServerProxyId, logInspectionSettingAutoApplyRecommendationsEnabled, antiMalwareSettingConnectedThreatDefenseSuspiciousFileDdanSubmissionEnabled, webReputationSettingBlockingPageLink, firewallSettingSyslogConfigId, platformSettingAgentCommunicationsDirection, integrityMonitoringSettingScanCacheConfigId, antiMalwareSettingDocumentExploitProtectionRuleExceptions, firewallSettingAntiEvasionCheckTcpSynWithData, antiMalwareSettingFileHashEnabled, firewallSettingReconnaissanceBlockFingerprintProbeDuration, firewallSettingEngineOptionDropIpv6BogonsAddressesEnabled, firewallSettingEngineOptionBootStartTimeout, firewallSettingEngineOptionConnectionsNumTcpMax, firewallSettingAntiEvasionSecurityPosture, firewallSettingInterfacePatterns, firewallSettingInterfaceIsolationEnabled, antiMalwareSettingVirtualApplianceRealTimeScanCacheEntriesMax, firewallSettingEventsOutOfAllowedPolicyEnabled, firewallSettingAntiEvasionCheckEvasiveRetransmit, firewallSettingEngineOptionIcmpTimeout, integrityMonitoringSettingSyslogConfigId, firewallSettingEngineOptionConnectionCleanupTimeout, antiMalwareSettingSmartProtectionLocalServerAllowOffDomainGlobal, firewallSettingReconnaissanceNotifyTcpSynFinScanEnabled, firewallSettingEngineOptionErrorTimeout, webReputationSettingAllowedUrls, firewallSettingReconnaissanceNotifyNetworkOrPortScanEnabled, firewallSettingEngineOptionFinWait1Timeout, firewallSettingEngineOptionGenerateConnectionEventsUdpEnabled, activityMonitoringSettingSyslogConfigId, firewallSettingAntiEvasionCheckTcpSynRstFlags, antiMalwareSettingSpywareApprovedList, firewallSettingAntiEvasionCheckTcpUrgentFlags, intrusionPreventionSettingNsxSecurityTaggingDetectModeLevel, intrusionPreventionSettingEngineOptionFragmentedIpUnconcernedMacAddressBypassEnabled, firewallSettingEngineOptionLogAllPacketDataEnabled, firewallSettingAntiEvasionCheckTcpSynFinFlags, platformSettingHeartbeatInterval, firewallSettingEngineOptionFragmentSizeMin, antiMalwareSettingSmartProtectionServerConnectionLostWarningEnabled, firewallSettingReconnaissanceBlockNetworkOrPortScanDuration, integrityMonitoringSettingContentHashAlgorithm, antiMalwareSettingSmartScanState, firewallSettingConfigPackageExceedsAlertMaxEnabled, platformSettingEnvironmentVariableOverrides, firewallSettingEngineOptionFragmentOffsetMin, antiMalwareSettingSmartProtectionLocalServerUrls, firewallSettingEngineOptionSynRcvdTimeout, firewallSettingEventLogFileCachedEntriesNum, firewallSettingEngineOptionForceAllowIcmpType3Code4, firewallSettingReconnaissanceBlockTcpNullScanDuration, platformSettingSmartProtectionGlobalServerEnabled, integrityMonitoringSettingRealtimeEnabled, firewallSettingEngineOptionLastAckTimeout, firewallSettingReconnaissanceExcludeIpListId, platformSettingAgentSelfProtectionEnabled, firewallSettingEngineOptionDropIpv6ReservedAddressesEnabled, firewallSettingAntiEvasionCheckFinNoConnection, firewallSettingEngineOptionDebugPacketNumMax, firewallSettingEngineOptionBypassCiscoWaasConnectionsEnabled, firewallSettingReconnaissanceEnabled, platformSettingHeartbeatLocalTimeShiftAlertThreshold, antiMalwareSettingFileHashMd5Enabled, firewallSettingReconnaissanceDetectNetworkOrPortScanEnabled, firewallSettingEngineOptionSilentTcpConnectionDropEnabled, firewallSettingEngineOptionBlockSameSrcDstIpEnabled, firewallSettingEngineOptionForceAllowDhcpDns, firewallSettingReconnaissanceIncludeIpListId, firewallSettingEngineOptionsEnabled, firewallSettingReconnaissanceBlockTcpSynFinScanDuration, webReputationSettingSecurityBlockUntestedPagesEnabled, webReputationSettingAllowedUrlDomains, firewallSettingEventLogFileIgnoreSourceIpListId, firewallSettingEngineOptionDropIpv6FragmentsLowerThanMinMtuEnabled, platformSettingAutoAssignNewIntrusionPreventionRulesEnabled, firewallSettingAntiEvasionCheckRstNoConnection, webReputationSettingBlockedUrls, platformSettingCombinedModeNetworkGroupProtectionSource, webReputationSettingAlertingEnabled, antiMalwareSettingNsxSecurityTaggingOnRemediationFailureEnabled, integrityMonitoringSettingCpuUsageLevel, platformSettingAutoUpdateAntiMalwareEngineEnabled, intrusionPreventionSettingCombinedModeProtectionSource. | Required |
| overrides | Show the value only if defined for the current computer. Possible values are: true, false. Default is false. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| TrendMicro.ComputersSettings.computerId | integer | The computer id that owns the computer |
| TrendMicro.ComputersSettings.name | string | The name of the setting |
| TrendMicro.ComputersSettings.value | string | The value of a setting |
Command Example
!trendmicro-get-computer-setting computer_id=216 name=activityMonitoringSettingActivityEnabled
Context Example
{
"TrendMicro": {
"ComputersSettings": {
"computerId": 216,
"name": "activityMonitoringSettingActivityEnabled",
"value": "Off"
}
}
}
Human Readable Output
Settings for computer 216
Computer ID Name Value activityMonitoringSettingActivityEnabled Off
trendmicro-modify-computer-setting
Modify a setting of a certain computer
Base Command
trendmicro-modify-computer-setting
Input
| Argument Name | Description | Required |
|---|---|---|
| computer_id | The ID number of the computer. | Required |
| name | The name of the setting. Possible values are: logInspectionSettingSeverityClippingAgentEventSendSyslogLevelMin, firewallSettingEngineOptionConnectionsCleanupMax, firewallSettingEngineOptionVerifyTcpChecksumEnabled, antiMalwareSettingScanCacheOnDemandConfigId, applicationControlSettingSharedRulesetId, webReputationSettingSmartProtectionServerConnectionLostWarningEnabled, applicationControlSettingExecutionEnforcementLevel, webReputationSettingBlockedUrlDomains, firewallSettingEngineOptionSynSentTimeout, platformSettingAgentSelfProtectionPassword, firewallSettingReconnaissanceBlockTcpXmasAttackDuration, intrusionPreventionSettingVirtualAndContainerNetworkScanEnabled, logInspectionSettingSyslogConfigId, firewallSettingEngineOptionDebugModeEnabled, firewallSettingVirtualAndContainerNetworkScanEnabled, antiMalwareSettingFileHashSha256Enabled, firewallSettingReconnaissanceNotifyFingerprintProbeEnabled, firewallSettingEventLogFileRetainNum, firewallSettingAntiEvasionCheckTcpPawsZero, antiMalwareSettingConnectedThreatDefenseUseControlManagerSuspiciousObjectListEnabled, intrusionPreventionSettingEngineOptionFragmentedIpKeepMax, firewallSettingEngineOptionDrop6To4BogonsAddressesEnabled, logInspectionSettingSeverityClippingAgentEventStoreLevelMin, platformSettingScanCacheConcurrencyMax, antiMalwareSettingSyslogConfigId, firewallSettingAntiEvasionTcpPawsWindowPolicy, firewallSettingReconnaissanceDetectTcpXmasAttackEnabled, applicationControlSettingRulesetMode, antiMalwareSettingSmartProtectionGlobalServerUseProxyEnabled, webReputationSettingSmartProtectionLocalServerAllowOffDomainGlobal, integrityMonitoringSettingCombinedModeProtectionSource, firewallSettingEngineOptionCloseWaitTimeout, platformSettingScanOpenPortListId, platformSettingAgentSelfProtectionPasswordEnabled, firewallSettingEngineOptionAckTimeout, firewallSettingEventLogFileCachedEntriesStaleTime, firewallSettingCombinedModeProtectionSource, platformSettingAgentEventsSendInterval, platformSettingInactiveAgentCleanupOverrideEnabled, firewallSettingFailureResponseEngineSystem, platformSettingRelayState, firewallSettingEngineOptionDropEvasiveRetransmitEnabled, activityMonitoringSettingIndicatorEnabled, intrusionPreventionSettingEngineOptionFragmentedIpTimeout, firewallSettingAntiEvasionCheckTcpZeroFlags, webReputationSettingSmartProtectionGlobalServerUseProxyEnabled, intrusionPreventionSettingNsxSecurityTaggingPreventModeLevel, firewallSettingReconnaissanceNotifyTcpXmasAttackEnabled, firewallSettingEngineOptionUdpTimeout, webReputationSettingSmartProtectionLocalServerEnabled, firewallSettingEngineOptionTcpMssLimit, firewallSettingEngineOptionColdStartTimeout, firewallSettingEngineOptionEstablishedTimeout, antiMalwareSettingIdentifiedFilesSpaceMaxMbytes, firewallSettingEngineOptionAllowNullIpEnabled, platformSettingNotificationsSuppressPopupsEnabled, firewallSettingAntiEvasionCheckTcpRstFinFlags, firewallSettingEngineOptionDisconnectTimeout, firewallSettingEngineOptionCloseTimeout, firewallSettingEngineOptionTunnelDepthMaxExceededAction, firewallSettingReconnaissanceDetectTcpNullScanEnabled, platformSettingSmartProtectionAntiMalwareGlobalServerProxyId, firewallSettingEngineOptionFilterIpv4Tunnels, webReputationSettingSmartProtectionLocalServerUrls, firewallSettingEngineOptionLogOnePacketPeriod, firewallSettingEngineOptionFilterIpv6Tunnels, firewallSettingAntiEvasionCheckTcpCongestionFlags, platformSettingHeartbeatMissedAlertThreshold, intrusionPreventionSettingEngineOptionsEnabled, firewallSettingEngineOptionConnectionsNumUdpMax, integrityMonitoringSettingAutoApplyRecommendationsEnabled, firewallSettingEngineOptionTunnelDepthMax, firewallSettingEngineOptionDropUnknownSslProtocolEnabled, antiMalwareSettingNsxSecurityTaggingValue, intrusionPreventionSettingLogDataRuleFirstMatchEnabled, firewallSettingEngineOptionLoggingPolicy, platformSettingTroubleshootingLoggingLevel, antiMalwareSettingVirtualApplianceOnDemandScanCacheEntriesMax, webReputationSettingCombinedModeProtectionSource, firewallSettingEngineOptionClosingTimeout, firewallSettingAntiEvasionCheckPaws, intrusionPreventionSettingAutoApplyRecommendationsEnabled, firewallSettingReconnaissanceDetectFingerprintProbeEnabled, antiMalwareSettingNsxSecurityTaggingRemoveOnCleanScanEnabled, firewallSettingEngineOptionLogPacketLengthMax, firewallSettingEngineOptionDropTeredoAnomaliesEnabled, webReputationSettingSecurityLevel, firewallSettingEngineOptionDropIpv6SiteLocalAddressesEnabled, activityMonitoringSettingActivityEnabled, firewallSettingEngineOptionStrictTerodoPortCheckEnabled, webReputationSettingBlockedUrlKeywords, webReputationSettingSyslogConfigId, firewallSettingFailureResponsePacketSanityCheck, firewallSettingNetworkEngineMode, firewallSettingEventLogFileSizeMax, antiMalwareSettingMalwareScanMultithreadedProcessingEnabled, firewallSettingReconnaissanceDetectTcpSynFinScanEnabled, firewallSettingEngineOptionDropIpZeroPayloadEnabled, firewallSettingEngineOptionBlockIpv6Agent8AndEarlierEnabled, intrusionPreventionSettingEngineOptionFragmentedIpPacketSendIcmpEnabled, antiMalwareSettingPredictiveMachineLearningExceptions, firewallSettingEngineOptionLogEventsPerSecondMax, firewallSettingEngineOptionSslSessionTime, antiMalwareSettingBehaviorMonitoringScanExclusionList, antiMalwareSettingSmartProtectionGlobalServerEnabled, firewallSettingEngineOptionLogOnePacketWithinPeriodEnabled, firewallSettingEngineOptionGenerateConnectionEventsIcmpEnabled, platformSettingHeartbeatInactiveVmOfflineAlertEnabled, webReputationSettingSmartProtectionWebReputationGlobalServerProxyId, antiMalwareSettingNsxSecurityTaggingEnabled, firewallSettingAntiEvasionCheckFragmentedPackets, firewallSettingEngineOptionConnectionsNumIcmpMax, firewallSettingAntiEvasionCheckTcpSplitHandshake, antiMalwareSettingCombinedModeProtectionSource, firewallSettingEngineOptionEventNodesMax, webReputationSettingMonitorPortListId, applicationControlSettingSyslogConfigId, firewallSettingAntiEvasionCheckOutNoConnection, firewallSettingEngineOptionBlockIpv6Agent9AndLaterEnabled, integrityMonitoringSettingVirtualApplianceOptimizationScanCacheEntriesMax, firewallSettingReconnaissanceNotifyTcpNullScanEnabled, firewallSettingEngineOptionIgnoreStatusCode1, firewallSettingEngineOptionIgnoreStatusCode0, firewallSettingEngineOptionIgnoreStatusCode2, firewallSettingEngineOptionSslSessionSize, antiMalwareSettingScanCacheRealTimeConfigId, platformSettingRecommendationOngoingScansInterval, platformSettingSmartProtectionGlobalServerUseProxyEnabled, firewallSettingInterfaceLimitOneActiveEnabled, firewallSettingAntiEvasionCheckTcpChecksum, firewallSettingEngineOptionDropIpv6ExtType0Enabled, antiMalwareSettingScanFileSizeMaxMbytes, firewallSettingEngineOptionGenerateConnectionEventsTcpEnabled, antiMalwareSettingFileHashSizeMaxMbytes, firewallSettingEventLogFileCachedEntriesLifeTime, platformSettingSmartProtectionGlobalServerProxyId, logInspectionSettingAutoApplyRecommendationsEnabled, antiMalwareSettingConnectedThreatDefenseSuspiciousFileDdanSubmissionEnabled, webReputationSettingBlockingPageLink, firewallSettingSyslogConfigId, platformSettingAgentCommunicationsDirection, integrityMonitoringSettingScanCacheConfigId, antiMalwareSettingDocumentExploitProtectionRuleExceptions, firewallSettingAntiEvasionCheckTcpSynWithData, antiMalwareSettingFileHashEnabled, firewallSettingReconnaissanceBlockFingerprintProbeDuration, firewallSettingEngineOptionDropIpv6BogonsAddressesEnabled, firewallSettingEngineOptionBootStartTimeout, firewallSettingEngineOptionConnectionsNumTcpMax, firewallSettingAntiEvasionSecurityPosture, firewallSettingInterfacePatterns, firewallSettingInterfaceIsolationEnabled, antiMalwareSettingVirtualApplianceRealTimeScanCacheEntriesMax, firewallSettingEventsOutOfAllowedPolicyEnabled, firewallSettingAntiEvasionCheckEvasiveRetransmit, firewallSettingEngineOptionIcmpTimeout, integrityMonitoringSettingSyslogConfigId, firewallSettingEngineOptionConnectionCleanupTimeout, antiMalwareSettingSmartProtectionLocalServerAllowOffDomainGlobal, firewallSettingReconnaissanceNotifyTcpSynFinScanEnabled, firewallSettingEngineOptionErrorTimeout, webReputationSettingAllowedUrls, firewallSettingReconnaissanceNotifyNetworkOrPortScanEnabled, firewallSettingEngineOptionFinWait1Timeout, firewallSettingEngineOptionGenerateConnectionEventsUdpEnabled, activityMonitoringSettingSyslogConfigId, firewallSettingAntiEvasionCheckTcpSynRstFlags, antiMalwareSettingSpywareApprovedList, firewallSettingAntiEvasionCheckTcpUrgentFlags, intrusionPreventionSettingNsxSecurityTaggingDetectModeLevel, intrusionPreventionSettingEngineOptionFragmentedIpUnconcernedMacAddressBypassEnabled, firewallSettingEngineOptionLogAllPacketDataEnabled, firewallSettingAntiEvasionCheckTcpSynFinFlags, platformSettingHeartbeatInterval, firewallSettingEngineOptionFragmentSizeMin, antiMalwareSettingSmartProtectionServerConnectionLostWarningEnabled, firewallSettingReconnaissanceBlockNetworkOrPortScanDuration, integrityMonitoringSettingContentHashAlgorithm, antiMalwareSettingSmartScanState, firewallSettingConfigPackageExceedsAlertMaxEnabled, platformSettingEnvironmentVariableOverrides, firewallSettingEngineOptionFragmentOffsetMin, antiMalwareSettingSmartProtectionLocalServerUrls, firewallSettingEngineOptionSynRcvdTimeout, firewallSettingEventLogFileCachedEntriesNum, firewallSettingEngineOptionForceAllowIcmpType3Code4, firewallSettingReconnaissanceBlockTcpNullScanDuration, platformSettingSmartProtectionGlobalServerEnabled, integrityMonitoringSettingRealtimeEnabled, firewallSettingEngineOptionLastAckTimeout, firewallSettingReconnaissanceExcludeIpListId, platformSettingAgentSelfProtectionEnabled, firewallSettingEngineOptionDropIpv6ReservedAddressesEnabled, firewallSettingAntiEvasionCheckFinNoConnection, firewallSettingEngineOptionDebugPacketNumMax, firewallSettingEngineOptionBypassCiscoWaasConnectionsEnabled, firewallSettingReconnaissanceEnabled, platformSettingHeartbeatLocalTimeShiftAlertThreshold, antiMalwareSettingFileHashMd5Enabled, firewallSettingReconnaissanceDetectNetworkOrPortScanEnabled, firewallSettingEngineOptionSilentTcpConnectionDropEnabled, firewallSettingEngineOptionBlockSameSrcDstIpEnabled, firewallSettingEngineOptionForceAllowDhcpDns, firewallSettingReconnaissanceIncludeIpListId, firewallSettingEngineOptionsEnabled, firewallSettingReconnaissanceBlockTcpSynFinScanDuration, webReputationSettingSecurityBlockUntestedPagesEnabled, webReputationSettingAllowedUrlDomains, firewallSettingEventLogFileIgnoreSourceIpListId, firewallSettingEngineOptionDropIpv6FragmentsLowerThanMinMtuEnabled, platformSettingAutoAssignNewIntrusionPreventionRulesEnabled, firewallSettingAntiEvasionCheckRstNoConnection, webReputationSettingBlockedUrls, platformSettingCombinedModeNetworkGroupProtectionSource, webReputationSettingAlertingEnabled, antiMalwareSettingNsxSecurityTaggingOnRemediationFailureEnabled, integrityMonitoringSettingCpuUsageLevel, platformSettingAutoUpdateAntiMalwareEngineEnabled, intrusionPreventionSettingCombinedModeProtectionSource. | Required |
| overrides | Show the value only if defined for the current computer. Possible values are: true, false. Default is false. | Optional |
| value | Value of a Setting. | Required |
Context Output
| Path | Type | Description |
|---|---|---|
| TrendMicro.ComputersSettings.computerId | integer | The ID of the computer that owns the setting |
| TrendMicro.ComputersSettings.name | string | The name of the setting |
| TrendMicro.ComputersSettings.value | string | Value of a Setting |
Command Example
!trendmicro-modify-computer-setting computer_id=216 name=activityMonitoringSettingActivityEnabled value=on
Context Example
{
"TrendMicro": {
"ComputersSettings": {
"computerId": 216,
"name": "activityMonitoringSettingActivityEnabled",
"value": "On"
}
}
}
Human Readable Output
Settings for computer 216
Computer ID Name Value activityMonitoringSettingActivityEnabled On
trendmicro-reset-computer-setting
Reset a setting of certain computer to its default value.
Base Command
trendmicro-reset-computer-setting
Input
| Argument Name | Description | Required |
|---|---|---|
| computer_id | The ID number of the computer. | Required |
| name | The name of the setting. Possible values are: logInspectionSettingSeverityClippingAgentEventSendSyslogLevelMin, firewallSettingEngineOptionConnectionsCleanupMax, firewallSettingEngineOptionVerifyTcpChecksumEnabled, antiMalwareSettingScanCacheOnDemandConfigId, applicationControlSettingSharedRulesetId, webReputationSettingSmartProtectionServerConnectionLostWarningEnabled, applicationControlSettingExecutionEnforcementLevel, webReputationSettingBlockedUrlDomains, firewallSettingEngineOptionSynSentTimeout, platformSettingAgentSelfProtectionPassword, firewallSettingReconnaissanceBlockTcpXmasAttackDuration, intrusionPreventionSettingVirtualAndContainerNetworkScanEnabled, logInspectionSettingSyslogConfigId, firewallSettingEngineOptionDebugModeEnabled, firewallSettingVirtualAndContainerNetworkScanEnabled, antiMalwareSettingFileHashSha256Enabled, firewallSettingReconnaissanceNotifyFingerprintProbeEnabled, firewallSettingEventLogFileRetainNum, firewallSettingAntiEvasionCheckTcpPawsZero, antiMalwareSettingConnectedThreatDefenseUseControlManagerSuspiciousObjectListEnabled, intrusionPreventionSettingEngineOptionFragmentedIpKeepMax, firewallSettingEngineOptionDrop6To4BogonsAddressesEnabled, logInspectionSettingSeverityClippingAgentEventStoreLevelMin, platformSettingScanCacheConcurrencyMax, antiMalwareSettingSyslogConfigId, firewallSettingAntiEvasionTcpPawsWindowPolicy, firewallSettingReconnaissanceDetectTcpXmasAttackEnabled, applicationControlSettingRulesetMode, antiMalwareSettingSmartProtectionGlobalServerUseProxyEnabled, webReputationSettingSmartProtectionLocalServerAllowOffDomainGlobal, integrityMonitoringSettingCombinedModeProtectionSource, firewallSettingEngineOptionCloseWaitTimeout, platformSettingScanOpenPortListId, platformSettingAgentSelfProtectionPasswordEnabled, firewallSettingEngineOptionAckTimeout, firewallSettingEventLogFileCachedEntriesStaleTime, firewallSettingCombinedModeProtectionSource, platformSettingAgentEventsSendInterval, platformSettingInactiveAgentCleanupOverrideEnabled, firewallSettingFailureResponseEngineSystem, platformSettingRelayState, firewallSettingEngineOptionDropEvasiveRetransmitEnabled, activityMonitoringSettingIndicatorEnabled, intrusionPreventionSettingEngineOptionFragmentedIpTimeout, firewallSettingAntiEvasionCheckTcpZeroFlags, webReputationSettingSmartProtectionGlobalServerUseProxyEnabled, intrusionPreventionSettingNsxSecurityTaggingPreventModeLevel, firewallSettingReconnaissanceNotifyTcpXmasAttackEnabled, firewallSettingEngineOptionUdpTimeout, webReputationSettingSmartProtectionLocalServerEnabled, firewallSettingEngineOptionTcpMssLimit, firewallSettingEngineOptionColdStartTimeout, firewallSettingEngineOptionEstablishedTimeout, antiMalwareSettingIdentifiedFilesSpaceMaxMbytes, firewallSettingEngineOptionAllowNullIpEnabled, platformSettingNotificationsSuppressPopupsEnabled, firewallSettingAntiEvasionCheckTcpRstFinFlags, firewallSettingEngineOptionDisconnectTimeout, firewallSettingEngineOptionCloseTimeout, firewallSettingEngineOptionTunnelDepthMaxExceededAction, firewallSettingReconnaissanceDetectTcpNullScanEnabled, platformSettingSmartProtectionAntiMalwareGlobalServerProxyId, firewallSettingEngineOptionFilterIpv4Tunnels, webReputationSettingSmartProtectionLocalServerUrls, firewallSettingEngineOptionLogOnePacketPeriod, firewallSettingEngineOptionFilterIpv6Tunnels, firewallSettingAntiEvasionCheckTcpCongestionFlags, platformSettingHeartbeatMissedAlertThreshold, intrusionPreventionSettingEngineOptionsEnabled, firewallSettingEngineOptionConnectionsNumUdpMax, integrityMonitoringSettingAutoApplyRecommendationsEnabled, firewallSettingEngineOptionTunnelDepthMax, firewallSettingEngineOptionDropUnknownSslProtocolEnabled, antiMalwareSettingNsxSecurityTaggingValue, intrusionPreventionSettingLogDataRuleFirstMatchEnabled, firewallSettingEngineOptionLoggingPolicy, platformSettingTroubleshootingLoggingLevel, antiMalwareSettingVirtualApplianceOnDemandScanCacheEntriesMax, webReputationSettingCombinedModeProtectionSource, firewallSettingEngineOptionClosingTimeout, firewallSettingAntiEvasionCheckPaws, intrusionPreventionSettingAutoApplyRecommendationsEnabled, firewallSettingReconnaissanceDetectFingerprintProbeEnabled, antiMalwareSettingNsxSecurityTaggingRemoveOnCleanScanEnabled, firewallSettingEngineOptionLogPacketLengthMax, firewallSettingEngineOptionDropTeredoAnomaliesEnabled, webReputationSettingSecurityLevel, firewallSettingEngineOptionDropIpv6SiteLocalAddressesEnabled, activityMonitoringSettingActivityEnabled, firewallSettingEngineOptionStrictTerodoPortCheckEnabled, webReputationSettingBlockedUrlKeywords, webReputationSettingSyslogConfigId, firewallSettingFailureResponsePacketSanityCheck, firewallSettingNetworkEngineMode, firewallSettingEventLogFileSizeMax, antiMalwareSettingMalwareScanMultithreadedProcessingEnabled, firewallSettingReconnaissanceDetectTcpSynFinScanEnabled, firewallSettingEngineOptionDropIpZeroPayloadEnabled, firewallSettingEngineOptionBlockIpv6Agent8AndEarlierEnabled, intrusionPreventionSettingEngineOptionFragmentedIpPacketSendIcmpEnabled, antiMalwareSettingPredictiveMachineLearningExceptions, firewallSettingEngineOptionLogEventsPerSecondMax, firewallSettingEngineOptionSslSessionTime, antiMalwareSettingBehaviorMonitoringScanExclusionList, antiMalwareSettingSmartProtectionGlobalServerEnabled, firewallSettingEngineOptionLogOnePacketWithinPeriodEnabled, firewallSettingEngineOptionGenerateConnectionEventsIcmpEnabled, platformSettingHeartbeatInactiveVmOfflineAlertEnabled, webReputationSettingSmartProtectionWebReputationGlobalServerProxyId, antiMalwareSettingNsxSecurityTaggingEnabled, firewallSettingAntiEvasionCheckFragmentedPackets, firewallSettingEngineOptionConnectionsNumIcmpMax, firewallSettingAntiEvasionCheckTcpSplitHandshake, antiMalwareSettingCombinedModeProtectionSource, firewallSettingEngineOptionEventNodesMax, webReputationSettingMonitorPortListId, applicationControlSettingSyslogConfigId, firewallSettingAntiEvasionCheckOutNoConnection, firewallSettingEngineOptionBlockIpv6Agent9AndLaterEnabled, integrityMonitoringSettingVirtualApplianceOptimizationScanCacheEntriesMax, firewallSettingReconnaissanceNotifyTcpNullScanEnabled, firewallSettingEngineOptionIgnoreStatusCode1, firewallSettingEngineOptionIgnoreStatusCode0, firewallSettingEngineOptionIgnoreStatusCode2, firewallSettingEngineOptionSslSessionSize, antiMalwareSettingScanCacheRealTimeConfigId, platformSettingRecommendationOngoingScansInterval, platformSettingSmartProtectionGlobalServerUseProxyEnabled, firewallSettingInterfaceLimitOneActiveEnabled, firewallSettingAntiEvasionCheckTcpChecksum, firewallSettingEngineOptionDropIpv6ExtType0Enabled, antiMalwareSettingScanFileSizeMaxMbytes, firewallSettingEngineOptionGenerateConnectionEventsTcpEnabled, antiMalwareSettingFileHashSizeMaxMbytes, firewallSettingEventLogFileCachedEntriesLifeTime, platformSettingSmartProtectionGlobalServerProxyId, logInspectionSettingAutoApplyRecommendationsEnabled, antiMalwareSettingConnectedThreatDefenseSuspiciousFileDdanSubmissionEnabled, webReputationSettingBlockingPageLink, firewallSettingSyslogConfigId, platformSettingAgentCommunicationsDirection, integrityMonitoringSettingScanCacheConfigId, antiMalwareSettingDocumentExploitProtectionRuleExceptions, firewallSettingAntiEvasionCheckTcpSynWithData, antiMalwareSettingFileHashEnabled, firewallSettingReconnaissanceBlockFingerprintProbeDuration, firewallSettingEngineOptionDropIpv6BogonsAddressesEnabled, firewallSettingEngineOptionBootStartTimeout, firewallSettingEngineOptionConnectionsNumTcpMax, firewallSettingAntiEvasionSecurityPosture, firewallSettingInterfacePatterns, firewallSettingInterfaceIsolationEnabled, antiMalwareSettingVirtualApplianceRealTimeScanCacheEntriesMax, firewallSettingEventsOutOfAllowedPolicyEnabled, firewallSettingAntiEvasionCheckEvasiveRetransmit, firewallSettingEngineOptionIcmpTimeout, integrityMonitoringSettingSyslogConfigId, firewallSettingEngineOptionConnectionCleanupTimeout, antiMalwareSettingSmartProtectionLocalServerAllowOffDomainGlobal, firewallSettingReconnaissanceNotifyTcpSynFinScanEnabled, firewallSettingEngineOptionErrorTimeout, webReputationSettingAllowedUrls, firewallSettingReconnaissanceNotifyNetworkOrPortScanEnabled, firewallSettingEngineOptionFinWait1Timeout, firewallSettingEngineOptionGenerateConnectionEventsUdpEnabled, activityMonitoringSettingSyslogConfigId, firewallSettingAntiEvasionCheckTcpSynRstFlags, antiMalwareSettingSpywareApprovedList, firewallSettingAntiEvasionCheckTcpUrgentFlags, intrusionPreventionSettingNsxSecurityTaggingDetectModeLevel, intrusionPreventionSettingEngineOptionFragmentedIpUnconcernedMacAddressBypassEnabled, firewallSettingEngineOptionLogAllPacketDataEnabled, firewallSettingAntiEvasionCheckTcpSynFinFlags, platformSettingHeartbeatInterval, firewallSettingEngineOptionFragmentSizeMin, antiMalwareSettingSmartProtectionServerConnectionLostWarningEnabled, firewallSettingReconnaissanceBlockNetworkOrPortScanDuration, integrityMonitoringSettingContentHashAlgorithm, antiMalwareSettingSmartScanState, firewallSettingConfigPackageExceedsAlertMaxEnabled, platformSettingEnvironmentVariableOverrides, firewallSettingEngineOptionFragmentOffsetMin, antiMalwareSettingSmartProtectionLocalServerUrls, firewallSettingEngineOptionSynRcvdTimeout, firewallSettingEventLogFileCachedEntriesNum, firewallSettingEngineOptionForceAllowIcmpType3Code4, firewallSettingReconnaissanceBlockTcpNullScanDuration, platformSettingSmartProtectionGlobalServerEnabled, integrityMonitoringSettingRealtimeEnabled, firewallSettingEngineOptionLastAckTimeout, firewallSettingReconnaissanceExcludeIpListId, platformSettingAgentSelfProtectionEnabled, firewallSettingEngineOptionDropIpv6ReservedAddressesEnabled, firewallSettingAntiEvasionCheckFinNoConnection, firewallSettingEngineOptionDebugPacketNumMax, firewallSettingEngineOptionBypassCiscoWaasConnectionsEnabled, firewallSettingReconnaissanceEnabled, platformSettingHeartbeatLocalTimeShiftAlertThreshold, antiMalwareSettingFileHashMd5Enabled, firewallSettingReconnaissanceDetectNetworkOrPortScanEnabled, firewallSettingEngineOptionSilentTcpConnectionDropEnabled, firewallSettingEngineOptionBlockSameSrcDstIpEnabled, firewallSettingEngineOptionForceAllowDhcpDns, firewallSettingReconnaissanceIncludeIpListId, firewallSettingEngineOptionsEnabled, firewallSettingReconnaissanceBlockTcpSynFinScanDuration, webReputationSettingSecurityBlockUntestedPagesEnabled, webReputationSettingAllowedUrlDomains, firewallSettingEventLogFileIgnoreSourceIpListId, firewallSettingEngineOptionDropIpv6FragmentsLowerThanMinMtuEnabled, platformSettingAutoAssignNewIntrusionPreventionRulesEnabled, firewallSettingAntiEvasionCheckRstNoConnection, webReputationSettingBlockedUrls, platformSettingCombinedModeNetworkGroupProtectionSource, webReputationSettingAlertingEnabled, antiMalwareSettingNsxSecurityTaggingOnRemediationFailureEnabled, integrityMonitoringSettingCpuUsageLevel, platformSettingAutoUpdateAntiMalwareEngineEnabled, intrusionPreventionSettingCombinedModeProtectionSource. | Required |
| overrides | Show the value only if defined for the current computer. Possible values are: true, false. Default is false. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| TrendMicro.ComputersSettings.computerId | integer | The ID of the computer that owns the setting |
| TrendMicro.ComputersSettings.name | string | The name of the setting |
| TrendMicro.ComputersSettings.value | string | The value of the setting |
Command Example
!trendmicro-reset-computer-setting computer_id=216 name=activityMonitoringSettingActivityEnabled
Context Example
{
"TrendMicro": {
"ComputersSettings": {
"computerId": 216,
"name": "activityMonitoringSettingActivityEnabled",
"value": "Off"
}
}
}
Human Readable Output
Settings for computer 216
Computer ID Name Value activityMonitoringSettingActivityEnabled Off
trendmicro-list-computer-groups
Get information about all existing computer groups
Base Command
trendmicro-list-computer-groups
Input
| Argument Name | Description | Required |
| — | — | — |
Context Output
| Path | Type | Description |
|---|---|---|
| TrendMicro.ComputerGroups.name | string | Name of the computer group |
| TrendMicro.ComputerGroups.description | string | Description of the computer group |
| TrendMicro.ComputerGroups.parentGroupID | integer | ID of the computer group’s parent group |
Command Example
#### Context Example
```json
{
"TrendMicro": {
"ComputerGroups": [
{
"ID": 1,
"description": "Testing Group",
"name": "PoC Group",
"type": "folder"
},
{
"ID": 100,
"description": "Test Group",
"name": "Test",
"parentGroupID": 1,
"type": "folder"
},
{
"ID": 110,
"description": "",
"name": "Example Computer Group",
"parentGroupID": 1,
"type": "folder"
}
]
}
}
Human Readable Output
Computer Groups
ID Name Description Parent Group ID 1 PoC Group Testing Group 100 Test Test Group 1 110 Example Computer Group 1
trendmicro-create-computer-group
Create a new computer group
Base Command
trendmicro-create-computer-group
Input
| Argument Name | Description | Required |
|---|---|---|
| name | Name of the computer group. | Required |
| description | Description of the computer group. | Optional |
| parent_group_id | ID of the computer group’s parent group. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| TrendMicro.ComputerGroups.name | string | Name of the computer group |
| TrendMicro.ComputerGroups.description | string | Description of the computer group |
| TrendMicro.ComputerGroups.parentGroupID | integer | ID of the computer group’s parent group |
Command Example
!trendmicro-create-computer-group name="Example Computer Group" description="Example computer group description" parent_group_id=1
Context Example
{
"TrendMicro": {
"ComputerGroups": {
"ID": 111,
"description": "Example computer group description",
"name": "Example Computer Group",
"parentGroupID": 1,
"type": "folder"
}
}
}
Human Readable Output
Computer Groups
ID Name Description Parent Group ID 111 Example Computer Group Example computer group description 1
trendmicro-search-computer-groups
Search for specific computer groups by some field name with a certain type. Every field has a specific type. It can be a simple type like a string, a numeric or a boolean. However, it can also be a choice, which is a string with specific options (enumeration). To search, you must provide the field_name & field_type, the operation to perform, and the value to search.
Base Command
trendmicro-search-computer-groups
Input
| Argument Name | Description | Required |
|---|---|---|
| max_items | Limits the number of objects returned. | Optional |
| field_name | The name of the field. Possible values are: ID, type, name, description, parentGroupID. | Required |
| field_type | The type of the field. Possible values are: boolean, numeric, choice, id, string. | Required |
| operation | The operation to compare with. Possible values are: less-than, less-than-or-equal, equal, greater-than-or-equal, greater-than, not-equal. | Required |
| value | The value compare against the field name. | Required |
| sort_by_object_id | If true, forces the response objects to be sorted by ID, overriding the default sort order. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| TrendMicro.ComputerGroups.name | string | Name of the computer group |
| TrendMicro.ComputerGroups.description | string | Description of the computer group |
| TrendMicro.ComputerGroups.parentGroupID | integer | ID of the computer group’s parent group |
Command Example
!trendmicro-search-computer-groups field_name=ID operation=equal field_type=id value=110
Context Example
{
"TrendMicro": {
"ComputerGroups": {
"ID": 110,
"description": "",
"name": "Example Computer Group",
"parentGroupID": 1,
"type": "folder"
}
}
}
Human Readable Output
Matched Computer Groups
ID Name Parent Group ID 110 Example Computer Group 1
trendmicro-get-computer-group
Get information of a certain computer group
Base Command
trendmicro-get-computer-group
Input
| Argument Name | Description | Required |
|---|---|---|
| computer_group_id | The ID number of the computer group to get. | Required |
Context Output
| Path | Type | Description |
|---|---|---|
| TrendMicro.ComputerGroups.name | string | Name of the computer group |
| TrendMicro.ComputerGroups.description | string | Description of the computer group |
| TrendMicro.ComputerGroups.parentGroupID | integer | ID of the computer group’s parent group |
Command Example
!trendmicro-get-computer-group computer_group_id=110
Context Example
{
"TrendMicro": {
"ComputerGroups": {
"ID": 110,
"description": "",
"name": "Example Computer Group",
"parentGroupID": 1,
"type": "folder"
}
}
}
Human Readable Output
Computer Group 110 Details
ID Name Parent Group ID 110 Example Computer Group 1
trendmicro-modify-computer-group
Modify the properties of a certain computer group
Base Command
trendmicro-modify-computer-group
Input
| Argument Name | Description | Required |
|---|---|---|
| computer_group_id | The ID number of the computer group to modify. | Required |
| name | Name of the computer group. | Optional |
| description | Description of the computer group. | Optional |
| parent_group_id | ID of the computer group’s parent group. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| TrendMicro.ComputerGroups.name | string | Name of the computer group |
| TrendMicro.ComputerGroups.description | string | Description of the computer group |
| TrendMicro.ComputerGroups.parentGroupID | integer | ID of the computer group’s parent group |
Command Example
!trendmicro-modify-computer-group computer_group_id=110 description="Example computer group description"
Context Example
{
"TrendMicro": {
"ComputerGroups": {
"ID": 110,
"description": "Example computer group description",
"name": "Example Computer Group",
"parentGroupID": 1,
"type": "folder"
}
}
}
Human Readable Output
Computer Group
ID Name Description Parent Group ID 110 Example Computer Group Example computer group description 1
trendmicro-delete-computer-group
Delete a certain computer group
Base Command
trendmicro-delete-computer-group
Input
| Argument Name | Description | Required |
|---|---|---|
| computer_group_id | The ID number of the computer group to delete. | Required |
Context Output
There is no context output for this command.
Command Example
!trendmicro-delete-computer-group computer_group_id=110
Human Readable Output
The computer group was successfully deleted!
trendmicro-search-firewall-rules
Search for specific firewall rules by some field name with a certain type. Every field has a specific type. It can be a simple type like a string, a numeric or a boolean. However, it can also be a choice, which is a string with specific options (enumeration). To search, you must provide the field_name & field_type, the operation to perform, and the value to search.
Base Command
trendmicro-search-firewall-rules
Input
| Argument Name | Description | Required |
|---|---|---|
| max_items | Limits the number of objects returned. | Optional |
| field_name | The field name to search. Possible values are: ID, name, description, action, priority, direction, frameType, frameNumber, frameNot, protocol, protocolNumber, protocolNot, sourceIPType, sourceIPValue, sourceIPMask, sourceIPRangeFrom, sourceIPRangeTo, sourceIPMultiple, sourceIPListID, sourceIPNot, sourceMACType, sourceMACValue, sourceMACMultiple, sourceMACListID, sourceMACNot, sourcePortType, sourcePortMultiple, sourcePortListID, sourcePortNot, destinationIPType, destinationIPValue, destinationIPMask, destinationIPRangeFrom, destinationIPRangeTo, destinationIPMultiple, destinationIPListID, destinationIPNot, destinationMACType, destinationMACValue, destinationMACMultiple, destinationMACListID, destinationMACNot, destinationPortType, destinationPortMultiple, destinationPortListID, destinationPortNot, anyFlags, logDisabled, includePacketData, alertEnabled, scheduleID, contextID. | Required |
| field_type | The field type. Possible values are: boolean, numeric, choice, id, string. Default is string. | Optional |
| operation | The operation to test against the field. Possible values are: less-than, less-than-or-equal, equal, greater-than-or-equal, greater-than, not-equal. | Required |
| value | The value to compare against the field. | Required |
| sort_by_object_id | If true, forces the response objects to be sorted by ID, overriding the default sort order. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| TrendMicro.FirewallRules.name | string | Name of the firewall rule |
| TrendMicro.FirewallRules.description | string | Description of the firewall rule |
| TrendMicro.FirewallRules.action | string | Action of the packet filter |
| TrendMicro.FirewallRules.priority | string | Priority of the packet filter |
| TrendMicro.FirewallRules.direction | string | Packet direction |
| TrendMicro.FirewallRules.frameType | string | Supported frame types |
| TrendMicro.FirewallRules.frameNumber | integer | Ethernet frame number |
| TrendMicro.FirewallRules.frameNot | boolean | Controls if the frame setting should be inverted |
| TrendMicro.FirewallRules.protocol | string | Protocol |
| TrendMicro.FirewallRules.protocolNumber | integer | Two-byte protocol number |
| TrendMicro.FirewallRules.protocolNot | boolean | Controls if the protocol setting should be inverted |
| TrendMicro.FirewallRules.sourceIPType | string | Source IP type |
| TrendMicro.FirewallRules.sourceIPValue | string | Source IP |
| TrendMicro.FirewallRules.sourceIPMask | string | Source IP mask |
| TrendMicro.FirewallRules.sourceIPRangeFrom | string | The first value for a range of source IP addresses |
| TrendMicro.FirewallRules.sourceIPRangeTo | string | The last value for a range of source IP addresses |
| TrendMicro.FirewallRules.sourceIPMultiple | array | List of source IP addresses |
| TrendMicro.FirewallRules.sourceIPListID | integer | ID of source IP list |
| TrendMicro.FirewallRules.sourceIPNot | boolean | Controls if the source IP setting should be inverted |
| TrendMicro.FirewallRules.sourceMACType | string | Source MAC type |
| TrendMicro.FirewallRules.sourceMACValue | string | Source MAC address |
| TrendMicro.FirewallRules.sourceMACMultiple | array | List of MAC addresses |
| TrendMicro.FirewallRules.sourceMACListID | integer | ID of MAC address list |
| TrendMicro.FirewallRules.sourceMACNot | boolean | Controls if the source MAC setting should be inverted |
| TrendMicro.FirewallRules.sourcePortType | string | The type of source port |
| TrendMicro.FirewallRules.sourcePortMultiple | array | List of comma-delimited source ports |
| TrendMicro.FirewallRules.sourcePortListID | integer | ID of source port list |
| TrendMicro.FirewallRules.sourcePortNot | boolean | Controls if the source port setting should be inverted |
| TrendMicro.FirewallRules.destinationIPType | string | Destination IP type |
| TrendMicro.FirewallRules.destinationIPValue | string | Destination IP |
| TrendMicro.FirewallRules.destinationIPMask | string | Destination IP mask |
| TrendMicro.FirewallRules.destinationIPRangeFrom | string | The first value for a range of destination IP addresses |
| TrendMicro.FirewallRules.destinationIPRangeTo | string | The last value for a range of destination IP addresses |
| TrendMicro.FirewallRules.destinationIPMultiple | array | List of comma-delimited destination IP addresses |
| TrendMicro.FirewallRules.destinationIPListID | integer | ID of destination IP list |
| TrendMicro.FirewallRules.destinationIPNot | boolean | Controls if the destination IP setting should be inverted |
| TrendMicro.FirewallRules.destinationMACType | string | Destination MAC type |
| TrendMicro.FirewallRules.destinationMACValue | string | Destination MAC address |
| TrendMicro.FirewallRules.destinationMACMultiple | array | List of comma-delimited MAC addresses |
| TrendMicro.FirewallRules.destinationMACListID | integer | ID of MAC address list |
| TrendMicro.FirewallRules.destinationMACNot | boolean | Controls if the destination MAC setting should be inverted |
| TrendMicro.FirewallRules.destinationPortType | string | The type of destination port |
| TrendMicro.FirewallRules.destinationPortMultiple | array | List of comma-delimited destination ports |
| TrendMicro.FirewallRules.destinationPortListID | integer | ID of destination port list |
| TrendMicro.FirewallRules.destinationPortNot | boolean | Controls if the destination port setting should be inverted |
| TrendMicro.FirewallRules.anyFlags | boolean | True if any flags are used |
| TrendMicro.FirewallRules.logDisabled | boolean | Controls if logging for this filter is disabled |
| TrendMicro.FirewallRules.includePacketData | boolean | Controls if this filter should capture data for every log |
| TrendMicro.FirewallRules.alertEnabled | boolean | Controls if this filter should be alerted on |
| TrendMicro.FirewallRules.scheduleID | integer | ID of the schedule to control when this filter is “on” |
| TrendMicro.FirewallRules.contextID | integer | RuleContext that is applied to this filter |
| TrendMicro.FirewallRules.tcpflags | array | TCP flags |
| TrendMicro.FirewallRules.TCPNot | boolean | Whther the TCP settings are inverted or not |
| TrendMicro.FirewallRules.ICMPType | integer | ICMP type |
| TrendMicro.FirewallRules.ICMPCode | integer | ICMP code |
| TrendMicro.FirewallRules.ICMPNot | boolean | Whther the ICMP settings are inverted or not |
Command Example
!trendmicro-search-firewall-rules field_name="action" field_type="choice" operation="equal" value="allow"
Context Example
{
"TrendMicro": {
"FirewallRules": [
{
"ID": 20,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "Allow incoming traffic to Deep Security Agent",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortListID": 11,
"destinationPortNot": false,
"destinationPortType": "port-list",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Deep Security Agent",
"priority": "0",
"protocol": "tcp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 21,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "Allow incoming traffic to VMware vCenter Server",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortListID": 12,
"destinationPortNot": false,
"destinationPortType": "port-list",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "VMware vCenter Server",
"priority": "0",
"protocol": "tcp-udp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 22,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortNot": false,
"destinationPortType": "any",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Allow Deep Security as a Service inbound communications",
"priority": "0",
"protocol": "tcp",
"protocolNot": false,
"sourceIPMask": "255.255.255.0",
"sourceIPNot": false,
"sourceIPType": "masked-ip",
"sourceIPValue": "1.1.1.1",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortMultiple": [
"4118"
],
"sourcePortNot": false,
"sourcePortType": "multiple"
},
{
"ID": 24,
"TCPNot": true,
"action": "allow",
"alertEnabled": false,
"anyFlags": false,
"description": "UDP stateful and TCP stateful must be enabled",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortNot": false,
"destinationPortType": "any",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Allow solicited TCP/UDP replies",
"priority": "0",
"protocol": "tcp-udp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any",
"tcpflags": [
"syn"
]
},
{
"ID": 25,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "ICMP stateful must be enabled",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortNot": false,
"destinationPortType": "any",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Allow solicited ICMP replies",
"priority": "0",
"protocol": "icmp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 32,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "Allow incoming traffic to an FTP Server",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortListID": 81,
"destinationPortNot": false,
"destinationPortType": "port-list",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "FTP Server",
"priority": "0",
"protocol": "tcp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 35,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "Allow incoming traffic to Deep Security Manager",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortListID": 82,
"destinationPortNot": false,
"destinationPortType": "port-list",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Deep Security Manager",
"priority": "0",
"protocol": "tcp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 36,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "Allow incoming traffic to an Microsoft Exchange Server",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortListID": 83,
"destinationPortNot": false,
"destinationPortType": "port-list",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Microsoft Exchange Server",
"priority": "0",
"protocol": "tcp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 37,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortListID": 85,
"destinationPortNot": false,
"destinationPortType": "port-list",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "IPSec IKE",
"priority": "0",
"protocol": "udp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 38,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortNot": false,
"destinationPortType": "any",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "IPSec Encryption",
"priority": "0",
"protocol": "other",
"protocolNot": false,
"protocolNumber": 50,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 39,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortNot": false,
"destinationPortType": "any",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "IPSec Authentication",
"priority": "0",
"protocol": "other",
"protocolNot": false,
"protocolNumber": 51,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 40,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "Allow incoming traffic to a Domain Controller",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortListID": 86,
"destinationPortNot": false,
"destinationPortType": "port-list",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Domain Controller (TCP)",
"priority": "0",
"protocol": "tcp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 42,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "Allow incoming TCP traffic to a Web Server",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortListID": 77,
"destinationPortNot": false,
"destinationPortType": "port-list",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Web Server",
"priority": "0",
"protocol": "tcp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 43,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "Allow remote access to machines",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortListID": 111,
"destinationPortNot": false,
"destinationPortType": "port-list",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Remote Access SSH",
"priority": "0",
"protocol": "tcp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 44,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "Allow incoming traffic from the domain controller",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortNot": false,
"destinationPortType": "any",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Domain Client (TCP)",
"priority": "0",
"protocol": "tcp",
"protocolNot": false,
"sourceIPListID": 4,
"sourceIPNot": false,
"sourceIPType": "ip-list",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortListID": 88,
"sourcePortNot": false,
"sourcePortType": "port-list"
},
{
"ID": 46,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "Allow incoming TCP traffic to an SMTP Server",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortListID": 103,
"destinationPortNot": false,
"destinationPortType": "port-list",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "SMTP Server",
"priority": "0",
"protocol": "tcp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 47,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortListID": 110,
"destinationPortNot": false,
"destinationPortType": "port-list",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "IDENT",
"priority": "0",
"protocol": "tcp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 52,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "Allow remote access to machines",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortListID": 76,
"destinationPortNot": false,
"destinationPortType": "port-list",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Remote Access RDP",
"priority": "0",
"protocol": "tcp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 53,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortListID": 98,
"destinationPortNot": false,
"destinationPortType": "port-list",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "POP3 Server",
"priority": "0",
"protocol": "tcp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 54,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortListID": 105,
"destinationPortNot": false,
"destinationPortType": "port-list",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "IMAP Server",
"priority": "0",
"protocol": "tcp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 55,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortListID": 101,
"destinationPortNot": false,
"destinationPortType": "port-list",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Computer Associates Unicenter",
"priority": "0",
"protocol": "tcp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 56,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortListID": 97,
"destinationPortNot": false,
"destinationPortType": "port-list",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Veritas",
"priority": "0",
"protocol": "tcp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 70,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortNot": false,
"destinationPortType": "any",
"direction": "incoming",
"frameNot": false,
"frameNumber": 34915,
"frameType": "other",
"includePacketData": false,
"logDisabled": false,
"name": "Allow PPPOE Discovery",
"priority": "0",
"protocol": "any",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 71,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortNot": false,
"destinationPortType": "any",
"direction": "incoming",
"frameNot": false,
"frameNumber": 34916,
"frameType": "other",
"includePacketData": false,
"logDisabled": false,
"name": "Allow PPPOE Session",
"priority": "0",
"protocol": "any",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 72,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortNot": false,
"destinationPortType": "any",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Generic Routing Encapsulation",
"priority": "0",
"protocol": "other",
"protocolNot": false,
"protocolNumber": 47,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 75,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortNot": false,
"destinationPortType": "any",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "poc_rule",
"priority": "0",
"protocol": "tcp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "single",
"sourceIPValue": "1.2.3.4",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 76,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortNot": false,
"destinationPortType": "any",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "poc_rule1",
"priority": "0",
"protocol": "tcp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "single",
"sourceIPValue": "1.2.3.4",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 77,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortNot": false,
"destinationPortType": "any",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "poc_rule2",
"priority": "0",
"protocol": "tcp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "single",
"sourceIPValue": "1.2.3.4",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 133,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortNot": false,
"destinationPortType": "any",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "None",
"priority": "0",
"protocol": "any",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 166,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortNot": false,
"destinationPortType": "any",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "UDP",
"priority": "0",
"protocol": "udp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 174,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortNot": false,
"destinationPortType": "any",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Example Rule",
"priority": "0",
"protocol": "udp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
}
]
}
}
Human Readable Output
Matched Firewall Rules
ID Name Description Direction Action 20 Deep Security Agent Allow incoming traffic to Deep Security Agent incoming allow 21 VMware vCenter Server Allow incoming traffic to VMware vCenter Server incoming allow 22 Allow Deep Security as a Service inbound communications incoming allow 24 Allow solicited TCP/UDP replies UDP stateful and TCP stateful must be enabled incoming allow 25 Allow solicited ICMP replies ICMP stateful must be enabled incoming allow 32 FTP Server Allow incoming traffic to an FTP Server incoming allow 35 Deep Security Manager Allow incoming traffic to Deep Security Manager incoming allow 36 Microsoft Exchange Server Allow incoming traffic to an Microsoft Exchange Server incoming allow 37 IPSec IKE incoming allow 38 IPSec Encryption incoming allow 39 IPSec Authentication incoming allow 40 Domain Controller (TCP) Allow incoming traffic to a Domain Controller incoming allow 42 Web Server Allow incoming TCP traffic to a Web Server incoming allow 43 Remote Access SSH Allow remote access to machines incoming allow 44 Domain Client (TCP) Allow incoming traffic from the domain controller incoming allow 46 SMTP Server Allow incoming TCP traffic to an SMTP Server incoming allow 47 IDENT incoming allow 52 Remote Access RDP Allow remote access to machines incoming allow 53 POP3 Server incoming allow 54 IMAP Server incoming allow 55 Computer Associates Unicenter incoming allow 56 Veritas incoming allow 70 Allow PPPOE Discovery incoming allow 71 Allow PPPOE Session incoming allow 72 Generic Routing Encapsulation incoming allow 75 poc_rule incoming allow 76 poc_rule1 incoming allow 77 poc_rule2 incoming allow 133 None incoming allow 166 UDP incoming allow 174 Example Rule incoming allow
trendmicro-list-firewall-rules
List all existing firewall rules
Base Command
trendmicro-list-firewall-rules
Input
| Argument Name | Description | Required |
| — | — | — |
Context Output
| Path | Type | Description |
|---|---|---|
| TrendMicro.FirewallRules.name | string | Name of the firewall rule |
| TrendMicro.FirewallRules.description | string | Description of the firewall rule |
| TrendMicro.FirewallRules.action | string | Action of the packet filter |
| TrendMicro.FirewallRules.priority | string | Priority of the packet filter |
| TrendMicro.FirewallRules.direction | string | Packet direction |
| TrendMicro.FirewallRules.frameType | string | Supported frame types |
| TrendMicro.FirewallRules.frameNumber | integer | Ethernet frame number |
| TrendMicro.FirewallRules.frameNot | boolean | Controls if the frame setting should be inverted |
| TrendMicro.FirewallRules.protocol | string | Protocol |
| TrendMicro.FirewallRules.protocolNumber | integer | Two-byte protocol number |
| TrendMicro.FirewallRules.protocolNot | boolean | Controls if the protocol setting should be inverted |
| TrendMicro.FirewallRules.sourceIPType | string | Source IP type |
| TrendMicro.FirewallRules.sourceIPValue | string | Source IP |
| TrendMicro.FirewallRules.sourceIPMask | string | Source IP mask |
| TrendMicro.FirewallRules.sourceIPRangeFrom | string | The first value for a range of source IP addresses |
| TrendMicro.FirewallRules.sourceIPRangeTo | string | The last value for a range of source IP addresses |
| TrendMicro.FirewallRules.sourceIPMultiple | array | List of source IP addresses |
| TrendMicro.FirewallRules.sourceIPListID | integer | ID of source IP list |
| TrendMicro.FirewallRules.sourceIPNot | boolean | Controls if the source IP setting should be inverted |
| TrendMicro.FirewallRules.sourceMACType | string | Source MAC type |
| TrendMicro.FirewallRules.sourceMACValue | string | Source MAC address |
| TrendMicro.FirewallRules.sourceMACMultiple | array | List of MAC addresses |
| TrendMicro.FirewallRules.sourceMACListID | integer | ID of MAC address list |
| TrendMicro.FirewallRules.sourceMACNot | boolean | Controls if the source MAC setting should be inverted |
| TrendMicro.FirewallRules.sourcePortType | string | The type of source port |
| TrendMicro.FirewallRules.sourcePortMultiple | array | List of comma-delimited source ports |
| TrendMicro.FirewallRules.sourcePortListID | integer | ID of source port list |
| TrendMicro.FirewallRules.sourcePortNot | boolean | Controls if the source port setting should be inverted |
| TrendMicro.FirewallRules.destinationIPType | string | Destination IP type |
| TrendMicro.FirewallRules.destinationIPValue | string | Destination IP |
| TrendMicro.FirewallRules.destinationIPMask | string | Destination IP mask |
| TrendMicro.FirewallRules.destinationIPRangeFrom | string | The first value for a range of destination IP addresses |
| TrendMicro.FirewallRules.destinationIPRangeTo | string | The last value for a range of destination IP addresses |
| TrendMicro.FirewallRules.destinationIPMultiple | array | List of comma-delimited destination IP addresses |
| TrendMicro.FirewallRules.destinationIPListID | integer | ID of destination IP list |
| TrendMicro.FirewallRules.destinationIPNot | boolean | Controls if the destination IP setting should be inverted |
| TrendMicro.FirewallRules.destinationMACType | string | Destination MAC type |
| TrendMicro.FirewallRules.destinationMACValue | string | Destination MAC address |
| TrendMicro.FirewallRules.destinationMACMultiple | array | List of comma-delimited MAC addresses |
| TrendMicro.FirewallRules.destinationMACListID | integer | ID of MAC address list |
| TrendMicro.FirewallRules.destinationMACNot | boolean | Controls if the destination MAC setting should be inverted |
| TrendMicro.FirewallRules.destinationPortType | string | The type of destination port |
| TrendMicro.FirewallRules.destinationPortMultiple | array | List of comma-delimited destination ports |
| TrendMicro.FirewallRules.destinationPortListID | integer | ID of destination port list |
| TrendMicro.FirewallRules.destinationPortNot | boolean | Controls if the destination port setting should be inverted |
| TrendMicro.FirewallRules.anyFlags | boolean | True if any flags are used |
| TrendMicro.FirewallRules.logDisabled | boolean | Controls if logging for this filter is disabled |
| TrendMicro.FirewallRules.includePacketData | boolean | Controls if this filter should capture data for every log |
| TrendMicro.FirewallRules.alertEnabled | boolean | Controls if this filter should be alerted on |
| TrendMicro.FirewallRules.scheduleID | integer | ID of the schedule to control when this filter is “on” |
| TrendMicro.FirewallRules.contextID | integer | RuleContext that is applied to this filter |
| TrendMicro.FirewallRules.tcpflags | array | TCP flags |
| TrendMicro.FirewallRules.TCPNot | boolean | Whther the TCP settings are inverted or not |
| TrendMicro.FirewallRules.ICMPType | integer | ICMP type |
| TrendMicro.FirewallRules.ICMPCode | integer | ICMP code |
| TrendMicro.FirewallRules.ICMPNot | boolean | Whther the ICMP settings are inverted or not |
Command Example
#### Context Example
```json
{
"TrendMicro": {
"FirewallRules": [
{
"ID": 1,
"action": "force-allow",
"alertEnabled": false,
"anyFlags": true,
"contextID": 3,
"description": "",
"destinationIPListID": 4,
"destinationIPNot": false,
"destinationIPType": "ip-list",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortListID": 8,
"destinationPortNot": false,
"destinationPortType": "port-list",
"direction": "outgoing",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Off Domain Exceptions - Domain Client (UDP)",
"priority": "2",
"protocol": "udp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 2,
"action": "force-allow",
"alertEnabled": false,
"anyFlags": true,
"contextID": 3,
"description": "",
"destinationIPListID": 7,
"destinationIPNot": false,
"destinationIPType": "ip-list",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortNot": false,
"destinationPortType": "any",
"direction": "outgoing",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Off Domain Exceptions - GRE",
"priority": "2",
"protocol": "other",
"protocolNot": false,
"protocolNumber": 47,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 3,
"action": "force-allow",
"alertEnabled": false,
"anyFlags": true,
"contextID": 3,
"description": "",
"destinationIPListID": 5,
"destinationIPNot": false,
"destinationIPType": "ip-list",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortListID": 77,
"destinationPortNot": false,
"destinationPortType": "port-list",
"direction": "outgoing",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Off Domain Exceptions - HTTP(S)",
"priority": "2",
"protocol": "tcp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 4,
"action": "force-allow",
"alertEnabled": false,
"anyFlags": true,
"contextID": 3,
"description": "",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortNot": false,
"destinationPortType": "any",
"direction": "outgoing",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Off Domain Exceptions - ICMP Echo Request",
"priority": "2",
"protocol": "icmp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 5,
"action": "force-allow",
"alertEnabled": false,
"anyFlags": true,
"contextID": 3,
"description": "",
"destinationIPListID": 7,
"destinationIPNot": false,
"destinationIPType": "ip-list",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortNot": false,
"destinationPortType": "any",
"direction": "outgoing",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Off Domain Exceptions - IPSec Encryption",
"priority": "2",
"protocol": "other",
"protocolNot": false,
"protocolNumber": 50,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 6,
"action": "force-allow",
"alertEnabled": false,
"anyFlags": true,
"contextID": 3,
"description": "",
"destinationIPListID": 7,
"destinationIPNot": false,
"destinationIPType": "ip-list",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortListID": 10,
"destinationPortNot": false,
"destinationPortType": "port-list",
"direction": "outgoing",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Off Domain Exceptions - VPN Tunnel",
"priority": "2",
"protocol": "tcp-udp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 7,
"action": "force-allow",
"alertEnabled": false,
"anyFlags": true,
"contextID": 3,
"description": "",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortNot": false,
"destinationPortType": "any",
"direction": "outgoing",
"frameNot": false,
"frameNumber": 34958,
"frameType": "other",
"includePacketData": false,
"logDisabled": false,
"name": "Off Domain Exceptions - Wireless Authentication",
"priority": "2",
"protocol": "any",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 8,
"action": "force-allow",
"alertEnabled": false,
"anyFlags": true,
"contextID": 2,
"description": "",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortNot": false,
"destinationPortType": "any",
"direction": "outgoing",
"frameNot": false,
"frameNumber": 2054,
"frameType": "arp",
"includePacketData": false,
"logDisabled": false,
"name": "Remote Domain Exceptions - ARP",
"priority": "2",
"protocol": "any",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 9,
"action": "force-allow",
"alertEnabled": false,
"anyFlags": true,
"contextID": 2,
"description": "",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortListID": 92,
"destinationPortNot": false,
"destinationPortType": "port-list",
"direction": "outgoing",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Remote Domain Exceptions - DNS",
"priority": "2",
"protocol": "tcp-udp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 10,
"action": "force-allow",
"alertEnabled": false,
"anyFlags": true,
"contextID": 2,
"description": "",
"destinationIPListID": 7,
"destinationIPNot": false,
"destinationIPType": "ip-list",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortNot": false,
"destinationPortType": "any",
"direction": "outgoing",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Remote Domain Exceptions - GRE",
"priority": "2",
"protocol": "other",
"protocolNot": false,
"protocolNumber": 47,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 11,
"action": "force-allow",
"alertEnabled": false,
"anyFlags": true,
"contextID": 2,
"description": "",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortNot": false,
"destinationPortType": "any",
"direction": "outgoing",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Remote Domain Exceptions - ICMP Echo Request",
"priority": "2",
"protocol": "icmp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 12,
"action": "force-allow",
"alertEnabled": false,
"anyFlags": true,
"contextID": 2,
"description": "",
"destinationIPListID": 7,
"destinationIPNot": false,
"destinationIPType": "ip-list",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortNot": false,
"destinationPortType": "any",
"direction": "outgoing",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Remote Domain Exceptions - IPSec Encryption",
"priority": "2",
"protocol": "other",
"protocolNot": false,
"protocolNumber": 50,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 13,
"action": "force-allow",
"alertEnabled": false,
"anyFlags": true,
"contextID": 2,
"description": "",
"destinationIPListID": 7,
"destinationIPNot": false,
"destinationIPType": "ip-list",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortListID": 10,
"destinationPortNot": false,
"destinationPortType": "port-list",
"direction": "outgoing",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Remote Domain Exceptions - VPN Tunnel",
"priority": "2",
"protocol": "tcp-udp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 14,
"action": "force-allow",
"alertEnabled": false,
"anyFlags": true,
"contextID": 1,
"description": "",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortNot": false,
"destinationPortType": "any",
"direction": "outgoing",
"frameNot": false,
"frameNumber": 2054,
"frameType": "arp",
"includePacketData": false,
"logDisabled": false,
"name": "Restricted Interface Exceptions - ARP Outgoing",
"priority": "2",
"protocol": "any",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 15,
"action": "force-allow",
"alertEnabled": false,
"anyFlags": true,
"contextID": 1,
"description": "",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortNot": false,
"destinationPortType": "any",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Restricted Interface Exceptions - DHCP Client Incoming",
"priority": "2",
"protocol": "udp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortListID": 78,
"sourcePortNot": false,
"sourcePortType": "port-list"
},
{
"ID": 16,
"action": "force-allow",
"alertEnabled": false,
"anyFlags": true,
"contextID": 1,
"description": "",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortNot": false,
"destinationPortType": "any",
"direction": "outgoing",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Restricted Interface Exceptions - DHCP Client Outgoing",
"priority": "2",
"protocol": "udp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortListID": 79,
"sourcePortNot": false,
"sourcePortType": "port-list"
},
{
"ID": 17,
"action": "force-allow",
"alertEnabled": false,
"anyFlags": true,
"contextID": 1,
"description": "",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortNot": false,
"destinationPortType": "any",
"direction": "incoming",
"frameNot": false,
"frameNumber": 34958,
"frameType": "other",
"includePacketData": false,
"logDisabled": false,
"name": "Restricted Interface Exceptions - Wireless Authentication Incoming",
"priority": "2",
"protocol": "any",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 18,
"action": "force-allow",
"alertEnabled": false,
"anyFlags": true,
"contextID": 1,
"description": "",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortNot": false,
"destinationPortType": "any",
"direction": "outgoing",
"frameNot": false,
"frameNumber": 34958,
"frameType": "other",
"includePacketData": false,
"logDisabled": false,
"name": "Restricted Interface Exceptions - Wireless Authentication Outgoing",
"priority": "2",
"protocol": "any",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 19,
"action": "force-allow",
"alertEnabled": false,
"anyFlags": true,
"contextID": 1,
"description": "",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortListID": 90,
"destinationPortNot": false,
"destinationPortType": "port-list",
"direction": "outgoing",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Restricted Interface Exceptions - Netbios Name Service Outgoing",
"priority": "2",
"protocol": "udp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortListID": 90,
"sourcePortNot": false,
"sourcePortType": "port-list"
},
{
"ID": 20,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "Allow incoming traffic to Deep Security Agent",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortListID": 11,
"destinationPortNot": false,
"destinationPortType": "port-list",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Deep Security Agent",
"priority": "0",
"protocol": "tcp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 21,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "Allow incoming traffic to VMware vCenter Server",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortListID": 12,
"destinationPortNot": false,
"destinationPortType": "port-list",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "VMware vCenter Server",
"priority": "0",
"protocol": "tcp-udp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 22,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortNot": false,
"destinationPortType": "any",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Allow Deep Security as a Service inbound communications",
"priority": "0",
"protocol": "tcp",
"protocolNot": false,
"sourceIPMask": "255.255.255.0",
"sourceIPNot": false,
"sourceIPType": "masked-ip",
"sourceIPValue": "1.1.1.1",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortMultiple": [
"4118"
],
"sourcePortNot": false,
"sourcePortType": "multiple"
},
{
"ICMPCode": 4,
"ICMPNot": false,
"ICMPType": 3,
"ID": 23,
"action": "force-allow",
"alertEnabled": false,
"anyFlags": false,
"description": "This ICMP packet is used for MTU path negotiation",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortNot": false,
"destinationPortType": "any",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Allow ICMP type 3 code 4",
"priority": "4",
"protocol": "icmp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 24,
"TCPNot": true,
"action": "allow",
"alertEnabled": false,
"anyFlags": false,
"description": "UDP stateful and TCP stateful must be enabled",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortNot": false,
"destinationPortType": "any",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Allow solicited TCP/UDP replies",
"priority": "0",
"protocol": "tcp-udp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any",
"tcpflags": [
"syn"
]
},
{
"ID": 25,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "ICMP stateful must be enabled",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortNot": false,
"destinationPortType": "any",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Allow solicited ICMP replies",
"priority": "0",
"protocol": "icmp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 26,
"action": "force-allow",
"alertEnabled": false,
"anyFlags": true,
"description": "Allow DHCP Offer traffic to a DHCP Client",
"destinationIPListID": 2,
"destinationIPNot": false,
"destinationIPType": "ip-list",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortListID": 79,
"destinationPortNot": false,
"destinationPortType": "port-list",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "DHCP Client",
"priority": "2",
"protocol": "udp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortListID": 78,
"sourcePortNot": false,
"sourcePortType": "port-list"
},
{
"ID": 27,
"action": "deny",
"alertEnabled": false,
"anyFlags": true,
"description": "Ingress filter to deny incoming spoofed packets",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortNot": false,
"destinationPortType": "any",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Deny Internal IP Ranges",
"priority": "4",
"protocol": "any",
"protocolNot": false,
"sourceIPListID": 3,
"sourceIPNot": false,
"sourceIPType": "ip-list",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 28,
"action": "force-allow",
"alertEnabled": false,
"anyFlags": true,
"description": "Allow incoming ARP traffic",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortNot": false,
"destinationPortType": "any",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2054,
"frameType": "arp",
"includePacketData": false,
"logDisabled": false,
"name": "ARP",
"priority": "0",
"protocol": "any",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 29,
"action": "force-allow",
"alertEnabled": false,
"anyFlags": true,
"description": "For hosts that rely on NetBios for name resolution",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortListID": 90,
"destinationPortNot": false,
"destinationPortType": "port-list",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "NetBios Name Service",
"priority": "2",
"protocol": "udp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortListID": 90,
"sourcePortNot": false,
"sourcePortType": "port-list"
},
{
"ID": 30,
"action": "force-allow",
"alertEnabled": false,
"anyFlags": true,
"description": "Allow incoming DHCP requests to a DHCP server",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortListID": 78,
"destinationPortNot": false,
"destinationPortType": "port-list",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "DHCP Server",
"priority": "2",
"protocol": "udp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortListID": 79,
"sourcePortNot": false,
"sourcePortType": "port-list"
},
{
"ID": 31,
"action": "force-allow",
"alertEnabled": false,
"anyFlags": true,
"description": "Allow wireless authentication traffic",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortNot": false,
"destinationPortType": "any",
"direction": "incoming",
"frameNot": false,
"frameNumber": 34958,
"frameType": "other",
"includePacketData": false,
"logDisabled": false,
"name": "Wireless Authentication",
"priority": "2",
"protocol": "any",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 32,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "Allow incoming traffic to an FTP Server",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortListID": 81,
"destinationPortNot": false,
"destinationPortType": "port-list",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "FTP Server",
"priority": "0",
"protocol": "tcp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 33,
"action": "force-allow",
"alertEnabled": false,
"anyFlags": true,
"description": "Allow incoming TCP traffic to a Microsoft SQL server",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortListID": 108,
"destinationPortNot": false,
"destinationPortType": "port-list",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Microsoft SQL Server",
"priority": "2",
"protocol": "tcp-udp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 34,
"action": "force-allow",
"alertEnabled": false,
"anyFlags": true,
"description": "Allow incoming traffic to an Oracle SQL server",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortListID": 107,
"destinationPortNot": false,
"destinationPortType": "port-list",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Oracle SQL Server",
"priority": "2",
"protocol": "tcp-udp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 35,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "Allow incoming traffic to Deep Security Manager",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortListID": 82,
"destinationPortNot": false,
"destinationPortType": "port-list",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Deep Security Manager",
"priority": "0",
"protocol": "tcp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 36,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "Allow incoming traffic to an Microsoft Exchange Server",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortListID": 83,
"destinationPortNot": false,
"destinationPortType": "port-list",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Microsoft Exchange Server",
"priority": "0",
"protocol": "tcp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 37,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortListID": 85,
"destinationPortNot": false,
"destinationPortType": "port-list",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "IPSec IKE",
"priority": "0",
"protocol": "udp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 38,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortNot": false,
"destinationPortType": "any",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "IPSec Encryption",
"priority": "0",
"protocol": "other",
"protocolNot": false,
"protocolNumber": 50,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 39,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortNot": false,
"destinationPortType": "any",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "IPSec Authentication",
"priority": "0",
"protocol": "other",
"protocolNot": false,
"protocolNumber": 51,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 40,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "Allow incoming traffic to a Domain Controller",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortListID": 86,
"destinationPortNot": false,
"destinationPortType": "port-list",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Domain Controller (TCP)",
"priority": "0",
"protocol": "tcp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 41,
"action": "force-allow",
"alertEnabled": false,
"anyFlags": true,
"description": "Allow incoming traffic to a Domain Controller",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortListID": 87,
"destinationPortNot": false,
"destinationPortType": "port-list",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Domain Controller (UDP)",
"priority": "2",
"protocol": "udp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 42,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "Allow incoming TCP traffic to a Web Server",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortListID": 77,
"destinationPortNot": false,
"destinationPortType": "port-list",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Web Server",
"priority": "0",
"protocol": "tcp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 43,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "Allow remote access to machines",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortListID": 111,
"destinationPortNot": false,
"destinationPortType": "port-list",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Remote Access SSH",
"priority": "0",
"protocol": "tcp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 44,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "Allow incoming traffic from the domain controller",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortNot": false,
"destinationPortType": "any",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Domain Client (TCP)",
"priority": "0",
"protocol": "tcp",
"protocolNot": false,
"sourceIPListID": 4,
"sourceIPNot": false,
"sourceIPType": "ip-list",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortListID": 88,
"sourcePortNot": false,
"sourcePortType": "port-list"
},
{
"ID": 45,
"action": "force-allow",
"alertEnabled": false,
"anyFlags": true,
"description": "Allow incoming traffic from the domain controller",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortNot": false,
"destinationPortType": "any",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Domain Client (UDP)",
"priority": "2",
"protocol": "udp",
"protocolNot": false,
"sourceIPListID": 4,
"sourceIPNot": false,
"sourceIPType": "ip-list",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortListID": 89,
"sourcePortNot": false,
"sourcePortType": "port-list"
},
{
"ID": 46,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "Allow incoming TCP traffic to an SMTP Server",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortListID": 103,
"destinationPortNot": false,
"destinationPortType": "port-list",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "SMTP Server",
"priority": "0",
"protocol": "tcp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 47,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortListID": 110,
"destinationPortNot": false,
"destinationPortType": "port-list",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "IDENT",
"priority": "0",
"protocol": "tcp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 48,
"action": "force-allow",
"alertEnabled": false,
"anyFlags": true,
"description": "Allow incoming DNS requests to a DNS server",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortListID": 92,
"destinationPortNot": false,
"destinationPortType": "port-list",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "DNS Server",
"priority": "2",
"protocol": "tcp-udp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ICMPCode": 0,
"ICMPNot": false,
"ICMPType": 8,
"ID": 49,
"action": "force-allow",
"alertEnabled": false,
"anyFlags": false,
"description": "Allow incoming Ping requests",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortNot": false,
"destinationPortType": "any",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "ICMP Echo Request",
"priority": "2",
"protocol": "icmp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 50,
"action": "force-allow",
"alertEnabled": false,
"anyFlags": true,
"description": "Allow Network Time Protocol traffic",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortListID": 109,
"destinationPortNot": false,
"destinationPortType": "port-list",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Network Time Protocol",
"priority": "2",
"protocol": "udp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 51,
"action": "force-allow",
"alertEnabled": false,
"anyFlags": true,
"description": "Allow file sharing traffic",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortListID": 93,
"destinationPortNot": false,
"destinationPortType": "port-list",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Windows File Sharing",
"priority": "2",
"protocol": "tcp-udp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 52,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "Allow remote access to machines",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortListID": 76,
"destinationPortNot": false,
"destinationPortType": "port-list",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Remote Access RDP",
"priority": "0",
"protocol": "tcp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 53,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortListID": 98,
"destinationPortNot": false,
"destinationPortType": "port-list",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "POP3 Server",
"priority": "0",
"protocol": "tcp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 54,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortListID": 105,
"destinationPortNot": false,
"destinationPortType": "port-list",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "IMAP Server",
"priority": "0",
"protocol": "tcp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 55,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortListID": 101,
"destinationPortNot": false,
"destinationPortType": "port-list",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Computer Associates Unicenter",
"priority": "0",
"protocol": "tcp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 56,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortListID": 97,
"destinationPortNot": false,
"destinationPortType": "port-list",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Veritas",
"priority": "0",
"protocol": "tcp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 57,
"action": "force-allow",
"alertEnabled": false,
"anyFlags": true,
"description": "",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortListID": 106,
"destinationPortNot": false,
"destinationPortType": "port-list",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "MySQL Server",
"priority": "2",
"protocol": "tcp-udp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 58,
"action": "force-allow",
"alertEnabled": false,
"anyFlags": true,
"description": "",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortListID": 99,
"destinationPortNot": false,
"destinationPortType": "port-list",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "WINS",
"priority": "2",
"protocol": "tcp-udp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 59,
"action": "force-allow",
"alertEnabled": false,
"anyFlags": true,
"description": "",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortListID": 104,
"destinationPortNot": false,
"destinationPortType": "port-list",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "WINS Registration",
"priority": "2",
"protocol": "tcp-udp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 60,
"action": "force-allow",
"alertEnabled": false,
"anyFlags": true,
"description": "",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortListID": 100,
"destinationPortNot": false,
"destinationPortType": "port-list",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "WINS Replication",
"priority": "2",
"protocol": "tcp-udp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 61,
"action": "force-allow",
"alertEnabled": false,
"anyFlags": true,
"contextID": 1,
"description": "",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortListID": 90,
"destinationPortNot": false,
"destinationPortType": "port-list",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Restricted Interface Exceptions - Netbios Name Service Incoming",
"priority": "2",
"protocol": "udp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortListID": 90,
"sourcePortNot": false,
"sourcePortType": "port-list"
},
{
"ID": 62,
"action": "force-allow",
"alertEnabled": false,
"anyFlags": true,
"contextID": 1,
"description": "",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortNot": false,
"destinationPortType": "any",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2054,
"frameType": "arp",
"includePacketData": false,
"logDisabled": false,
"name": "Restricted Interface Exceptions - ARP Incoming",
"priority": "2",
"protocol": "any",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 63,
"action": "deny",
"alertEnabled": false,
"anyFlags": true,
"contextID": 1,
"description": "Log packets blocked due to Restricted Interface Enforcement policy",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortNot": false,
"destinationPortType": "any",
"direction": "outgoing",
"frameNot": false,
"frameNumber": 0,
"frameType": "any",
"includePacketData": false,
"logDisabled": false,
"name": "Restricted Interface Enforcement",
"priority": "0",
"protocol": "any",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 64,
"action": "force-allow",
"alertEnabled": false,
"anyFlags": true,
"contextID": 3,
"description": "",
"destinationIPListID": 4,
"destinationIPNot": false,
"destinationIPType": "ip-list",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortListID": 8,
"destinationPortNot": false,
"destinationPortType": "port-list",
"direction": "outgoing",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Off Domain Exceptions - Domain Client (TCP)",
"priority": "2",
"protocol": "tcp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 65,
"action": "force-allow",
"alertEnabled": false,
"anyFlags": true,
"contextID": 3,
"description": "",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortNot": false,
"destinationPortType": "any",
"direction": "outgoing",
"frameNot": false,
"frameNumber": 2054,
"frameType": "arp",
"includePacketData": false,
"logDisabled": false,
"name": "Off Domain Exceptions - ARP",
"priority": "2",
"protocol": "any",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 66,
"action": "force-allow",
"alertEnabled": false,
"anyFlags": true,
"contextID": 3,
"description": "",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortListID": 92,
"destinationPortNot": false,
"destinationPortType": "port-list",
"direction": "outgoing",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Off Domain Exceptions - DNS",
"priority": "2",
"protocol": "tcp-udp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 67,
"action": "force-allow",
"alertEnabled": false,
"anyFlags": true,
"contextID": 2,
"description": "When remotely connected to domain only corporate traffic is allowed",
"destinationIPListID": 6,
"destinationIPNot": false,
"destinationIPType": "ip-list",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortNot": false,
"destinationPortType": "any",
"direction": "outgoing",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Remote Domain Exceptions",
"priority": "2",
"protocol": "tcp-udp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 68,
"action": "deny",
"alertEnabled": false,
"anyFlags": true,
"contextID": 2,
"description": "Log packets blocked due to Remote Domain Enforcement policy",
"destinationIPListID": 7,
"destinationIPNot": true,
"destinationIPType": "ip-list",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortNot": false,
"destinationPortType": "any",
"direction": "outgoing",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Remote Domain Enforcement (Split Tunnel)",
"priority": "0",
"protocol": "tcp-udp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 69,
"action": "deny",
"alertEnabled": false,
"anyFlags": true,
"contextID": 3,
"description": "Log packets blocked due to Off Domain Enforcement policy",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortNot": false,
"destinationPortType": "any",
"direction": "outgoing",
"frameNot": false,
"frameNumber": 0,
"frameType": "any",
"includePacketData": false,
"logDisabled": false,
"name": "Off Domain Enforcement",
"priority": "0",
"protocol": "any",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 70,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortNot": false,
"destinationPortType": "any",
"direction": "incoming",
"frameNot": false,
"frameNumber": 34915,
"frameType": "other",
"includePacketData": false,
"logDisabled": false,
"name": "Allow PPPOE Discovery",
"priority": "0",
"protocol": "any",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 71,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortNot": false,
"destinationPortType": "any",
"direction": "incoming",
"frameNot": false,
"frameNumber": 34916,
"frameType": "other",
"includePacketData": false,
"logDisabled": false,
"name": "Allow PPPOE Session",
"priority": "0",
"protocol": "any",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 72,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortNot": false,
"destinationPortType": "any",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Generic Routing Encapsulation",
"priority": "0",
"protocol": "other",
"protocolNot": false,
"protocolNumber": 47,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 73,
"action": "force-allow",
"alertEnabled": false,
"anyFlags": true,
"contextID": 3,
"description": "",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortNot": false,
"destinationPortType": "any",
"direction": "outgoing",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Off Domain Exceptions - DHCP Client",
"priority": "2",
"protocol": "udp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortListID": 79,
"sourcePortNot": false,
"sourcePortType": "port-list"
},
{
"ID": 75,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortNot": false,
"destinationPortType": "any",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "poc_rule",
"priority": "0",
"protocol": "tcp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "single",
"sourceIPValue": "1.2.3.4",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 76,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortNot": false,
"destinationPortType": "any",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "poc_rule1",
"priority": "0",
"protocol": "tcp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "single",
"sourceIPValue": "1.2.3.4",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 77,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortNot": false,
"destinationPortType": "any",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "poc_rule2",
"priority": "0",
"protocol": "tcp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "single",
"sourceIPValue": "1.2.3.4",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 133,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortNot": false,
"destinationPortType": "any",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "None",
"priority": "0",
"protocol": "any",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 166,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortNot": false,
"destinationPortType": "any",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "UDP",
"priority": "0",
"protocol": "udp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
},
{
"ID": 174,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortNot": false,
"destinationPortType": "any",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Example Rule",
"priority": "0",
"protocol": "udp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
}
]
}
}
Human Readable Output
Firewall Rules
ID Name Description Direction Action 1 Off Domain Exceptions - Domain Client (UDP) outgoing force-allow 2 Off Domain Exceptions - GRE outgoing force-allow 3 Off Domain Exceptions - HTTP(S) outgoing force-allow 4 Off Domain Exceptions - ICMP Echo Request outgoing force-allow 5 Off Domain Exceptions - IPSec Encryption outgoing force-allow 6 Off Domain Exceptions - VPN Tunnel outgoing force-allow 7 Off Domain Exceptions - Wireless Authentication outgoing force-allow 8 Remote Domain Exceptions - ARP outgoing force-allow 9 Remote Domain Exceptions - DNS outgoing force-allow 10 Remote Domain Exceptions - GRE outgoing force-allow 11 Remote Domain Exceptions - ICMP Echo Request outgoing force-allow 12 Remote Domain Exceptions - IPSec Encryption outgoing force-allow 13 Remote Domain Exceptions - VPN Tunnel outgoing force-allow 14 Restricted Interface Exceptions - ARP Outgoing outgoing force-allow 15 Restricted Interface Exceptions - DHCP Client Incoming incoming force-allow 16 Restricted Interface Exceptions - DHCP Client Outgoing outgoing force-allow 17 Restricted Interface Exceptions - Wireless Authentication Incoming incoming force-allow 18 Restricted Interface Exceptions - Wireless Authentication Outgoing outgoing force-allow 19 Restricted Interface Exceptions - Netbios Name Service Outgoing outgoing force-allow 20 Deep Security Agent Allow incoming traffic to Deep Security Agent incoming allow 21 VMware vCenter Server Allow incoming traffic to VMware vCenter Server incoming allow 22 Allow Deep Security as a Service inbound communications incoming allow 23 Allow ICMP type 3 code 4 This ICMP packet is used for MTU path negotiation incoming force-allow 24 Allow solicited TCP/UDP replies UDP stateful and TCP stateful must be enabled incoming allow 25 Allow solicited ICMP replies ICMP stateful must be enabled incoming allow 26 DHCP Client Allow DHCP Offer traffic to a DHCP Client incoming force-allow 27 Deny Internal IP Ranges Ingress filter to deny incoming spoofed packets incoming deny 28 ARP Allow incoming ARP traffic incoming force-allow 29 NetBios Name Service For hosts that rely on NetBios for name resolution incoming force-allow 30 DHCP Server Allow incoming DHCP requests to a DHCP server incoming force-allow 31 Wireless Authentication Allow wireless authentication traffic incoming force-allow 32 FTP Server Allow incoming traffic to an FTP Server incoming allow 33 Microsoft SQL Server Allow incoming TCP traffic to a Microsoft SQL server incoming force-allow 34 Oracle SQL Server Allow incoming traffic to an Oracle SQL server incoming force-allow 35 Deep Security Manager Allow incoming traffic to Deep Security Manager incoming allow 36 Microsoft Exchange Server Allow incoming traffic to an Microsoft Exchange Server incoming allow 37 IPSec IKE incoming allow 38 IPSec Encryption incoming allow 39 IPSec Authentication incoming allow 40 Domain Controller (TCP) Allow incoming traffic to a Domain Controller incoming allow 41 Domain Controller (UDP) Allow incoming traffic to a Domain Controller incoming force-allow 42 Web Server Allow incoming TCP traffic to a Web Server incoming allow 43 Remote Access SSH Allow remote access to machines incoming allow 44 Domain Client (TCP) Allow incoming traffic from the domain controller incoming allow 45 Domain Client (UDP) Allow incoming traffic from the domain controller incoming force-allow 46 SMTP Server Allow incoming TCP traffic to an SMTP Server incoming allow 47 IDENT incoming allow 48 DNS Server Allow incoming DNS requests to a DNS server incoming force-allow 49 ICMP Echo Request Allow incoming Ping requests incoming force-allow 50 Network Time Protocol Allow Network Time Protocol traffic incoming force-allow 51 Windows File Sharing Allow file sharing traffic incoming force-allow 52 Remote Access RDP Allow remote access to machines incoming allow 53 POP3 Server incoming allow 54 IMAP Server incoming allow 55 Computer Associates Unicenter incoming allow 56 Veritas incoming allow 57 MySQL Server incoming force-allow 58 WINS incoming force-allow 59 WINS Registration incoming force-allow 60 WINS Replication incoming force-allow 61 Restricted Interface Exceptions - Netbios Name Service Incoming incoming force-allow 62 Restricted Interface Exceptions - ARP Incoming incoming force-allow 63 Restricted Interface Enforcement Log packets blocked due to Restricted Interface Enforcement policy outgoing deny 64 Off Domain Exceptions - Domain Client (TCP) outgoing force-allow 65 Off Domain Exceptions - ARP outgoing force-allow 66 Off Domain Exceptions - DNS outgoing force-allow 67 Remote Domain Exceptions When remotely connected to domain only corporate traffic is allowed outgoing force-allow 68 Remote Domain Enforcement (Split Tunnel) Log packets blocked due to Remote Domain Enforcement policy outgoing deny 69 Off Domain Enforcement Log packets blocked due to Off Domain Enforcement policy outgoing deny 70 Allow PPPOE Discovery incoming allow 71 Allow PPPOE Session incoming allow 72 Generic Routing Encapsulation incoming allow 73 Off Domain Exceptions - DHCP Client outgoing force-allow 75 poc_rule incoming allow 76 poc_rule1 incoming allow 77 poc_rule2 incoming allow 133 None incoming allow 166 UDP incoming allow 174 Example Rule incoming allow
trendmicro-create-firewall-rule
Create a new firewall rule
Base Command
trendmicro-create-firewall-rule
Input
| Argument Name | Description | Required |
|---|---|---|
| name | Name of the firewall rule. | Required |
| description | Description of the firewall rule. | Optional |
| action | Action of the packet filter. Possible values are: log-only, allow, deny, force-allow, bypass. | Required |
| priority | Priority of the packet filter. Possible values are: 0, 1, 2, 3, 4. | Optional |
| direction | Packet direction. Possible values are: incoming, outgoing. | Required |
| frame_type | Supported frame types. Possible values are: any, ip, arp, revarp, ipv4, ipv6, other. | Optional |
| frame_number | Ethernet frame number. | Optional |
| frame_not | Controls if the frame setting should be inverted. | Optional |
| protocol | Protocol. Possible values are: any, icmp, igmp, ggp, tcp, udp, pup, idp, nd, raw, tcp-udp, icmpv6, other. | Optional |
| protocol_number | Two-byte protocol number. | Optional |
| protocol_not | Controls if the protocol setting should be inverted. | Optional |
| source_ip_type | Source IP type. Possible values are: any, single, multiple, masked-ip, range, ip-list. | Optional |
| source_ip_value | Source IP. | Optional |
| source_ip_mask | Source IP mask. | Optional |
| source_ip_range_from | The first value for a range of source IP addresses. | Optional |
| source_ip_range_to | The last value for a range of source IP addresses. | Optional |
| source_ip_multiple | List of source IP addresses. | Optional |
| source_ip_list_id | ID of source IP list. | Optional |
| source_ip_not | Controls if the source IP setting should be inverted. | Optional |
| source_mac_type | Source MAC type. Possible values are: any, single, multiple, mac-list. | Optional |
| source_mac_value | Source MAC address. | Optional |
| source_mac_multiple | List of MAC addresses. | Optional |
| source_mac_list_id | ID of MAC address list. | Optional |
| source_mac_not | Controls if the source MAC setting should be inverted. | Optional |
| source_port_type | The type of source port. Possible values are: any, multiple, port-list. | Optional |
| source_port_multiple | List of comma-delimited source ports. | Optional |
| source_port_list_id | ID of source port list. | Optional |
| source_port_not | Controls if the source port setting should be inverted. | Optional |
| destination_ip_type | Destination IP type. Possible values are: any, single, multiple, range, masked-ip, ip-list. | Optional |
| destination_ip_value | Destination IP. | Optional |
| destination_ip_mask | Destination IP mask. | Optional |
| destination_ip_range_from | The first value for a range of destination IP addresses. | Optional |
| destination_ip_range_to | The last value for a range of destination IP addresses. | Optional |
| destination_ip_multiple | List of comma-delimited destination IP addresses. | Optional |
| destination_ip_list_id | ID of destination IP list. | Optional |
| destination_ip_not | Controls if the destination IP setting should be inverted. | Optional |
| destination_mac_type | Destination MAC type. Possible values are: any, single, multiple, mac-list. | Optional |
| destination_mac_value | Destination MAC address. | Optional |
| destination_mac_multiple | List of comma-delimited MAC addresses. | Optional |
| destination_mac_list_id | ID of MAC address list. | Optional |
| destination_mac_not | Controls if the destination MAC setting should be inverted. | Optional |
| destination_port_type | The type of destination port. Possible values are: any, multiple, port-list. | Optional |
| destination_port_multiple | List of comma-delimited destination ports. | Optional |
| destination_port_list_id | ID of destination port list. | Optional |
| destination_port_not | Controls if the destination port setting should be inverted. | Optional |
| any_flags | True if any flags are used. | Optional |
| log_disabled | Controls if logging for this filter is disabled. | Optional |
| include_packet_data | Controls if this filter should capture data for every log. | Optional |
| alert_enabled | Controls if this filter should be alerted on. | Optional |
| schedule_id | ID of the schedule to control when this filter is “on”. | Optional |
| context_id | RuleContext that is applied to this filter. | Optional |
| tcpflags | The TCP flags the rule should filter by. Possible values are: syn, ack, psh, urg, fin, rst. | Optional |
| tcp_not | Controls if the TCP settings should be inverted. | Optional |
| icmp_type | The ICMP type the rule should filter by. | Optional |
| icmp_code | The ICMP code the rule should filter by. | Optional |
| icmp_not | Controls if the ICMP settings should be inverted. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| TrendMicro.FirewallRules.name | string | Name of the firewall rule |
| TrendMicro.FirewallRules.description | string | Description of the firewall rule |
| TrendMicro.FirewallRules.action | string | Action of the packet filter |
| TrendMicro.FirewallRules.priority | string | Priority of the packet filter |
| TrendMicro.FirewallRules.direction | string | Packet direction |
| TrendMicro.FirewallRules.frameType | string | Supported frame types |
| TrendMicro.FirewallRules.frameNumber | integer | Ethernet frame number |
| TrendMicro.FirewallRules.frameNot | boolean | Controls if the frame setting should be inverted |
| TrendMicro.FirewallRules.protocol | string | Protocol |
| TrendMicro.FirewallRules.protocolNumber | integer | Two-byte protocol number |
| TrendMicro.FirewallRules.protocolNot | boolean | Controls if the protocol setting should be inverted |
| TrendMicro.FirewallRules.sourceIPType | string | Source IP type |
| TrendMicro.FirewallRules.sourceIPValue | string | Source IP |
| TrendMicro.FirewallRules.sourceIPMask | string | Source IP mask |
| TrendMicro.FirewallRules.sourceIPRangeFrom | string | The first value for a range of source IP addresses |
| TrendMicro.FirewallRules.sourceIPRangeTo | string | The last value for a range of source IP addresses |
| TrendMicro.FirewallRules.sourceIPMultiple | array | List of source IP addresses |
| TrendMicro.FirewallRules.sourceIPListID | integer | ID of source IP list |
| TrendMicro.FirewallRules.sourceIPNot | boolean | Controls if the source IP setting should be inverted |
| TrendMicro.FirewallRules.sourceMACType | string | Source MAC type |
| TrendMicro.FirewallRules.sourceMACValue | string | Source MAC address |
| TrendMicro.FirewallRules.sourceMACMultiple | array | List of MAC addresses |
| TrendMicro.FirewallRules.sourceMACListID | integer | ID of MAC address list |
| TrendMicro.FirewallRules.sourceMACNot | boolean | Controls if the source MAC setting should be inverted |
| TrendMicro.FirewallRules.sourcePortType | string | The type of source port |
| TrendMicro.FirewallRules.sourcePortMultiple | array | List of comma-delimited source ports |
| TrendMicro.FirewallRules.sourcePortListID | integer | ID of source port list |
| TrendMicro.FirewallRules.sourcePortNot | boolean | Controls if the source port setting should be inverted |
| TrendMicro.FirewallRules.destinationIPType | string | Destination IP type |
| TrendMicro.FirewallRules.destinationIPValue | string | Destination IP |
| TrendMicro.FirewallRules.destinationIPMask | string | Destination IP mask |
| TrendMicro.FirewallRules.destinationIPRangeFrom | string | The first value for a range of destination IP addresses |
| TrendMicro.FirewallRules.destinationIPRangeTo | string | The last value for a range of destination IP addresses |
| TrendMicro.FirewallRules.destinationIPMultiple | array | List of comma-delimited destination IP addresses |
| TrendMicro.FirewallRules.destinationIPListID | integer | ID of destination IP list |
| TrendMicro.FirewallRules.destinationIPNot | boolean | Controls if the destination IP setting should be inverted |
| TrendMicro.FirewallRules.destinationMACType | string | Destination MAC type |
| TrendMicro.FirewallRules.destinationMACValue | string | Destination MAC address |
| TrendMicro.FirewallRules.destinationMACMultiple | array | List of comma-delimited MAC addresses |
| TrendMicro.FirewallRules.destinationMACListID | integer | ID of MAC address list |
| TrendMicro.FirewallRules.destinationMACNot | boolean | Controls if the destination MAC setting should be inverted |
| TrendMicro.FirewallRules.destinationPortType | string | The type of destination port |
| TrendMicro.FirewallRules.destinationPortMultiple | array | List of comma-delimited destination ports |
| TrendMicro.FirewallRules.destinationPortListID | integer | ID of destination port list |
| TrendMicro.FirewallRules.destinationPortNot | boolean | Controls if the destination port setting should be inverted |
| TrendMicro.FirewallRules.anyFlags | boolean | True if any flags are used |
| TrendMicro.FirewallRules.logDisabled | boolean | Controls if logging for this filter is disabled |
| TrendMicro.FirewallRules.includePacketData | boolean | Controls if this filter should capture data for every log |
| TrendMicro.FirewallRules.alertEnabled | boolean | Controls if this filter should be alerted on |
| TrendMicro.FirewallRules.scheduleID | integer | ID of the schedule to control when this filter is “on” |
| TrendMicro.FirewallRules.contextID | integer | RuleContext that is applied to this filter |
| TrendMicro.FirewallRules.tcpflags | array | TCP flags |
| TrendMicro.FirewallRules.TCPNot | boolean | Whether the TCP settings are inverted |
| TrendMicro.FirewallRules.ICMPType | integer | ICMP type |
| TrendMicro.FirewallRules.ICMPCode | integer | ICMP code |
| TrendMicro.FirewallRules.ICMPNot | boolean | Whether the ICMP settings are inverted |
Command Example
!trendmicro-create-firewall-rule name="Example Rule" action=allow protocol=udp direction=incoming
Context Example
{
"TrendMicro": {
"FirewallRules": {
"ID": 175,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortNot": false,
"destinationPortType": "any",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Example Rule",
"priority": "0",
"protocol": "udp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
}
}
}
Human Readable Output
Firewall Rules
ID Name Direction Action 175 Example Rule incoming allow
trendmicro-get-firewall-rule
Get information about a certain firewall rule
Base Command
trendmicro-get-firewall-rule
Input
| Argument Name | Description | Required |
|---|---|---|
| firewall_rule_id | The ID number of the firewall rule to get. | Required |
Context Output
| Path | Type | Description |
|---|---|---|
| TrendMicro.FirewallRules.name | string | Name of the firewall rule |
| TrendMicro.FirewallRules.description | string | Description of the firewall rule |
| TrendMicro.FirewallRules.action | string | Action of the packet filter |
| TrendMicro.FirewallRules.priority | string | Priority of the packet filter |
| TrendMicro.FirewallRules.direction | string | Packet direction |
| TrendMicro.FirewallRules.frameType | string | Supported frame types |
| TrendMicro.FirewallRules.frameNumber | integer | Ethernet frame number |
| TrendMicro.FirewallRules.frameNot | boolean | Controls if the frame setting should be inverted |
| TrendMicro.FirewallRules.protocol | string | Protocol |
| TrendMicro.FirewallRules.protocolNumber | integer | Two-byte protocol number |
| TrendMicro.FirewallRules.protocolNot | boolean | Controls if the protocol setting should be inverted |
| TrendMicro.FirewallRules.sourceIPType | string | Source IP type |
| TrendMicro.FirewallRules.sourceIPValue | string | Source IP |
| TrendMicro.FirewallRules.sourceIPMask | string | Source IP mask |
| TrendMicro.FirewallRules.sourceIPRangeFrom | string | The first value for a range of source IP addresses |
| TrendMicro.FirewallRules.sourceIPRangeTo | string | The last value for a range of source IP addresses |
| TrendMicro.FirewallRules.sourceIPMultiple | array | List of source IP addresses |
| TrendMicro.FirewallRules.sourceIPListID | integer | ID of source IP list |
| TrendMicro.FirewallRules.sourceIPNot | boolean | Controls if the source IP setting should be inverted |
| TrendMicro.FirewallRules.sourceMACType | string | Source MAC type |
| TrendMicro.FirewallRules.sourceMACValue | string | Source MAC address |
| TrendMicro.FirewallRules.sourceMACMultiple | array | List of MAC addresses |
| TrendMicro.FirewallRules.sourceMACListID | integer | ID of MAC address list |
| TrendMicro.FirewallRules.sourceMACNot | boolean | Controls if the source MAC setting should be inverted |
| TrendMicro.FirewallRules.sourcePortType | string | The type of source port |
| TrendMicro.FirewallRules.sourcePortMultiple | array | List of comma-delimited source ports |
| TrendMicro.FirewallRules.sourcePortListID | integer | ID of source port list |
| TrendMicro.FirewallRules.sourcePortNot | boolean | Controls if the source port setting should be inverted |
| TrendMicro.FirewallRules.destinationIPType | string | Destination IP type |
| TrendMicro.FirewallRules.destinationIPValue | string | Destination IP |
| TrendMicro.FirewallRules.destinationIPMask | string | Destination IP mask |
| TrendMicro.FirewallRules.destinationIPRangeFrom | string | The first value for a range of destination IP addresses |
| TrendMicro.FirewallRules.destinationIPRangeTo | string | The last value for a range of destination IP addresses |
| TrendMicro.FirewallRules.destinationIPMultiple | array | List of comma-delimited destination IP addresses |
| TrendMicro.FirewallRules.destinationIPListID | integer | ID of destination IP list |
| TrendMicro.FirewallRules.destinationIPNot | boolean | Controls if the destination IP setting should be inverted |
| TrendMicro.FirewallRules.destinationMACType | string | Destination MAC type |
| TrendMicro.FirewallRules.destinationMACValue | string | Destination MAC address |
| TrendMicro.FirewallRules.destinationMACMultiple | array | List of comma-delimited MAC addresses |
| TrendMicro.FirewallRules.destinationMACListID | integer | ID of MAC address list |
| TrendMicro.FirewallRules.destinationMACNot | boolean | Controls if the destination MAC setting should be inverted |
| TrendMicro.FirewallRules.destinationPortType | string | The type of destination port |
| TrendMicro.FirewallRules.destinationPortMultiple | array | List of comma-delimited destination ports |
| TrendMicro.FirewallRules.destinationPortListID | integer | ID of destination port list |
| TrendMicro.FirewallRules.destinationPortNot | boolean | Controls if the destination port setting should be inverted |
| TrendMicro.FirewallRules.anyFlags | boolean | True if any flags are used |
| TrendMicro.FirewallRules.logDisabled | boolean | Controls if logging for this filter is disabled |
| TrendMicro.FirewallRules.includePacketData | boolean | Controls if this filter should capture data for every log |
| TrendMicro.FirewallRules.alertEnabled | boolean | Controls if this filter should be alerted on |
| TrendMicro.FirewallRules.scheduleID | integer | ID of the schedule to control when this filter is “on” |
| TrendMicro.FirewallRules.contextID | integer | RuleContext that is applied to this filter |
| TrendMicro.FirewallRules.tcpflags | array | TCP flags |
| TrendMicro.FirewallRules.TCPNot | boolean | Whether the TCP settings are inverted or not |
| TrendMicro.FirewallRules.ICMPType | integer | ICMP type |
| TrendMicro.FirewallRules.ICMPCode | integer | ICMP code |
| TrendMicro.FirewallRules.ICMPNot | boolean | Whether the ICMP settings are inverted or not |
Command Example
!trendmicro-get-firewall-rule firewall_rule_id=174
Context Example
{
"TrendMicro": {
"FirewallRules": {
"ID": 174,
"action": "allow",
"alertEnabled": false,
"anyFlags": true,
"description": "",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortNot": false,
"destinationPortType": "any",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Example Rule",
"priority": "0",
"protocol": "udp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
}
}
}
Human Readable Output
Details of The Firewall Rule 174
ID Name Direction Action 174 Example Rule incoming allow
trendmicro-modify-firewall-rule
Modify the properties of a certain firewall rule
Base Command
trendmicro-modify-firewall-rule
Input
| Argument Name | Description | Required |
|---|---|---|
| firewall_rule_id | The ID number of the firewall rule to modify. | Required |
| name | Name of the firewall rule. | Optional |
| description | Description of the firewall rule. | Optional |
| action | Action of the packet filter. Possible values are: log-only, allow, deny, force-allow, bypass. | Optional |
| priority | Priority of the packet filter. Possible values are: 0, 1, 2, 3, 4. | Optional |
| direction | Packet direction. Possible values are: incoming, outgoing. | Optional |
| frame_type | Supported frame types. Possible values are: any, ip, arp, revarp, ipv4, ipv6, other. | Optional |
| frame_number | Ethernet frame number. | Optional |
| frame_not | Controls if the frame setting should be inverted. | Optional |
| protocol | Protocol. Possible values are: any, icmp, igmp, ggp, tcp, pup, udp, idp, nd, raw, tcp-udp, icmpv6, other. | Optional |
| protocol_number | Two-byte protocol number. | Optional |
| protocol_not | Controls if the protocol setting should be inverted. | Optional |
| source_ip_type | Source IP type. Possible values are: any, masked-ip, range, ip-list, single, multiple. | Optional |
| source_ip_value | Source IP. | Optional |
| source_ip_mask | Source IP mask. | Optional |
| source_ip_range_from | The first value for a range of source IP addresses. | Optional |
| source_ip_range_to | The last value for a range of source IP addresses. | Optional |
| source_ip_multiple | List of source IP addresses. | Optional |
| source_ip_list_id | ID of source IP list. | Optional |
| source_ip_not | Controls if the source IP setting should be inverted. | Optional |
| source_mac_type | Source MAC type. Possible values are: any, single, mac-list, multiple. | Optional |
| source_mac_value | Source MAC address. | Optional |
| source_mac_multiple | List of MAC addresses. | Optional |
| source_mac_list_id | ID of MAC address list. | Optional |
| source_mac_not | Controls if the source MAC setting should be inverted. | Optional |
| source_port_type | The type of source port. Possible values are: any, multiple, port-list. | Optional |
| source_port_multiple | List of comma-delimited source ports. | Optional |
| source_port_list_id | ID of source port list. | Optional |
| source_port_not | Controls if the source port setting should be inverted. | Optional |
| destination_ip_type | Destination IP type. Possible values are: any, single, multiple, range, masked-ip, ip-list. | Optional |
| destination_ip_value | Destination IP. | Optional |
| destination_ip_mask | Destination IP mask. | Optional |
| destination_ip_range_from | The first value for a range of destination IP addresses. | Optional |
| destination_ip_range_to | The last value for a range of destination IP addresses. | Optional |
| destination_ip_multiple | List of comma-delimited destination IP addresses. | Optional |
| destination_ip_list_id | ID of destination IP list. | Optional |
| destination_ip_not | Controls if the destination IP setting should be inverted. | Optional |
| destination_mac_type | Destination MAC type. Possible values are: any, single, multiple, mac-list. | Optional |
| destination_mac_value | Destination MAC address. | Optional |
| destination_mac_multiple | List of comma-delimited MAC addresses. | Optional |
| destination_mac_list_id | ID of MAC address list. | Optional |
| destination_mac_not | Controls if the destination MAC setting should be inverted. | Optional |
| destination_port_type | The type of destination port. Possible values are: any, port-list, multiple. | Optional |
| destination_port_multiple | List of comma-delimited destination ports. | Optional |
| destination_port_list_id | ID of destination port list. | Optional |
| destination_port_not | Controls if the destination port setting should be inverted. | Optional |
| any_flags | True if any flags are used. | Optional |
| log_disabled | Controls if logging for this filter is disabled. | Optional |
| include_packet_data | Controls if this filter should capture data for every log. | Optional |
| alert_enabled | Controls if this filter should be alerted on. | Optional |
| schedule_id | ID of the schedule to control when this filter is “on”. | Optional |
| context_id | RuleContext that is applied to this filter. | Optional |
| tcpflags | The TCP flags the rule should filter by. Possible values are: syn, ack, psh, urg, fin, rst. | Optional |
| tcp_not | Controls if the TCP settings should be inverted. | Optional |
| icmp_type | The ICMP type the rule should filter by. | Optional |
| icmp_code | The ICMP code the rule should filter by. | Optional |
| icmp_not | Controls if the ICMP settings should be inverted. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| TrendMicro.FirewallRules.name | string | Name of the firewall rule |
| TrendMicro.FirewallRules.description | string | Description of the firewall rule |
| TrendMicro.FirewallRules.action | string | Action of the packet filter |
| TrendMicro.FirewallRules.priority | string | Priority of the packet filter |
| TrendMicro.FirewallRules.direction | string | Packet direction |
| TrendMicro.FirewallRules.frameType | string | Supported frame types |
| TrendMicro.FirewallRules.frameNumber | integer | Ethernet frame number |
| TrendMicro.FirewallRules.frameNot | boolean | Controls if the frame setting should be inverted |
| TrendMicro.FirewallRules.protocol | string | Protocol |
| TrendMicro.FirewallRules.protocolNumber | integer | Two-byte protocol number |
| TrendMicro.FirewallRules.protocolNot | boolean | Controls if the protocol setting should be inverted |
| TrendMicro.FirewallRules.sourceIPType | string | Source IP type |
| TrendMicro.FirewallRules.sourceIPValue | string | Source IP |
| TrendMicro.FirewallRules.sourceIPMask | string | Source IP mask |
| TrendMicro.FirewallRules.sourceIPRangeFrom | string | The first value for a range of source IP addresses |
| TrendMicro.FirewallRules.sourceIPRangeTo | string | The last value for a range of source IP addresses |
| TrendMicro.FirewallRules.sourceIPMultiple | array | List of source IP addresses |
| TrendMicro.FirewallRules.sourceIPListID | integer | ID of source IP list |
| TrendMicro.FirewallRules.sourceIPNot | boolean | Controls if the source IP setting should be inverted |
| TrendMicro.FirewallRules.sourceMACType | string | Source MAC type |
| TrendMicro.FirewallRules.sourceMACValue | string | Source MAC address |
| TrendMicro.FirewallRules.sourceMACMultiple | array | List of MAC addresses |
| TrendMicro.FirewallRules.sourceMACListID | integer | ID of MAC address list |
| TrendMicro.FirewallRules.sourceMACNot | boolean | Controls if the source MAC setting should be inverted |
| TrendMicro.FirewallRules.sourcePortType | string | The type of source port |
| TrendMicro.FirewallRules.sourcePortMultiple | array | List of comma-delimited source ports |
| TrendMicro.FirewallRules.sourcePortListID | integer | ID of source port list |
| TrendMicro.FirewallRules.sourcePortNot | boolean | Controls if the source port setting should be inverted |
| TrendMicro.FirewallRules.destinationIPType | string | Destination IP type |
| TrendMicro.FirewallRules.destinationIPValue | string | Destination IP |
| TrendMicro.FirewallRules.destinationIPMask | string | Destination IP mask |
| TrendMicro.FirewallRules.destinationIPRangeFrom | string | The first value for a range of destination IP addresses |
| TrendMicro.FirewallRules.destinationIPRangeTo | string | The last value for a range of destination IP addresses |
| TrendMicro.FirewallRules.destinationIPMultiple | array | List of comma-delimited destination IP addresses |
| TrendMicro.FirewallRules.destinationIPListID | integer | ID of destination IP list |
| TrendMicro.FirewallRules.destinationIPNot | boolean | Controls if the destination IP setting should be inverted |
| TrendMicro.FirewallRules.destinationMACType | string | Destination MAC type |
| TrendMicro.FirewallRules.destinationMACValue | string | Destination MAC address |
| TrendMicro.FirewallRules.destinationMACMultiple | array | List of comma-delimited MAC addresses |
| TrendMicro.FirewallRules.destinationMACListID | integer | ID of MAC address list |
| TrendMicro.FirewallRules.destinationMACNot | boolean | Controls if the destination MAC setting should be inverted |
| TrendMicro.FirewallRules.destinationPortType | string | The type of destination port |
| TrendMicro.FirewallRules.destinationPortMultiple | array | List of comma-delimited destination ports |
| TrendMicro.FirewallRules.destinationPortListID | integer | ID of destination port list |
| TrendMicro.FirewallRules.destinationPortNot | boolean | Controls if the destination port setting should be inverted |
| TrendMicro.FirewallRules.anyFlags | boolean | True if any flags are used |
| TrendMicro.FirewallRules.logDisabled | boolean | Controls if logging for this filter is disabled |
| TrendMicro.FirewallRules.includePacketData | boolean | Controls if this filter should capture data for every log |
| TrendMicro.FirewallRules.alertEnabled | boolean | Controls if this filter should be alerted on |
| TrendMicro.FirewallRules.scheduleID | integer | ID of the schedule to control when this filter is “on” |
| TrendMicro.FirewallRules.contextID | integer | RuleContext that is applied to this filter |
| TrendMicro.FirewallRules.tcpflags | array | TCP flags |
| TrendMicro.FirewallRules.TCPNot | boolean | Whether the TCP settings are inverted or not |
| TrendMicro.FirewallRules.ICMPType | integer | ICMP type |
| TrendMicro.FirewallRules.ICMPCode | integer | ICMP code |
| TrendMicro.FirewallRules.ICMPNot | boolean | Whether the ICMP settings are inverted or not |
Command Example
!trendmicro-modify-firewall-rule firewall_rule_id=174 action=deny
Context Example
{
"TrendMicro": {
"FirewallRules": {
"ID": 174,
"action": "deny",
"alertEnabled": false,
"anyFlags": true,
"description": "",
"destinationIPNot": false,
"destinationIPType": "any",
"destinationMACNot": false,
"destinationMACType": "any",
"destinationPortNot": false,
"destinationPortType": "any",
"direction": "incoming",
"frameNot": false,
"frameNumber": 2048,
"frameType": "ip",
"includePacketData": false,
"logDisabled": false,
"name": "Example Rule",
"priority": "0",
"protocol": "udp",
"protocolNot": false,
"sourceIPNot": false,
"sourceIPType": "any",
"sourceMACNot": false,
"sourceMACType": "any",
"sourcePortNot": false,
"sourcePortType": "any"
}
}
}
Human Readable Output
Details About The Modified Firewall Rule 174
ID Name Direction Action 174 Example Rule incoming deny
trendmicro-delete-firewall-rule
Delete a certain firewall rule
Base Command
trendmicro-delete-firewall-rule
Input
| Argument Name | Description | Required |
|---|---|---|
| firewall_rule_id | The ID number of the firewall rule to delete. | Required |
Context Output
There is no context output for this command.
Command Example
!trendmicro-delete-firewall-rule firewall_rule_id=174
Human Readable Output
The firewall rule was successfully deleted!
trendmicro-list-firewall-rule-ids-of-computer
List all IDs of the firewall rules that are assigned to a certain computer
Base Command
trendmicro-list-firewall-rule-ids-of-computer
Input
| Argument Name | Description | Required |
|---|---|---|
| computer_id | The ID number of the computer. | Required |
| overrides | Return only rule IDs assigned directly to the current computer. Possible values are: true, false. Default is false. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| TrendMicro.FirewallAssignments.assignedRuleIDs | array | List of assigned firewall rule IDs |
Command Example
!trendmicro-list-firewall-rule-ids-of-computer computer_id=216
Context Example
{
"TrendMicro": {
"FirewallAssignments": {
"assignedRuleIDs": []
}
}
}
Human Readable Output
The firewall rules IDs that are assigned to 216:
trendmicro-add-firewall-rule-ids-to-computer
Add firewall rule IDs to a certain computer
Base Command
trendmicro-add-firewall-rule-ids-to-computer
Input
| Argument Name | Description | Required |
|---|---|---|
| computer_id | The ID number of the computer. | Required |
| overrides | Return only rule IDs assigned directly to the current computer. Possible values are: true, false. Default is false. | Optional |
| rule_ids | The rule IDs to add to the computer. | Required |
Context Output
| Path | Type | Description |
|---|---|---|
| TrendMicro.FirewallAssignments.assignedRuleIDs | array | List of assigned firewall rule IDs |
Command Example
!trendmicro-add-firewall-rule-ids-to-computer computer_id=216 rule_ids=31
Context Example
{
"TrendMicro": {
"FirewallAssignments": {
"assignedRuleIDs": [
21,
22,
31
]
}
}
}
Human Readable Output
The firewall rules IDs that are assigned to computer 216: 21, 22, 31
trendmicro-set-firewall-rule-ids-to-computer
Assign firewall rule IDs to a certain computer
Base Command
trendmicro-set-firewall-rule-ids-to-computer
Input
| Argument Name | Description | Required |
|---|---|---|
| computer_id | The ID number of the computer. | Required |
| overrides | Return only rule IDs assigned directly to the current computer. Possible values are: true, false. Default is false. | Optional |
| rule_ids | The rule IDs to assign to the computer. | Required |
Context Output
| Path | Type | Description |
|---|---|---|
| TrendMicro.FirewallAssignments.assignedRuleIDs | array | List of assigned firewall rule IDs |
Command Example
!trendmicro-set-firewall-rule-ids-to-computer computer_id=216 rule_ids=21,22
Context Example
{
"TrendMicro": {
"FirewallAssignments": {
"assignedRuleIDs": [
21,
22
]
}
}
}
Human Readable Output
The firewall rules IDs that are assigned to computer 216: 21, 22
trendmicro-get-policy
Get information about a certain policy
Base Command
trendmicro-get-policy
Input
| Argument Name | Description | Required |
|---|---|---|
| policy_id | The ID number of the policy to get. | Required |
| overrides | Show only overrides defined for the current policy. Possible values are: true, false. Default is false. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| TrendMicro.Policies.parentID | integer | ID of the parent policy |
| TrendMicro.Policies.name | string | Name of the policy |
| TrendMicro.Policies.description | string | Description of the policy |
| TrendMicro.Policies.recommendationScanMode | string | Enable or disable ongoing recommendation scans for computers assigned this policy |
| TrendMicro.Policies.autoRequiresUpdate | string | Automatically update computers assigned this policy when the configuration changes |
Command Example
!trendmicro-get-policy policy_id=105
Context Example
{
"TrendMicro": {
"Policies": {
"ID": 105,
"activityMonitoring": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off"
},
"state": "off"
},
"antiMalware": {
"manualScanConfigurationID": 2,
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off"
},
"realTimeScanConfigurationID": 1,
"realTimeScanScheduleID": 4,
"scheduledScanConfigurationID": 3,
"state": "off"
},
"applicationControl": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off"
},
"state": "off"
},
"autoRequiresUpdate": "on",
"description": "Example policy description",
"firewall": {
"globalStatefulConfigurationID": 1,
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off, 2 rules"
},
"ruleIDs": [
23,
28
],
"state": "off"
},
"integrityMonitoring": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off, no rules"
},
"state": "off"
},
"intrusionPrevention": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off, no rules"
},
"state": "off"
},
"logInspection": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off, no rules"
},
"state": "off"
},
"name": "Example Policy",
"parentID": 2,
"policySettings": {
"activityMonitoringSettingActivityEnabled": {
"value": "Off"
},
"activityMonitoringSettingIndicatorEnabled": {
"value": "Off"
},
"activityMonitoringSettingSyslogConfigId": {
"value": "0"
},
"antiMalwareSettingBehaviorMonitoringScanExclusionList": {
"value": ""
},
"antiMalwareSettingCombinedModeProtectionSource": {
"value": "Appliance preferred"
},
"antiMalwareSettingConnectedThreatDefenseSuspiciousFileDdanSubmissionEnabled": {
"value": "true"
},
"antiMalwareSettingConnectedThreatDefenseUseControlManagerSuspiciousObjectListEnabled": {
"value": "true"
},
"antiMalwareSettingDocumentExploitProtectionRuleExceptions": {
"value": ""
},
"antiMalwareSettingFileHashEnabled": {
"value": "false"
},
"antiMalwareSettingFileHashMd5Enabled": {
"value": "false"
},
"antiMalwareSettingFileHashSha256Enabled": {
"value": "false"
},
"antiMalwareSettingFileHashSizeMaxMbytes": {
"value": "128"
},
"antiMalwareSettingIdentifiedFilesSpaceMaxMbytes": {
"value": "1024"
},
"antiMalwareSettingMalwareScanMultithreadedProcessingEnabled": {
"value": "false"
},
"antiMalwareSettingNsxSecurityTaggingEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingOnRemediationFailureEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingRemoveOnCleanScanEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingValue": {
"value": "ANTI_VIRUS.VirusFound.threat=medium"
},
"antiMalwareSettingPredictiveMachineLearningExceptions": {
"value": ""
},
"antiMalwareSettingScanCacheOnDemandConfigId": {
"value": "1"
},
"antiMalwareSettingScanCacheRealTimeConfigId": {
"value": "2"
},
"antiMalwareSettingScanFileSizeMaxMbytes": {
"value": "0"
},
"antiMalwareSettingSmartProtectionGlobalServerEnabled": {
"value": "true"
},
"antiMalwareSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"antiMalwareSettingSmartProtectionLocalServerAllowOffDomainGlobal": {
"value": "false"
},
"antiMalwareSettingSmartProtectionLocalServerUrls": {
"value": ""
},
"antiMalwareSettingSmartProtectionServerConnectionLostWarningEnabled": {
"value": "true"
},
"antiMalwareSettingSmartScanState": {
"value": "Automatic"
},
"antiMalwareSettingSpywareApprovedList": {
"value": ""
},
"antiMalwareSettingSyslogConfigId": {
"value": "0"
},
"antiMalwareSettingVirtualApplianceOnDemandScanCacheEntriesMax": {
"value": "500000"
},
"antiMalwareSettingVirtualApplianceRealTimeScanCacheEntriesMax": {
"value": "500000"
},
"applicationControlSettingExecutionEnforcementLevel": {
"value": "Allow unrecognized software until it is explicitly blocked"
},
"applicationControlSettingRulesetMode": {
"value": "Use local ruleset"
},
"applicationControlSettingSharedRulesetId": {
"value": "0"
},
"applicationControlSettingSyslogConfigId": {
"value": "0"
},
"firewallSettingAntiEvasionCheckEvasiveRetransmit": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckFinNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckFragmentedPackets": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckOutNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckPaws": {
"value": "Ignore"
},
"firewallSettingAntiEvasionCheckRstNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpChecksum": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpCongestionFlags": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpPawsZero": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpRstFinFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSplitHandshake": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynFinFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynRstFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynWithData": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpUrgentFlags": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpZeroFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionSecurityPosture": {
"value": "Normal"
},
"firewallSettingAntiEvasionTcpPawsWindowPolicy": {
"value": "0"
},
"firewallSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"firewallSettingConfigPackageExceedsAlertMaxEnabled": {
"value": "true"
},
"firewallSettingEngineOptionAckTimeout": {
"value": "1 Second"
},
"firewallSettingEngineOptionAllowNullIpEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBlockIpv6Agent8AndEarlierEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBlockIpv6Agent9AndLaterEnabled": {
"value": "false"
},
"firewallSettingEngineOptionBlockSameSrcDstIpEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBootStartTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionBypassCiscoWaasConnectionsEnabled": {
"value": "false"
},
"firewallSettingEngineOptionCloseTimeout": {
"value": "0 Seconds"
},
"firewallSettingEngineOptionCloseWaitTimeout": {
"value": "2 Minutes"
},
"firewallSettingEngineOptionClosingTimeout": {
"value": "1 Second"
},
"firewallSettingEngineOptionColdStartTimeout": {
"value": "5 Minutes"
},
"firewallSettingEngineOptionConnectionCleanupTimeout": {
"value": "10 Seconds"
},
"firewallSettingEngineOptionConnectionsCleanupMax": {
"value": "1000"
},
"firewallSettingEngineOptionConnectionsNumIcmpMax": {
"value": "10000"
},
"firewallSettingEngineOptionConnectionsNumTcpMax": {
"value": "1000000"
},
"firewallSettingEngineOptionConnectionsNumUdpMax": {
"value": "1000000"
},
"firewallSettingEngineOptionDebugModeEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDebugPacketNumMax": {
"value": "8"
},
"firewallSettingEngineOptionDisconnectTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionDrop6To4BogonsAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropEvasiveRetransmitEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDropIpZeroPayloadEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6BogonsAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6ExtType0Enabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6FragmentsLowerThanMinMtuEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6ReservedAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6SiteLocalAddressesEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDropTeredoAnomaliesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropUnknownSslProtocolEnabled": {
"value": "true"
},
"firewallSettingEngineOptionErrorTimeout": {
"value": "10 Seconds"
},
"firewallSettingEngineOptionEstablishedTimeout": {
"value": "3 Hours"
},
"firewallSettingEngineOptionEventNodesMax": {
"value": "20000"
},
"firewallSettingEngineOptionFilterIpv4Tunnels": {
"value": "Disable Detection of IPv4 Tunnels"
},
"firewallSettingEngineOptionFilterIpv6Tunnels": {
"value": "Disable Detection of IPv6 Tunnels"
},
"firewallSettingEngineOptionFinWait1Timeout": {
"value": "2 Minutes"
},
"firewallSettingEngineOptionForceAllowDhcpDns": {
"value": "Allow DNS Query and DHCP Client"
},
"firewallSettingEngineOptionForceAllowIcmpType3Code4": {
"value": "Add Force Allow rule for ICMP type3 code4"
},
"firewallSettingEngineOptionFragmentOffsetMin": {
"value": "60"
},
"firewallSettingEngineOptionFragmentSizeMin": {
"value": "120"
},
"firewallSettingEngineOptionGenerateConnectionEventsIcmpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionGenerateConnectionEventsTcpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionGenerateConnectionEventsUdpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionIcmpTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionIgnoreStatusCode0": {
"value": "None"
},
"firewallSettingEngineOptionIgnoreStatusCode1": {
"value": "None"
},
"firewallSettingEngineOptionIgnoreStatusCode2": {
"value": "None"
},
"firewallSettingEngineOptionLastAckTimeout": {
"value": "3 Minutes"
},
"firewallSettingEngineOptionLogAllPacketDataEnabled": {
"value": "false"
},
"firewallSettingEngineOptionLogEventsPerSecondMax": {
"value": "100"
},
"firewallSettingEngineOptionLogOnePacketPeriod": {
"value": "5 Minutes"
},
"firewallSettingEngineOptionLogOnePacketWithinPeriodEnabled": {
"value": "false"
},
"firewallSettingEngineOptionLogPacketLengthMax": {
"value": "1500 Bytes"
},
"firewallSettingEngineOptionLoggingPolicy": {
"value": "Default"
},
"firewallSettingEngineOptionSilentTcpConnectionDropEnabled": {
"value": "false"
},
"firewallSettingEngineOptionSslSessionSize": {
"value": "Low - 2500"
},
"firewallSettingEngineOptionSslSessionTime": {
"value": "24 Hours"
},
"firewallSettingEngineOptionStrictTerodoPortCheckEnabled": {
"value": "true"
},
"firewallSettingEngineOptionSynRcvdTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionSynSentTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionTcpMssLimit": {
"value": "128 Bytes"
},
"firewallSettingEngineOptionTunnelDepthMax": {
"value": "1"
},
"firewallSettingEngineOptionTunnelDepthMaxExceededAction": {
"value": "Drop"
},
"firewallSettingEngineOptionUdpTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionVerifyTcpChecksumEnabled": {
"value": "false"
},
"firewallSettingEngineOptionsEnabled": {
"value": "true"
},
"firewallSettingEventLogFileCachedEntriesLifeTime": {
"value": "30 Minutes"
},
"firewallSettingEventLogFileCachedEntriesNum": {
"value": "128"
},
"firewallSettingEventLogFileCachedEntriesStaleTime": {
"value": "15 Minutes"
},
"firewallSettingEventLogFileIgnoreSourceIpListId": {
"value": ""
},
"firewallSettingEventLogFileRetainNum": {
"value": "3"
},
"firewallSettingEventLogFileSizeMax": {
"value": "4 MB"
},
"firewallSettingEventsOutOfAllowedPolicyEnabled": {
"value": "true"
},
"firewallSettingFailureResponseEngineSystem": {
"value": "Fail closed"
},
"firewallSettingFailureResponsePacketSanityCheck": {
"value": "Fail closed"
},
"firewallSettingInterfaceIsolationEnabled": {
"value": "false"
},
"firewallSettingInterfaceLimitOneActiveEnabled": {
"value": "false"
},
"firewallSettingInterfacePatterns": {
"value": ""
},
"firewallSettingNetworkEngineMode": {
"value": "Inline"
},
"firewallSettingReconnaissanceBlockFingerprintProbeDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockNetworkOrPortScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpNullScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpSynFinScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpXmasAttackDuration": {
"value": "No"
},
"firewallSettingReconnaissanceDetectFingerprintProbeEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectNetworkOrPortScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpNullScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpSynFinScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpXmasAttackEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceExcludeIpListId": {
"value": "1"
},
"firewallSettingReconnaissanceIncludeIpListId": {
"value": ""
},
"firewallSettingReconnaissanceNotifyFingerprintProbeEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyNetworkOrPortScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpNullScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpSynFinScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpXmasAttackEnabled": {
"value": "true"
},
"firewallSettingSyslogConfigId": {
"value": "0"
},
"firewallSettingVirtualAndContainerNetworkScanEnabled": {
"value": "false"
},
"integrityMonitoringSettingAutoApplyRecommendationsEnabled": {
"value": "No"
},
"integrityMonitoringSettingCombinedModeProtectionSource": {
"value": "Appliance preferred"
},
"integrityMonitoringSettingContentHashAlgorithm": {
"value": "sha1"
},
"integrityMonitoringSettingCpuUsageLevel": {
"value": "High"
},
"integrityMonitoringSettingRealtimeEnabled": {
"value": "false"
},
"integrityMonitoringSettingScanCacheConfigId": {
"value": "3"
},
"integrityMonitoringSettingSyslogConfigId": {
"value": "0"
},
"integrityMonitoringSettingVirtualApplianceOptimizationScanCacheEntriesMax": {
"value": "500000"
},
"intrusionPreventionSettingAutoApplyRecommendationsEnabled": {
"value": "Yes"
},
"intrusionPreventionSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"intrusionPreventionSettingEngineOptionFragmentedIpKeepMax": {
"value": "1000"
},
"intrusionPreventionSettingEngineOptionFragmentedIpPacketSendIcmpEnabled": {
"value": "true"
},
"intrusionPreventionSettingEngineOptionFragmentedIpTimeout": {
"value": "60 Seconds"
},
"intrusionPreventionSettingEngineOptionFragmentedIpUnconcernedMacAddressBypassEnabled": {
"value": "false"
},
"intrusionPreventionSettingEngineOptionsEnabled": {
"value": "false"
},
"intrusionPreventionSettingLogDataRuleFirstMatchEnabled": {
"value": "true"
},
"intrusionPreventionSettingNsxSecurityTaggingDetectModeLevel": {
"value": "No Tagging"
},
"intrusionPreventionSettingNsxSecurityTaggingPreventModeLevel": {
"value": "No Tagging"
},
"intrusionPreventionSettingVirtualAndContainerNetworkScanEnabled": {
"value": "true"
},
"logInspectionSettingAutoApplyRecommendationsEnabled": {
"value": "No"
},
"logInspectionSettingSeverityClippingAgentEventSendSyslogLevelMin": {
"value": "Medium (6)"
},
"logInspectionSettingSeverityClippingAgentEventStoreLevelMin": {
"value": "Medium (6)"
},
"logInspectionSettingSyslogConfigId": {
"value": "0"
},
"platformSettingAgentCommunicationsDirection": {
"value": "Agent/Appliance Initiated"
},
"platformSettingAgentEventsSendInterval": {
"value": "60 Seconds"
},
"platformSettingAgentSelfProtectionEnabled": {
"value": "false"
},
"platformSettingAgentSelfProtectionPassword": {
"value": ""
},
"platformSettingAgentSelfProtectionPasswordEnabled": {
"value": "false"
},
"platformSettingAutoAssignNewIntrusionPreventionRulesEnabled": {
"value": "true"
},
"platformSettingAutoUpdateAntiMalwareEngineEnabled": {
"value": "false"
},
"platformSettingCombinedModeNetworkGroupProtectionSource": {
"value": "Agent preferred"
},
"platformSettingEnvironmentVariableOverrides": {
"value": ""
},
"platformSettingHeartbeatInactiveVmOfflineAlertEnabled": {
"value": "false"
},
"platformSettingHeartbeatInterval": {
"value": "10 Minutes"
},
"platformSettingHeartbeatLocalTimeShiftAlertThreshold": {
"value": "Unlimited"
},
"platformSettingHeartbeatMissedAlertThreshold": {
"value": "5"
},
"platformSettingInactiveAgentCleanupOverrideEnabled": {
"value": "false"
},
"platformSettingNotificationsSuppressPopupsEnabled": {
"value": "false"
},
"platformSettingRecommendationOngoingScansInterval": {
"value": "7 Days"
},
"platformSettingRelayState": {
"value": "false"
},
"platformSettingScanCacheConcurrencyMax": {
"value": "1"
},
"platformSettingScanOpenPortListId": {
"value": "1-1024"
},
"platformSettingSmartProtectionAntiMalwareGlobalServerProxyId": {
"value": ""
},
"platformSettingSmartProtectionGlobalServerEnabled": {
"value": "true"
},
"platformSettingSmartProtectionGlobalServerProxyId": {
"value": ""
},
"platformSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"platformSettingTroubleshootingLoggingLevel": {
"value": "Do Not Override"
},
"webReputationSettingAlertingEnabled": {
"value": "false"
},
"webReputationSettingAllowedUrlDomains": {
"value": ""
},
"webReputationSettingAllowedUrls": {
"value": ""
},
"webReputationSettingBlockedUrlDomains": {
"value": ""
},
"webReputationSettingBlockedUrlKeywords": {
"value": ""
},
"webReputationSettingBlockedUrls": {
"value": ""
},
"webReputationSettingBlockingPageLink": {
"value": "http://sitesafety.trendmicro.com/"
},
"webReputationSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"webReputationSettingMonitorPortListId": {
"value": "80,8080"
},
"webReputationSettingSecurityBlockUntestedPagesEnabled": {
"value": "false"
},
"webReputationSettingSecurityLevel": {
"value": "Medium"
},
"webReputationSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerAllowOffDomainGlobal": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerEnabled": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerUrls": {
"value": ""
},
"webReputationSettingSmartProtectionServerConnectionLostWarningEnabled": {
"value": "true"
},
"webReputationSettingSmartProtectionWebReputationGlobalServerProxyId": {
"value": ""
},
"webReputationSettingSyslogConfigId": {
"value": "0"
}
},
"recommendationScanMode": "ongoing",
"webReputation": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off"
},
"state": "off"
}
}
}
}
Human Readable Output
Details About The Policy 105
ID Name Description 105 Example Policy Example policy description
trendmicro-modify-policy
Modify a certain policy
Base Command
trendmicro-modify-policy
Input
| Argument Name | Description | Required |
|---|---|---|
| policy_id | The ID number of the policy to modify. | Required |
| overrides | Show only overrides defined for the current policy. Possible values are: true, false. Default is false. | Optional |
| parent_id | ID of the parent policy. | Optional |
| name | Name of the policy. | Optional |
| description | Description of the policy. | Optional |
| recommendation_scan_mode | Enable or disable ongoing recommendation scans for computers assigned this policy. | Optional |
| auto_requires_update | Automatically update computers assigned this policy when the configuration changes. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| TrendMicro.Policies.parentID | integer | ID of the parent policy |
| TrendMicro.Policies.name | string | Name of the policy |
| TrendMicro.Policies.description | string | Description of the policy |
| TrendMicro.Policies.recommendationScanMode | string | Enable or disable ongoing recommendation scans for computers assigned this policy |
| TrendMicro.Policies.autoRequiresUpdate | string | Automatically update computers assigned this policy when the configuration changes |
Command Example
!trendmicro-modify-policy policy_id=105 description="Example policy description"
Context Example
{
"TrendMicro": {
"Policies": {
"ID": 105,
"activityMonitoring": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off"
},
"state": "off"
},
"antiMalware": {
"manualScanConfigurationID": 2,
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off"
},
"realTimeScanConfigurationID": 1,
"realTimeScanScheduleID": 4,
"scheduledScanConfigurationID": 3,
"state": "off"
},
"applicationControl": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off"
},
"state": "off"
},
"autoRequiresUpdate": "on",
"description": "Example policy description",
"firewall": {
"globalStatefulConfigurationID": 1,
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off, 2 rules"
},
"ruleIDs": [
23,
28
],
"state": "off"
},
"integrityMonitoring": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off, no rules"
},
"state": "off"
},
"intrusionPrevention": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off, no rules"
},
"state": "off"
},
"logInspection": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off, no rules"
},
"state": "off"
},
"name": "Example Policy",
"parentID": 2,
"policySettings": {
"activityMonitoringSettingActivityEnabled": {
"value": "Off"
},
"activityMonitoringSettingIndicatorEnabled": {
"value": "Off"
},
"activityMonitoringSettingSyslogConfigId": {
"value": "0"
},
"antiMalwareSettingBehaviorMonitoringScanExclusionList": {
"value": ""
},
"antiMalwareSettingCombinedModeProtectionSource": {
"value": "Appliance preferred"
},
"antiMalwareSettingConnectedThreatDefenseSuspiciousFileDdanSubmissionEnabled": {
"value": "true"
},
"antiMalwareSettingConnectedThreatDefenseUseControlManagerSuspiciousObjectListEnabled": {
"value": "true"
},
"antiMalwareSettingDocumentExploitProtectionRuleExceptions": {
"value": ""
},
"antiMalwareSettingFileHashEnabled": {
"value": "false"
},
"antiMalwareSettingFileHashMd5Enabled": {
"value": "false"
},
"antiMalwareSettingFileHashSha256Enabled": {
"value": "false"
},
"antiMalwareSettingFileHashSizeMaxMbytes": {
"value": "128"
},
"antiMalwareSettingIdentifiedFilesSpaceMaxMbytes": {
"value": "1024"
},
"antiMalwareSettingMalwareScanMultithreadedProcessingEnabled": {
"value": "false"
},
"antiMalwareSettingNsxSecurityTaggingEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingOnRemediationFailureEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingRemoveOnCleanScanEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingValue": {
"value": "ANTI_VIRUS.VirusFound.threat=medium"
},
"antiMalwareSettingPredictiveMachineLearningExceptions": {
"value": ""
},
"antiMalwareSettingScanCacheOnDemandConfigId": {
"value": "1"
},
"antiMalwareSettingScanCacheRealTimeConfigId": {
"value": "2"
},
"antiMalwareSettingScanFileSizeMaxMbytes": {
"value": "0"
},
"antiMalwareSettingSmartProtectionGlobalServerEnabled": {
"value": "true"
},
"antiMalwareSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"antiMalwareSettingSmartProtectionLocalServerAllowOffDomainGlobal": {
"value": "false"
},
"antiMalwareSettingSmartProtectionLocalServerUrls": {
"value": ""
},
"antiMalwareSettingSmartProtectionServerConnectionLostWarningEnabled": {
"value": "true"
},
"antiMalwareSettingSmartScanState": {
"value": "Automatic"
},
"antiMalwareSettingSpywareApprovedList": {
"value": ""
},
"antiMalwareSettingSyslogConfigId": {
"value": "0"
},
"antiMalwareSettingVirtualApplianceOnDemandScanCacheEntriesMax": {
"value": "500000"
},
"antiMalwareSettingVirtualApplianceRealTimeScanCacheEntriesMax": {
"value": "500000"
},
"applicationControlSettingExecutionEnforcementLevel": {
"value": "Allow unrecognized software until it is explicitly blocked"
},
"applicationControlSettingRulesetMode": {
"value": "Use local ruleset"
},
"applicationControlSettingSharedRulesetId": {
"value": "0"
},
"applicationControlSettingSyslogConfigId": {
"value": "0"
},
"firewallSettingAntiEvasionCheckEvasiveRetransmit": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckFinNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckFragmentedPackets": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckOutNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckPaws": {
"value": "Ignore"
},
"firewallSettingAntiEvasionCheckRstNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpChecksum": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpCongestionFlags": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpPawsZero": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpRstFinFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSplitHandshake": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynFinFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynRstFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynWithData": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpUrgentFlags": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpZeroFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionSecurityPosture": {
"value": "Normal"
},
"firewallSettingAntiEvasionTcpPawsWindowPolicy": {
"value": "0"
},
"firewallSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"firewallSettingConfigPackageExceedsAlertMaxEnabled": {
"value": "true"
},
"firewallSettingEngineOptionAckTimeout": {
"value": "1 Second"
},
"firewallSettingEngineOptionAllowNullIpEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBlockIpv6Agent8AndEarlierEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBlockIpv6Agent9AndLaterEnabled": {
"value": "false"
},
"firewallSettingEngineOptionBlockSameSrcDstIpEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBootStartTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionBypassCiscoWaasConnectionsEnabled": {
"value": "false"
},
"firewallSettingEngineOptionCloseTimeout": {
"value": "0 Seconds"
},
"firewallSettingEngineOptionCloseWaitTimeout": {
"value": "2 Minutes"
},
"firewallSettingEngineOptionClosingTimeout": {
"value": "1 Second"
},
"firewallSettingEngineOptionColdStartTimeout": {
"value": "5 Minutes"
},
"firewallSettingEngineOptionConnectionCleanupTimeout": {
"value": "10 Seconds"
},
"firewallSettingEngineOptionConnectionsCleanupMax": {
"value": "1000"
},
"firewallSettingEngineOptionConnectionsNumIcmpMax": {
"value": "10000"
},
"firewallSettingEngineOptionConnectionsNumTcpMax": {
"value": "1000000"
},
"firewallSettingEngineOptionConnectionsNumUdpMax": {
"value": "1000000"
},
"firewallSettingEngineOptionDebugModeEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDebugPacketNumMax": {
"value": "8"
},
"firewallSettingEngineOptionDisconnectTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionDrop6To4BogonsAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropEvasiveRetransmitEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDropIpZeroPayloadEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6BogonsAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6ExtType0Enabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6FragmentsLowerThanMinMtuEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6ReservedAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6SiteLocalAddressesEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDropTeredoAnomaliesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropUnknownSslProtocolEnabled": {
"value": "true"
},
"firewallSettingEngineOptionErrorTimeout": {
"value": "10 Seconds"
},
"firewallSettingEngineOptionEstablishedTimeout": {
"value": "3 Hours"
},
"firewallSettingEngineOptionEventNodesMax": {
"value": "20000"
},
"firewallSettingEngineOptionFilterIpv4Tunnels": {
"value": "Disable Detection of IPv4 Tunnels"
},
"firewallSettingEngineOptionFilterIpv6Tunnels": {
"value": "Disable Detection of IPv6 Tunnels"
},
"firewallSettingEngineOptionFinWait1Timeout": {
"value": "2 Minutes"
},
"firewallSettingEngineOptionForceAllowDhcpDns": {
"value": "Allow DNS Query and DHCP Client"
},
"firewallSettingEngineOptionForceAllowIcmpType3Code4": {
"value": "Add Force Allow rule for ICMP type3 code4"
},
"firewallSettingEngineOptionFragmentOffsetMin": {
"value": "60"
},
"firewallSettingEngineOptionFragmentSizeMin": {
"value": "120"
},
"firewallSettingEngineOptionGenerateConnectionEventsIcmpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionGenerateConnectionEventsTcpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionGenerateConnectionEventsUdpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionIcmpTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionIgnoreStatusCode0": {
"value": "None"
},
"firewallSettingEngineOptionIgnoreStatusCode1": {
"value": "None"
},
"firewallSettingEngineOptionIgnoreStatusCode2": {
"value": "None"
},
"firewallSettingEngineOptionLastAckTimeout": {
"value": "3 Minutes"
},
"firewallSettingEngineOptionLogAllPacketDataEnabled": {
"value": "false"
},
"firewallSettingEngineOptionLogEventsPerSecondMax": {
"value": "100"
},
"firewallSettingEngineOptionLogOnePacketPeriod": {
"value": "5 Minutes"
},
"firewallSettingEngineOptionLogOnePacketWithinPeriodEnabled": {
"value": "false"
},
"firewallSettingEngineOptionLogPacketLengthMax": {
"value": "1500 Bytes"
},
"firewallSettingEngineOptionLoggingPolicy": {
"value": "Default"
},
"firewallSettingEngineOptionSilentTcpConnectionDropEnabled": {
"value": "false"
},
"firewallSettingEngineOptionSslSessionSize": {
"value": "Low - 2500"
},
"firewallSettingEngineOptionSslSessionTime": {
"value": "24 Hours"
},
"firewallSettingEngineOptionStrictTerodoPortCheckEnabled": {
"value": "true"
},
"firewallSettingEngineOptionSynRcvdTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionSynSentTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionTcpMssLimit": {
"value": "128 Bytes"
},
"firewallSettingEngineOptionTunnelDepthMax": {
"value": "1"
},
"firewallSettingEngineOptionTunnelDepthMaxExceededAction": {
"value": "Drop"
},
"firewallSettingEngineOptionUdpTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionVerifyTcpChecksumEnabled": {
"value": "false"
},
"firewallSettingEngineOptionsEnabled": {
"value": "true"
},
"firewallSettingEventLogFileCachedEntriesLifeTime": {
"value": "30 Minutes"
},
"firewallSettingEventLogFileCachedEntriesNum": {
"value": "128"
},
"firewallSettingEventLogFileCachedEntriesStaleTime": {
"value": "15 Minutes"
},
"firewallSettingEventLogFileIgnoreSourceIpListId": {
"value": ""
},
"firewallSettingEventLogFileRetainNum": {
"value": "3"
},
"firewallSettingEventLogFileSizeMax": {
"value": "4 MB"
},
"firewallSettingEventsOutOfAllowedPolicyEnabled": {
"value": "true"
},
"firewallSettingFailureResponseEngineSystem": {
"value": "Fail closed"
},
"firewallSettingFailureResponsePacketSanityCheck": {
"value": "Fail closed"
},
"firewallSettingInterfaceIsolationEnabled": {
"value": "false"
},
"firewallSettingInterfaceLimitOneActiveEnabled": {
"value": "false"
},
"firewallSettingInterfacePatterns": {
"value": ""
},
"firewallSettingNetworkEngineMode": {
"value": "Inline"
},
"firewallSettingReconnaissanceBlockFingerprintProbeDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockNetworkOrPortScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpNullScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpSynFinScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpXmasAttackDuration": {
"value": "No"
},
"firewallSettingReconnaissanceDetectFingerprintProbeEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectNetworkOrPortScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpNullScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpSynFinScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpXmasAttackEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceExcludeIpListId": {
"value": "1"
},
"firewallSettingReconnaissanceIncludeIpListId": {
"value": ""
},
"firewallSettingReconnaissanceNotifyFingerprintProbeEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyNetworkOrPortScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpNullScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpSynFinScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpXmasAttackEnabled": {
"value": "true"
},
"firewallSettingSyslogConfigId": {
"value": "0"
},
"firewallSettingVirtualAndContainerNetworkScanEnabled": {
"value": "false"
},
"integrityMonitoringSettingAutoApplyRecommendationsEnabled": {
"value": "No"
},
"integrityMonitoringSettingCombinedModeProtectionSource": {
"value": "Appliance preferred"
},
"integrityMonitoringSettingContentHashAlgorithm": {
"value": "sha1"
},
"integrityMonitoringSettingCpuUsageLevel": {
"value": "High"
},
"integrityMonitoringSettingRealtimeEnabled": {
"value": "false"
},
"integrityMonitoringSettingScanCacheConfigId": {
"value": "3"
},
"integrityMonitoringSettingSyslogConfigId": {
"value": "0"
},
"integrityMonitoringSettingVirtualApplianceOptimizationScanCacheEntriesMax": {
"value": "500000"
},
"intrusionPreventionSettingAutoApplyRecommendationsEnabled": {
"value": "Yes"
},
"intrusionPreventionSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"intrusionPreventionSettingEngineOptionFragmentedIpKeepMax": {
"value": "1000"
},
"intrusionPreventionSettingEngineOptionFragmentedIpPacketSendIcmpEnabled": {
"value": "true"
},
"intrusionPreventionSettingEngineOptionFragmentedIpTimeout": {
"value": "60 Seconds"
},
"intrusionPreventionSettingEngineOptionFragmentedIpUnconcernedMacAddressBypassEnabled": {
"value": "false"
},
"intrusionPreventionSettingEngineOptionsEnabled": {
"value": "false"
},
"intrusionPreventionSettingLogDataRuleFirstMatchEnabled": {
"value": "true"
},
"intrusionPreventionSettingNsxSecurityTaggingDetectModeLevel": {
"value": "No Tagging"
},
"intrusionPreventionSettingNsxSecurityTaggingPreventModeLevel": {
"value": "No Tagging"
},
"intrusionPreventionSettingVirtualAndContainerNetworkScanEnabled": {
"value": "true"
},
"logInspectionSettingAutoApplyRecommendationsEnabled": {
"value": "No"
},
"logInspectionSettingSeverityClippingAgentEventSendSyslogLevelMin": {
"value": "Medium (6)"
},
"logInspectionSettingSeverityClippingAgentEventStoreLevelMin": {
"value": "Medium (6)"
},
"logInspectionSettingSyslogConfigId": {
"value": "0"
},
"platformSettingAgentCommunicationsDirection": {
"value": "Agent/Appliance Initiated"
},
"platformSettingAgentEventsSendInterval": {
"value": "60 Seconds"
},
"platformSettingAgentSelfProtectionEnabled": {
"value": "false"
},
"platformSettingAgentSelfProtectionPassword": {
"value": ""
},
"platformSettingAgentSelfProtectionPasswordEnabled": {
"value": "false"
},
"platformSettingAutoAssignNewIntrusionPreventionRulesEnabled": {
"value": "true"
},
"platformSettingAutoUpdateAntiMalwareEngineEnabled": {
"value": "false"
},
"platformSettingCombinedModeNetworkGroupProtectionSource": {
"value": "Agent preferred"
},
"platformSettingEnvironmentVariableOverrides": {
"value": ""
},
"platformSettingHeartbeatInactiveVmOfflineAlertEnabled": {
"value": "false"
},
"platformSettingHeartbeatInterval": {
"value": "10 Minutes"
},
"platformSettingHeartbeatLocalTimeShiftAlertThreshold": {
"value": "Unlimited"
},
"platformSettingHeartbeatMissedAlertThreshold": {
"value": "5"
},
"platformSettingInactiveAgentCleanupOverrideEnabled": {
"value": "false"
},
"platformSettingNotificationsSuppressPopupsEnabled": {
"value": "false"
},
"platformSettingRecommendationOngoingScansInterval": {
"value": "7 Days"
},
"platformSettingRelayState": {
"value": "false"
},
"platformSettingScanCacheConcurrencyMax": {
"value": "1"
},
"platformSettingScanOpenPortListId": {
"value": "1-1024"
},
"platformSettingSmartProtectionAntiMalwareGlobalServerProxyId": {
"value": ""
},
"platformSettingSmartProtectionGlobalServerEnabled": {
"value": "true"
},
"platformSettingSmartProtectionGlobalServerProxyId": {
"value": ""
},
"platformSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"platformSettingTroubleshootingLoggingLevel": {
"value": "Do Not Override"
},
"webReputationSettingAlertingEnabled": {
"value": "false"
},
"webReputationSettingAllowedUrlDomains": {
"value": ""
},
"webReputationSettingAllowedUrls": {
"value": ""
},
"webReputationSettingBlockedUrlDomains": {
"value": ""
},
"webReputationSettingBlockedUrlKeywords": {
"value": ""
},
"webReputationSettingBlockedUrls": {
"value": ""
},
"webReputationSettingBlockingPageLink": {
"value": "http://sitesafety.trendmicro.com/"
},
"webReputationSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"webReputationSettingMonitorPortListId": {
"value": "80,8080"
},
"webReputationSettingSecurityBlockUntestedPagesEnabled": {
"value": "false"
},
"webReputationSettingSecurityLevel": {
"value": "Medium"
},
"webReputationSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerAllowOffDomainGlobal": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerEnabled": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerUrls": {
"value": ""
},
"webReputationSettingSmartProtectionServerConnectionLostWarningEnabled": {
"value": "true"
},
"webReputationSettingSmartProtectionWebReputationGlobalServerProxyId": {
"value": ""
},
"webReputationSettingSyslogConfigId": {
"value": "0"
}
},
"recommendationScanMode": "ongoing",
"webReputation": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off"
},
"state": "off"
}
}
}
}
Human Readable Output
Details About The Policy 105
ID Name Description 105 Example Policy Example policy description
trendmicro-delete-policy
Delete a certain policy
Base Command
trendmicro-delete-policy
Input
| Argument Name | Description | Required |
|---|---|---|
| policy_id | The ID number of the policy to delete. | Required |
Context Output
There is no context output for this command.
Command Example
!trendmicro-delete-policy policy_id=105
Human Readable Output
The policy was successfully deleted!
trendmicro-get-policy-setting
Get information about a setting of a certain policy
Base Command
trendmicro-get-policy-setting
Input
| Argument Name | Description | Required |
|---|---|---|
| policy_id | The ID number of the policy. | Required |
| name | The name of the policy setting. Possible values are: logInspectionSettingSeverityClippingAgentEventSendSyslogLevelMin, firewallSettingEngineOptionConnectionsCleanupMax, firewallSettingEngineOptionVerifyTcpChecksumEnabled, antiMalwareSettingScanCacheOnDemandConfigId, applicationControlSettingSharedRulesetId, webReputationSettingSmartProtectionServerConnectionLostWarningEnabled, applicationControlSettingExecutionEnforcementLevel, webReputationSettingBlockedUrlDomains, firewallSettingEngineOptionSynSentTimeout, platformSettingAgentSelfProtectionPassword, firewallSettingReconnaissanceBlockTcpXmasAttackDuration, intrusionPreventionSettingVirtualAndContainerNetworkScanEnabled, logInspectionSettingSyslogConfigId, firewallSettingEngineOptionDebugModeEnabled, firewallSettingVirtualAndContainerNetworkScanEnabled, antiMalwareSettingFileHashSha256Enabled, firewallSettingReconnaissanceNotifyFingerprintProbeEnabled, firewallSettingEventLogFileRetainNum, firewallSettingAntiEvasionCheckTcpPawsZero, antiMalwareSettingConnectedThreatDefenseUseControlManagerSuspiciousObjectListEnabled, intrusionPreventionSettingEngineOptionFragmentedIpKeepMax, firewallSettingEngineOptionDrop6To4BogonsAddressesEnabled, logInspectionSettingSeverityClippingAgentEventStoreLevelMin, platformSettingScanCacheConcurrencyMax, antiMalwareSettingSyslogConfigId, firewallSettingAntiEvasionTcpPawsWindowPolicy, firewallSettingReconnaissanceDetectTcpXmasAttackEnabled, applicationControlSettingRulesetMode, antiMalwareSettingSmartProtectionGlobalServerUseProxyEnabled, webReputationSettingSmartProtectionLocalServerAllowOffDomainGlobal, integrityMonitoringSettingCombinedModeProtectionSource, firewallSettingEngineOptionCloseWaitTimeout, platformSettingScanOpenPortListId, platformSettingAgentSelfProtectionPasswordEnabled, firewallSettingEngineOptionAckTimeout, firewallSettingEventLogFileCachedEntriesStaleTime, firewallSettingCombinedModeProtectionSource, platformSettingAgentEventsSendInterval, platformSettingInactiveAgentCleanupOverrideEnabled, firewallSettingFailureResponseEngineSystem, platformSettingRelayState, firewallSettingEngineOptionDropEvasiveRetransmitEnabled, activityMonitoringSettingIndicatorEnabled, intrusionPreventionSettingEngineOptionFragmentedIpTimeout, firewallSettingAntiEvasionCheckTcpZeroFlags, webReputationSettingSmartProtectionGlobalServerUseProxyEnabled, intrusionPreventionSettingNsxSecurityTaggingPreventModeLevel, firewallSettingReconnaissanceNotifyTcpXmasAttackEnabled, firewallSettingEngineOptionUdpTimeout, webReputationSettingSmartProtectionLocalServerEnabled, firewallSettingEngineOptionTcpMssLimit, firewallSettingEngineOptionColdStartTimeout, firewallSettingEngineOptionEstablishedTimeout, antiMalwareSettingIdentifiedFilesSpaceMaxMbytes, firewallSettingEngineOptionAllowNullIpEnabled, platformSettingNotificationsSuppressPopupsEnabled, firewallSettingAntiEvasionCheckTcpRstFinFlags, firewallSettingEngineOptionDisconnectTimeout, firewallSettingEngineOptionCloseTimeout, firewallSettingEngineOptionTunnelDepthMaxExceededAction, firewallSettingReconnaissanceDetectTcpNullScanEnabled, platformSettingSmartProtectionAntiMalwareGlobalServerProxyId, firewallSettingEngineOptionFilterIpv4Tunnels, webReputationSettingSmartProtectionLocalServerUrls, firewallSettingEngineOptionLogOnePacketPeriod, firewallSettingEngineOptionFilterIpv6Tunnels, firewallSettingAntiEvasionCheckTcpCongestionFlags, platformSettingHeartbeatMissedAlertThreshold, intrusionPreventionSettingEngineOptionsEnabled, firewallSettingEngineOptionConnectionsNumUdpMax, integrityMonitoringSettingAutoApplyRecommendationsEnabled, firewallSettingEngineOptionTunnelDepthMax, firewallSettingEngineOptionDropUnknownSslProtocolEnabled, antiMalwareSettingNsxSecurityTaggingValue, intrusionPreventionSettingLogDataRuleFirstMatchEnabled, firewallSettingEngineOptionLoggingPolicy, platformSettingTroubleshootingLoggingLevel, antiMalwareSettingVirtualApplianceOnDemandScanCacheEntriesMax, webReputationSettingCombinedModeProtectionSource, firewallSettingEngineOptionClosingTimeout, firewallSettingAntiEvasionCheckPaws, intrusionPreventionSettingAutoApplyRecommendationsEnabled, firewallSettingReconnaissanceDetectFingerprintProbeEnabled, antiMalwareSettingNsxSecurityTaggingRemoveOnCleanScanEnabled, firewallSettingEngineOptionLogPacketLengthMax, firewallSettingEngineOptionDropTeredoAnomaliesEnabled, webReputationSettingSecurityLevel, firewallSettingEngineOptionDropIpv6SiteLocalAddressesEnabled, activityMonitoringSettingActivityEnabled, firewallSettingEngineOptionStrictTerodoPortCheckEnabled, webReputationSettingBlockedUrlKeywords, webReputationSettingSyslogConfigId, firewallSettingFailureResponsePacketSanityCheck, firewallSettingNetworkEngineMode, firewallSettingEventLogFileSizeMax, antiMalwareSettingMalwareScanMultithreadedProcessingEnabled, firewallSettingReconnaissanceDetectTcpSynFinScanEnabled, firewallSettingEngineOptionDropIpZeroPayloadEnabled, firewallSettingEngineOptionBlockIpv6Agent8AndEarlierEnabled, intrusionPreventionSettingEngineOptionFragmentedIpPacketSendIcmpEnabled, antiMalwareSettingPredictiveMachineLearningExceptions, firewallSettingEngineOptionLogEventsPerSecondMax, firewallSettingEngineOptionSslSessionTime, antiMalwareSettingBehaviorMonitoringScanExclusionList, antiMalwareSettingSmartProtectionGlobalServerEnabled, firewallSettingEngineOptionLogOnePacketWithinPeriodEnabled, firewallSettingEngineOptionGenerateConnectionEventsIcmpEnabled, platformSettingHeartbeatInactiveVmOfflineAlertEnabled, webReputationSettingSmartProtectionWebReputationGlobalServerProxyId, antiMalwareSettingNsxSecurityTaggingEnabled, firewallSettingAntiEvasionCheckFragmentedPackets, firewallSettingEngineOptionConnectionsNumIcmpMax, firewallSettingAntiEvasionCheckTcpSplitHandshake, antiMalwareSettingCombinedModeProtectionSource, firewallSettingEngineOptionEventNodesMax, webReputationSettingMonitorPortListId, applicationControlSettingSyslogConfigId, firewallSettingAntiEvasionCheckOutNoConnection, firewallSettingEngineOptionBlockIpv6Agent9AndLaterEnabled, integrityMonitoringSettingVirtualApplianceOptimizationScanCacheEntriesMax, firewallSettingReconnaissanceNotifyTcpNullScanEnabled, firewallSettingEngineOptionIgnoreStatusCode1, firewallSettingEngineOptionIgnoreStatusCode0, firewallSettingEngineOptionIgnoreStatusCode2, firewallSettingEngineOptionSslSessionSize, antiMalwareSettingScanCacheRealTimeConfigId, platformSettingRecommendationOngoingScansInterval, platformSettingSmartProtectionGlobalServerUseProxyEnabled, firewallSettingInterfaceLimitOneActiveEnabled, firewallSettingAntiEvasionCheckTcpChecksum, firewallSettingEngineOptionDropIpv6ExtType0Enabled, antiMalwareSettingScanFileSizeMaxMbytes, firewallSettingEngineOptionGenerateConnectionEventsTcpEnabled, antiMalwareSettingFileHashSizeMaxMbytes, firewallSettingEventLogFileCachedEntriesLifeTime, platformSettingSmartProtectionGlobalServerProxyId, logInspectionSettingAutoApplyRecommendationsEnabled, antiMalwareSettingConnectedThreatDefenseSuspiciousFileDdanSubmissionEnabled, webReputationSettingBlockingPageLink, firewallSettingSyslogConfigId, platformSettingAgentCommunicationsDirection, integrityMonitoringSettingScanCacheConfigId, antiMalwareSettingDocumentExploitProtectionRuleExceptions, firewallSettingAntiEvasionCheckTcpSynWithData, antiMalwareSettingFileHashEnabled, firewallSettingReconnaissanceBlockFingerprintProbeDuration, firewallSettingEngineOptionDropIpv6BogonsAddressesEnabled, firewallSettingEngineOptionBootStartTimeout, firewallSettingEngineOptionConnectionsNumTcpMax, firewallSettingAntiEvasionSecurityPosture, firewallSettingInterfacePatterns, firewallSettingInterfaceIsolationEnabled, antiMalwareSettingVirtualApplianceRealTimeScanCacheEntriesMax, firewallSettingEventsOutOfAllowedPolicyEnabled, firewallSettingAntiEvasionCheckEvasiveRetransmit, firewallSettingEngineOptionIcmpTimeout, integrityMonitoringSettingSyslogConfigId, firewallSettingEngineOptionConnectionCleanupTimeout, antiMalwareSettingSmartProtectionLocalServerAllowOffDomainGlobal, firewallSettingReconnaissanceNotifyTcpSynFinScanEnabled, firewallSettingEngineOptionErrorTimeout, webReputationSettingAllowedUrls, firewallSettingReconnaissanceNotifyNetworkOrPortScanEnabled, firewallSettingEngineOptionFinWait1Timeout, firewallSettingEngineOptionGenerateConnectionEventsUdpEnabled, activityMonitoringSettingSyslogConfigId, firewallSettingAntiEvasionCheckTcpSynRstFlags, antiMalwareSettingSpywareApprovedList, firewallSettingAntiEvasionCheckTcpUrgentFlags, intrusionPreventionSettingNsxSecurityTaggingDetectModeLevel, intrusionPreventionSettingEngineOptionFragmentedIpUnconcernedMacAddressBypassEnabled, firewallSettingEngineOptionLogAllPacketDataEnabled, firewallSettingAntiEvasionCheckTcpSynFinFlags, platformSettingHeartbeatInterval, firewallSettingEngineOptionFragmentSizeMin, antiMalwareSettingSmartProtectionServerConnectionLostWarningEnabled, firewallSettingReconnaissanceBlockNetworkOrPortScanDuration, integrityMonitoringSettingContentHashAlgorithm, antiMalwareSettingSmartScanState, firewallSettingConfigPackageExceedsAlertMaxEnabled, platformSettingEnvironmentVariableOverrides, firewallSettingEngineOptionFragmentOffsetMin, antiMalwareSettingSmartProtectionLocalServerUrls, firewallSettingEngineOptionSynRcvdTimeout, firewallSettingEventLogFileCachedEntriesNum, firewallSettingEngineOptionForceAllowIcmpType3Code4, firewallSettingReconnaissanceBlockTcpNullScanDuration, platformSettingSmartProtectionGlobalServerEnabled, integrityMonitoringSettingRealtimeEnabled, firewallSettingEngineOptionLastAckTimeout, firewallSettingReconnaissanceExcludeIpListId, platformSettingAgentSelfProtectionEnabled, firewallSettingEngineOptionDropIpv6ReservedAddressesEnabled, firewallSettingAntiEvasionCheckFinNoConnection, firewallSettingEngineOptionDebugPacketNumMax, firewallSettingEngineOptionBypassCiscoWaasConnectionsEnabled, firewallSettingReconnaissanceEnabled, platformSettingHeartbeatLocalTimeShiftAlertThreshold, antiMalwareSettingFileHashMd5Enabled, firewallSettingReconnaissanceDetectNetworkOrPortScanEnabled, firewallSettingEngineOptionSilentTcpConnectionDropEnabled, firewallSettingEngineOptionBlockSameSrcDstIpEnabled, firewallSettingEngineOptionForceAllowDhcpDns, firewallSettingReconnaissanceIncludeIpListId, firewallSettingEngineOptionsEnabled, firewallSettingReconnaissanceBlockTcpSynFinScanDuration, webReputationSettingSecurityBlockUntestedPagesEnabled, webReputationSettingAllowedUrlDomains, firewallSettingEventLogFileIgnoreSourceIpListId, firewallSettingEngineOptionDropIpv6FragmentsLowerThanMinMtuEnabled, platformSettingAutoAssignNewIntrusionPreventionRulesEnabled, firewallSettingAntiEvasionCheckRstNoConnection, webReputationSettingBlockedUrls, platformSettingCombinedModeNetworkGroupProtectionSource, webReputationSettingAlertingEnabled, antiMalwareSettingNsxSecurityTaggingOnRemediationFailureEnabled, integrityMonitoringSettingCpuUsageLevel, platformSettingAutoUpdateAntiMalwareEngineEnabled, intrusionPreventionSettingCombinedModeProtectionSource. | Required |
| overrides | Show the value only if defined for the current policy. Possible values are: true, false. Default is false. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| TrendMicro.PolicySettings.policyId | integer | Policy ID of a Setting |
| TrendMicro.PolicySettings.name | string | Name of a Setting |
| TrendMicro.PolicySettings.value | string | Value of a Setting |
Command Example
!trendmicro-get-policy-setting policy_id=105 name=firewallSettingEngineOptionGenerateConnectionEventsUdpEnabled
Context Example
{
"TrendMicro": {
"PolicySettings": {
"name": "firewallSettingEngineOptionGenerateConnectionEventsUdpEnabled",
"policyId": 105,
"value": "false"
}
}
}
Human Readable Output
The Policy Setting
Policy Id Name Value 105 firewallSettingEngineOptionGenerateConnectionEventsUdpEnabled false
trendmicro-modify-policy-setting
Modify the value of a setting of a certain policy
Base Command
trendmicro-modify-policy-setting
Input
| Argument Name | Description | Required |
|---|---|---|
| policy_id | The ID number of the policy. | Required |
| name | The name of the setting. Possible values are: logInspectionSettingSeverityClippingAgentEventSendSyslogLevelMin, firewallSettingEngineOptionConnectionsCleanupMax, firewallSettingEngineOptionVerifyTcpChecksumEnabled, antiMalwareSettingScanCacheOnDemandConfigId, applicationControlSettingSharedRulesetId, webReputationSettingSmartProtectionServerConnectionLostWarningEnabled, applicationControlSettingExecutionEnforcementLevel, webReputationSettingBlockedUrlDomains, firewallSettingEngineOptionSynSentTimeout, platformSettingAgentSelfProtectionPassword, firewallSettingReconnaissanceBlockTcpXmasAttackDuration, intrusionPreventionSettingVirtualAndContainerNetworkScanEnabled, logInspectionSettingSyslogConfigId, firewallSettingEngineOptionDebugModeEnabled, firewallSettingVirtualAndContainerNetworkScanEnabled, antiMalwareSettingFileHashSha256Enabled, firewallSettingReconnaissanceNotifyFingerprintProbeEnabled, firewallSettingEventLogFileRetainNum, firewallSettingAntiEvasionCheckTcpPawsZero, antiMalwareSettingConnectedThreatDefenseUseControlManagerSuspiciousObjectListEnabled, intrusionPreventionSettingEngineOptionFragmentedIpKeepMax, firewallSettingEngineOptionDrop6To4BogonsAddressesEnabled, logInspectionSettingSeverityClippingAgentEventStoreLevelMin, platformSettingScanCacheConcurrencyMax, antiMalwareSettingSyslogConfigId, firewallSettingAntiEvasionTcpPawsWindowPolicy, firewallSettingReconnaissanceDetectTcpXmasAttackEnabled, applicationControlSettingRulesetMode, antiMalwareSettingSmartProtectionGlobalServerUseProxyEnabled, webReputationSettingSmartProtectionLocalServerAllowOffDomainGlobal, integrityMonitoringSettingCombinedModeProtectionSource, firewallSettingEngineOptionCloseWaitTimeout, platformSettingScanOpenPortListId, platformSettingAgentSelfProtectionPasswordEnabled, firewallSettingEngineOptionAckTimeout, firewallSettingEventLogFileCachedEntriesStaleTime, firewallSettingCombinedModeProtectionSource, platformSettingAgentEventsSendInterval, platformSettingInactiveAgentCleanupOverrideEnabled, firewallSettingFailureResponseEngineSystem, platformSettingRelayState, firewallSettingEngineOptionDropEvasiveRetransmitEnabled, activityMonitoringSettingIndicatorEnabled, intrusionPreventionSettingEngineOptionFragmentedIpTimeout, firewallSettingAntiEvasionCheckTcpZeroFlags, webReputationSettingSmartProtectionGlobalServerUseProxyEnabled, intrusionPreventionSettingNsxSecurityTaggingPreventModeLevel, firewallSettingReconnaissanceNotifyTcpXmasAttackEnabled, firewallSettingEngineOptionUdpTimeout, webReputationSettingSmartProtectionLocalServerEnabled, firewallSettingEngineOptionTcpMssLimit, firewallSettingEngineOptionColdStartTimeout, firewallSettingEngineOptionEstablishedTimeout, antiMalwareSettingIdentifiedFilesSpaceMaxMbytes, firewallSettingEngineOptionAllowNullIpEnabled, platformSettingNotificationsSuppressPopupsEnabled, firewallSettingAntiEvasionCheckTcpRstFinFlags, firewallSettingEngineOptionDisconnectTimeout, firewallSettingEngineOptionCloseTimeout, firewallSettingEngineOptionTunnelDepthMaxExceededAction, firewallSettingReconnaissanceDetectTcpNullScanEnabled, platformSettingSmartProtectionAntiMalwareGlobalServerProxyId, firewallSettingEngineOptionFilterIpv4Tunnels, webReputationSettingSmartProtectionLocalServerUrls, firewallSettingEngineOptionLogOnePacketPeriod, firewallSettingEngineOptionFilterIpv6Tunnels, firewallSettingAntiEvasionCheckTcpCongestionFlags, platformSettingHeartbeatMissedAlertThreshold, intrusionPreventionSettingEngineOptionsEnabled, firewallSettingEngineOptionConnectionsNumUdpMax, integrityMonitoringSettingAutoApplyRecommendationsEnabled, firewallSettingEngineOptionTunnelDepthMax, firewallSettingEngineOptionDropUnknownSslProtocolEnabled, antiMalwareSettingNsxSecurityTaggingValue, intrusionPreventionSettingLogDataRuleFirstMatchEnabled, firewallSettingEngineOptionLoggingPolicy, platformSettingTroubleshootingLoggingLevel, antiMalwareSettingVirtualApplianceOnDemandScanCacheEntriesMax, webReputationSettingCombinedModeProtectionSource, firewallSettingEngineOptionClosingTimeout, firewallSettingAntiEvasionCheckPaws, intrusionPreventionSettingAutoApplyRecommendationsEnabled, firewallSettingReconnaissanceDetectFingerprintProbeEnabled, antiMalwareSettingNsxSecurityTaggingRemoveOnCleanScanEnabled, firewallSettingEngineOptionLogPacketLengthMax, firewallSettingEngineOptionDropTeredoAnomaliesEnabled, webReputationSettingSecurityLevel, firewallSettingEngineOptionDropIpv6SiteLocalAddressesEnabled, activityMonitoringSettingActivityEnabled, firewallSettingEngineOptionStrictTerodoPortCheckEnabled, webReputationSettingBlockedUrlKeywords, webReputationSettingSyslogConfigId, firewallSettingFailureResponsePacketSanityCheck, firewallSettingNetworkEngineMode, firewallSettingEventLogFileSizeMax, antiMalwareSettingMalwareScanMultithreadedProcessingEnabled, firewallSettingReconnaissanceDetectTcpSynFinScanEnabled, firewallSettingEngineOptionDropIpZeroPayloadEnabled, firewallSettingEngineOptionBlockIpv6Agent8AndEarlierEnabled, intrusionPreventionSettingEngineOptionFragmentedIpPacketSendIcmpEnabled, antiMalwareSettingPredictiveMachineLearningExceptions, firewallSettingEngineOptionLogEventsPerSecondMax, firewallSettingEngineOptionSslSessionTime, antiMalwareSettingBehaviorMonitoringScanExclusionList, antiMalwareSettingSmartProtectionGlobalServerEnabled, firewallSettingEngineOptionLogOnePacketWithinPeriodEnabled, firewallSettingEngineOptionGenerateConnectionEventsIcmpEnabled, platformSettingHeartbeatInactiveVmOfflineAlertEnabled, webReputationSettingSmartProtectionWebReputationGlobalServerProxyId, antiMalwareSettingNsxSecurityTaggingEnabled, firewallSettingAntiEvasionCheckFragmentedPackets, firewallSettingEngineOptionConnectionsNumIcmpMax, firewallSettingAntiEvasionCheckTcpSplitHandshake, antiMalwareSettingCombinedModeProtectionSource, firewallSettingEngineOptionEventNodesMax, webReputationSettingMonitorPortListId, applicationControlSettingSyslogConfigId, firewallSettingAntiEvasionCheckOutNoConnection, firewallSettingEngineOptionBlockIpv6Agent9AndLaterEnabled, integrityMonitoringSettingVirtualApplianceOptimizationScanCacheEntriesMax, firewallSettingReconnaissanceNotifyTcpNullScanEnabled, firewallSettingEngineOptionIgnoreStatusCode1, firewallSettingEngineOptionIgnoreStatusCode0, firewallSettingEngineOptionIgnoreStatusCode2, firewallSettingEngineOptionSslSessionSize, antiMalwareSettingScanCacheRealTimeConfigId, platformSettingRecommendationOngoingScansInterval, platformSettingSmartProtectionGlobalServerUseProxyEnabled, firewallSettingInterfaceLimitOneActiveEnabled, firewallSettingAntiEvasionCheckTcpChecksum, firewallSettingEngineOptionDropIpv6ExtType0Enabled, antiMalwareSettingScanFileSizeMaxMbytes, firewallSettingEngineOptionGenerateConnectionEventsTcpEnabled, antiMalwareSettingFileHashSizeMaxMbytes, firewallSettingEventLogFileCachedEntriesLifeTime, platformSettingSmartProtectionGlobalServerProxyId, logInspectionSettingAutoApplyRecommendationsEnabled, antiMalwareSettingConnectedThreatDefenseSuspiciousFileDdanSubmissionEnabled, webReputationSettingBlockingPageLink, firewallSettingSyslogConfigId, platformSettingAgentCommunicationsDirection, integrityMonitoringSettingScanCacheConfigId, antiMalwareSettingDocumentExploitProtectionRuleExceptions, firewallSettingAntiEvasionCheckTcpSynWithData, antiMalwareSettingFileHashEnabled, firewallSettingReconnaissanceBlockFingerprintProbeDuration, firewallSettingEngineOptionDropIpv6BogonsAddressesEnabled, firewallSettingEngineOptionBootStartTimeout, firewallSettingEngineOptionConnectionsNumTcpMax, firewallSettingAntiEvasionSecurityPosture, firewallSettingInterfacePatterns, firewallSettingInterfaceIsolationEnabled, antiMalwareSettingVirtualApplianceRealTimeScanCacheEntriesMax, firewallSettingEventsOutOfAllowedPolicyEnabled, firewallSettingAntiEvasionCheckEvasiveRetransmit, firewallSettingEngineOptionIcmpTimeout, integrityMonitoringSettingSyslogConfigId, firewallSettingEngineOptionConnectionCleanupTimeout, antiMalwareSettingSmartProtectionLocalServerAllowOffDomainGlobal, firewallSettingReconnaissanceNotifyTcpSynFinScanEnabled, firewallSettingEngineOptionErrorTimeout, webReputationSettingAllowedUrls, firewallSettingReconnaissanceNotifyNetworkOrPortScanEnabled, firewallSettingEngineOptionFinWait1Timeout, firewallSettingEngineOptionGenerateConnectionEventsUdpEnabled, activityMonitoringSettingSyslogConfigId, firewallSettingAntiEvasionCheckTcpSynRstFlags, antiMalwareSettingSpywareApprovedList, firewallSettingAntiEvasionCheckTcpUrgentFlags, intrusionPreventionSettingNsxSecurityTaggingDetectModeLevel, intrusionPreventionSettingEngineOptionFragmentedIpUnconcernedMacAddressBypassEnabled, firewallSettingEngineOptionLogAllPacketDataEnabled, firewallSettingAntiEvasionCheckTcpSynFinFlags, platformSettingHeartbeatInterval, firewallSettingEngineOptionFragmentSizeMin, antiMalwareSettingSmartProtectionServerConnectionLostWarningEnabled, firewallSettingReconnaissanceBlockNetworkOrPortScanDuration, integrityMonitoringSettingContentHashAlgorithm, antiMalwareSettingSmartScanState, firewallSettingConfigPackageExceedsAlertMaxEnabled, platformSettingEnvironmentVariableOverrides, firewallSettingEngineOptionFragmentOffsetMin, antiMalwareSettingSmartProtectionLocalServerUrls, firewallSettingEngineOptionSynRcvdTimeout, firewallSettingEventLogFileCachedEntriesNum, firewallSettingEngineOptionForceAllowIcmpType3Code4, firewallSettingReconnaissanceBlockTcpNullScanDuration, platformSettingSmartProtectionGlobalServerEnabled, integrityMonitoringSettingRealtimeEnabled, firewallSettingEngineOptionLastAckTimeout, firewallSettingReconnaissanceExcludeIpListId, platformSettingAgentSelfProtectionEnabled, firewallSettingEngineOptionDropIpv6ReservedAddressesEnabled, firewallSettingAntiEvasionCheckFinNoConnection, firewallSettingEngineOptionDebugPacketNumMax, firewallSettingEngineOptionBypassCiscoWaasConnectionsEnabled, firewallSettingReconnaissanceEnabled, platformSettingHeartbeatLocalTimeShiftAlertThreshold, antiMalwareSettingFileHashMd5Enabled, firewallSettingReconnaissanceDetectNetworkOrPortScanEnabled, firewallSettingEngineOptionSilentTcpConnectionDropEnabled, firewallSettingEngineOptionBlockSameSrcDstIpEnabled, firewallSettingEngineOptionForceAllowDhcpDns, firewallSettingReconnaissanceIncludeIpListId, firewallSettingEngineOptionsEnabled, firewallSettingReconnaissanceBlockTcpSynFinScanDuration, webReputationSettingSecurityBlockUntestedPagesEnabled, webReputationSettingAllowedUrlDomains, firewallSettingEventLogFileIgnoreSourceIpListId, firewallSettingEngineOptionDropIpv6FragmentsLowerThanMinMtuEnabled, platformSettingAutoAssignNewIntrusionPreventionRulesEnabled, firewallSettingAntiEvasionCheckRstNoConnection, webReputationSettingBlockedUrls, platformSettingCombinedModeNetworkGroupProtectionSource, webReputationSettingAlertingEnabled, antiMalwareSettingNsxSecurityTaggingOnRemediationFailureEnabled, integrityMonitoringSettingCpuUsageLevel, platformSettingAutoUpdateAntiMalwareEngineEnabled, intrusionPreventionSettingCombinedModeProtectionSource. | Required |
| overrides | Show the value only if defined for the current computer. Possible values are: true, false. Default is false. | Optional |
| value | Value of a Setting. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| TrendMicro.PolicySettings.policyId | integer | Policy Id of a Setting |
| TrendMicro.PolicySettings.name | string | Name of a Setting |
| TrendMicro.PolicySettings.value | string | Value of a Setting |
Command Example
!trendmicro-modify-policy-setting name=firewallSettingEngineOptionGenerateConnectionEventsUdpEnabled policy_id=105 value=true
Context Example
{
"TrendMicro": {
"PolicySettings": {
"name": "firewallSettingEngineOptionGenerateConnectionEventsUdpEnabled",
"policyId": 105,
"value": "true"
}
}
}
Human Readable Output
The Policy Setting
Policy Id Name Value 105 firewallSettingEngineOptionGenerateConnectionEventsUdpEnabled true
trendmicro-reset-policy-setting
Reset the value of a setting of a certain policy
Base Command
trendmicro-reset-policy-setting
Input
| Argument Name | Description | Required |
|---|---|---|
| policy_id | The ID number of the policy. | Required |
| name | The name of the policy setting. Possible values are: logInspectionSettingSeverityClippingAgentEventSendSyslogLevelMin, firewallSettingEngineOptionConnectionsCleanupMax, firewallSettingEngineOptionVerifyTcpChecksumEnabled, antiMalwareSettingScanCacheOnDemandConfigId, applicationControlSettingSharedRulesetId, webReputationSettingSmartProtectionServerConnectionLostWarningEnabled, applicationControlSettingExecutionEnforcementLevel, webReputationSettingBlockedUrlDomains, firewallSettingEngineOptionSynSentTimeout, platformSettingAgentSelfProtectionPassword, firewallSettingReconnaissanceBlockTcpXmasAttackDuration, intrusionPreventionSettingVirtualAndContainerNetworkScanEnabled, logInspectionSettingSyslogConfigId, firewallSettingEngineOptionDebugModeEnabled, firewallSettingVirtualAndContainerNetworkScanEnabled, antiMalwareSettingFileHashSha256Enabled, firewallSettingReconnaissanceNotifyFingerprintProbeEnabled, firewallSettingEventLogFileRetainNum, firewallSettingAntiEvasionCheckTcpPawsZero, antiMalwareSettingConnectedThreatDefenseUseControlManagerSuspiciousObjectListEnabled, intrusionPreventionSettingEngineOptionFragmentedIpKeepMax, firewallSettingEngineOptionDrop6To4BogonsAddressesEnabled, logInspectionSettingSeverityClippingAgentEventStoreLevelMin, platformSettingScanCacheConcurrencyMax, antiMalwareSettingSyslogConfigId, firewallSettingAntiEvasionTcpPawsWindowPolicy, firewallSettingReconnaissanceDetectTcpXmasAttackEnabled, applicationControlSettingRulesetMode, antiMalwareSettingSmartProtectionGlobalServerUseProxyEnabled, webReputationSettingSmartProtectionLocalServerAllowOffDomainGlobal, integrityMonitoringSettingCombinedModeProtectionSource, firewallSettingEngineOptionCloseWaitTimeout, platformSettingScanOpenPortListId, platformSettingAgentSelfProtectionPasswordEnabled, firewallSettingEngineOptionAckTimeout, firewallSettingEventLogFileCachedEntriesStaleTime, firewallSettingCombinedModeProtectionSource, platformSettingAgentEventsSendInterval, platformSettingInactiveAgentCleanupOverrideEnabled, firewallSettingFailureResponseEngineSystem, platformSettingRelayState, firewallSettingEngineOptionDropEvasiveRetransmitEnabled, activityMonitoringSettingIndicatorEnabled, intrusionPreventionSettingEngineOptionFragmentedIpTimeout, firewallSettingAntiEvasionCheckTcpZeroFlags, webReputationSettingSmartProtectionGlobalServerUseProxyEnabled, intrusionPreventionSettingNsxSecurityTaggingPreventModeLevel, firewallSettingReconnaissanceNotifyTcpXmasAttackEnabled, firewallSettingEngineOptionUdpTimeout, webReputationSettingSmartProtectionLocalServerEnabled, firewallSettingEngineOptionTcpMssLimit, firewallSettingEngineOptionColdStartTimeout, firewallSettingEngineOptionEstablishedTimeout, antiMalwareSettingIdentifiedFilesSpaceMaxMbytes, firewallSettingEngineOptionAllowNullIpEnabled, platformSettingNotificationsSuppressPopupsEnabled, firewallSettingAntiEvasionCheckTcpRstFinFlags, firewallSettingEngineOptionDisconnectTimeout, firewallSettingEngineOptionCloseTimeout, firewallSettingEngineOptionTunnelDepthMaxExceededAction, firewallSettingReconnaissanceDetectTcpNullScanEnabled, platformSettingSmartProtectionAntiMalwareGlobalServerProxyId, firewallSettingEngineOptionFilterIpv4Tunnels, webReputationSettingSmartProtectionLocalServerUrls, firewallSettingEngineOptionLogOnePacketPeriod, firewallSettingEngineOptionFilterIpv6Tunnels, firewallSettingAntiEvasionCheckTcpCongestionFlags, platformSettingHeartbeatMissedAlertThreshold, intrusionPreventionSettingEngineOptionsEnabled, firewallSettingEngineOptionConnectionsNumUdpMax, integrityMonitoringSettingAutoApplyRecommendationsEnabled, firewallSettingEngineOptionTunnelDepthMax, firewallSettingEngineOptionDropUnknownSslProtocolEnabled, antiMalwareSettingNsxSecurityTaggingValue, intrusionPreventionSettingLogDataRuleFirstMatchEnabled, firewallSettingEngineOptionLoggingPolicy, platformSettingTroubleshootingLoggingLevel, antiMalwareSettingVirtualApplianceOnDemandScanCacheEntriesMax, webReputationSettingCombinedModeProtectionSource, firewallSettingEngineOptionClosingTimeout, firewallSettingAntiEvasionCheckPaws, intrusionPreventionSettingAutoApplyRecommendationsEnabled, firewallSettingReconnaissanceDetectFingerprintProbeEnabled, antiMalwareSettingNsxSecurityTaggingRemoveOnCleanScanEnabled, firewallSettingEngineOptionLogPacketLengthMax, firewallSettingEngineOptionDropTeredoAnomaliesEnabled, webReputationSettingSecurityLevel, firewallSettingEngineOptionDropIpv6SiteLocalAddressesEnabled, activityMonitoringSettingActivityEnabled, firewallSettingEngineOptionStrictTerodoPortCheckEnabled, webReputationSettingBlockedUrlKeywords, webReputationSettingSyslogConfigId, firewallSettingFailureResponsePacketSanityCheck, firewallSettingNetworkEngineMode, firewallSettingEventLogFileSizeMax, antiMalwareSettingMalwareScanMultithreadedProcessingEnabled, firewallSettingReconnaissanceDetectTcpSynFinScanEnabled, firewallSettingEngineOptionDropIpZeroPayloadEnabled, firewallSettingEngineOptionBlockIpv6Agent8AndEarlierEnabled, intrusionPreventionSettingEngineOptionFragmentedIpPacketSendIcmpEnabled, antiMalwareSettingPredictiveMachineLearningExceptions, firewallSettingEngineOptionLogEventsPerSecondMax, firewallSettingEngineOptionSslSessionTime, antiMalwareSettingBehaviorMonitoringScanExclusionList, antiMalwareSettingSmartProtectionGlobalServerEnabled, firewallSettingEngineOptionLogOnePacketWithinPeriodEnabled, firewallSettingEngineOptionGenerateConnectionEventsIcmpEnabled, platformSettingHeartbeatInactiveVmOfflineAlertEnabled, webReputationSettingSmartProtectionWebReputationGlobalServerProxyId, antiMalwareSettingNsxSecurityTaggingEnabled, firewallSettingAntiEvasionCheckFragmentedPackets, firewallSettingEngineOptionConnectionsNumIcmpMax, firewallSettingAntiEvasionCheckTcpSplitHandshake, antiMalwareSettingCombinedModeProtectionSource, firewallSettingEngineOptionEventNodesMax, webReputationSettingMonitorPortListId, applicationControlSettingSyslogConfigId, firewallSettingAntiEvasionCheckOutNoConnection, firewallSettingEngineOptionBlockIpv6Agent9AndLaterEnabled, integrityMonitoringSettingVirtualApplianceOptimizationScanCacheEntriesMax, firewallSettingReconnaissanceNotifyTcpNullScanEnabled, firewallSettingEngineOptionIgnoreStatusCode1, firewallSettingEngineOptionIgnoreStatusCode0, firewallSettingEngineOptionIgnoreStatusCode2, firewallSettingEngineOptionSslSessionSize, antiMalwareSettingScanCacheRealTimeConfigId, platformSettingRecommendationOngoingScansInterval, platformSettingSmartProtectionGlobalServerUseProxyEnabled, firewallSettingInterfaceLimitOneActiveEnabled, firewallSettingAntiEvasionCheckTcpChecksum, firewallSettingEngineOptionDropIpv6ExtType0Enabled, antiMalwareSettingScanFileSizeMaxMbytes, firewallSettingEngineOptionGenerateConnectionEventsTcpEnabled, antiMalwareSettingFileHashSizeMaxMbytes, firewallSettingEventLogFileCachedEntriesLifeTime, platformSettingSmartProtectionGlobalServerProxyId, logInspectionSettingAutoApplyRecommendationsEnabled, antiMalwareSettingConnectedThreatDefenseSuspiciousFileDdanSubmissionEnabled, webReputationSettingBlockingPageLink, firewallSettingSyslogConfigId, platformSettingAgentCommunicationsDirection, integrityMonitoringSettingScanCacheConfigId, antiMalwareSettingDocumentExploitProtectionRuleExceptions, firewallSettingAntiEvasionCheckTcpSynWithData, antiMalwareSettingFileHashEnabled, firewallSettingReconnaissanceBlockFingerprintProbeDuration, firewallSettingEngineOptionDropIpv6BogonsAddressesEnabled, firewallSettingEngineOptionBootStartTimeout, firewallSettingEngineOptionConnectionsNumTcpMax, firewallSettingAntiEvasionSecurityPosture, firewallSettingInterfacePatterns, firewallSettingInterfaceIsolationEnabled, antiMalwareSettingVirtualApplianceRealTimeScanCacheEntriesMax, firewallSettingEventsOutOfAllowedPolicyEnabled, firewallSettingAntiEvasionCheckEvasiveRetransmit, firewallSettingEngineOptionIcmpTimeout, integrityMonitoringSettingSyslogConfigId, firewallSettingEngineOptionConnectionCleanupTimeout, antiMalwareSettingSmartProtectionLocalServerAllowOffDomainGlobal, firewallSettingReconnaissanceNotifyTcpSynFinScanEnabled, firewallSettingEngineOptionErrorTimeout, webReputationSettingAllowedUrls, firewallSettingReconnaissanceNotifyNetworkOrPortScanEnabled, firewallSettingEngineOptionFinWait1Timeout, firewallSettingEngineOptionGenerateConnectionEventsUdpEnabled, activityMonitoringSettingSyslogConfigId, firewallSettingAntiEvasionCheckTcpSynRstFlags, antiMalwareSettingSpywareApprovedList, firewallSettingAntiEvasionCheckTcpUrgentFlags, intrusionPreventionSettingNsxSecurityTaggingDetectModeLevel, intrusionPreventionSettingEngineOptionFragmentedIpUnconcernedMacAddressBypassEnabled, firewallSettingEngineOptionLogAllPacketDataEnabled, firewallSettingAntiEvasionCheckTcpSynFinFlags, platformSettingHeartbeatInterval, firewallSettingEngineOptionFragmentSizeMin, antiMalwareSettingSmartProtectionServerConnectionLostWarningEnabled, firewallSettingReconnaissanceBlockNetworkOrPortScanDuration, integrityMonitoringSettingContentHashAlgorithm, antiMalwareSettingSmartScanState, firewallSettingConfigPackageExceedsAlertMaxEnabled, platformSettingEnvironmentVariableOverrides, firewallSettingEngineOptionFragmentOffsetMin, antiMalwareSettingSmartProtectionLocalServerUrls, firewallSettingEngineOptionSynRcvdTimeout, firewallSettingEventLogFileCachedEntriesNum, firewallSettingEngineOptionForceAllowIcmpType3Code4, firewallSettingReconnaissanceBlockTcpNullScanDuration, platformSettingSmartProtectionGlobalServerEnabled, integrityMonitoringSettingRealtimeEnabled, firewallSettingEngineOptionLastAckTimeout, firewallSettingReconnaissanceExcludeIpListId, platformSettingAgentSelfProtectionEnabled, firewallSettingEngineOptionDropIpv6ReservedAddressesEnabled, firewallSettingAntiEvasionCheckFinNoConnection, firewallSettingEngineOptionDebugPacketNumMax, firewallSettingEngineOptionBypassCiscoWaasConnectionsEnabled, firewallSettingReconnaissanceEnabled, platformSettingHeartbeatLocalTimeShiftAlertThreshold, antiMalwareSettingFileHashMd5Enabled, firewallSettingReconnaissanceDetectNetworkOrPortScanEnabled, firewallSettingEngineOptionSilentTcpConnectionDropEnabled, firewallSettingEngineOptionBlockSameSrcDstIpEnabled, firewallSettingEngineOptionForceAllowDhcpDns, firewallSettingReconnaissanceIncludeIpListId, firewallSettingEngineOptionsEnabled, firewallSettingReconnaissanceBlockTcpSynFinScanDuration, webReputationSettingSecurityBlockUntestedPagesEnabled, webReputationSettingAllowedUrlDomains, firewallSettingEventLogFileIgnoreSourceIpListId, firewallSettingEngineOptionDropIpv6FragmentsLowerThanMinMtuEnabled, platformSettingAutoAssignNewIntrusionPreventionRulesEnabled, firewallSettingAntiEvasionCheckRstNoConnection, webReputationSettingBlockedUrls, platformSettingCombinedModeNetworkGroupProtectionSource, webReputationSettingAlertingEnabled, antiMalwareSettingNsxSecurityTaggingOnRemediationFailureEnabled, integrityMonitoringSettingCpuUsageLevel, platformSettingAutoUpdateAntiMalwareEngineEnabled, intrusionPreventionSettingCombinedModeProtectionSource. | Required |
| overrides | Show the value only if defined for the current policy. Possible values are: true, false. Default is false. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| TrendMicro.PolicySettings.policyId | integer | Policy Id of a Setting |
| TrendMicro.PolicySettings.name | string | Name of a Setting |
| TrendMicro.PolicySettings.value | string | Value of a Setting |
Command Example
!trendmicro-reset-policy-setting name=firewallSettingEngineOptionGenerateConnectionEventsUdpEnabled policy_id=105
Context Example
{
"TrendMicro": {
"PolicySettings": {
"name": "firewallSettingEngineOptionGenerateConnectionEventsUdpEnabled",
"policyId": 105,
"value": "false"
}
}
}
Human Readable Output
The Policy Setting
Policy Id Name Value 105 firewallSettingEngineOptionGenerateConnectionEventsUdpEnabled false
trendmicro-list-policies
List all existing policies
Base Command
trendmicro-list-policies
Input
| Argument Name | Description | Required |
|---|---|---|
| overrides | Show only overrides defined for the current policy. Possible values are: true, false. Default is false. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| TrendMicro.Policies.parentID | integer | ID of the parent policy |
| TrendMicro.Policies.name | string | Name of the policy |
| TrendMicro.Policies.description | string | Description of the policy |
| TrendMicro.Policies.recommendationScanMode | string | Enable or disable ongoing recommendation scans for computers assigned this policy |
| TrendMicro.Policies.autoRequiresUpdate | string | Automatically update computers assigned this policy when the configuration changes |
Command Example
#### Context Example
```json
{
"TrendMicro": {
"Policies": [
{
"ID": 1,
"activityMonitoring": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off"
},
"state": "off"
},
"antiMalware": {
"manualScanConfigurationID": 2,
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off"
},
"realTimeScanConfigurationID": 1,
"realTimeScanScheduleID": 4,
"scheduledScanConfigurationID": 3,
"state": "off"
},
"applicationControl": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off"
},
"state": "off"
},
"autoRequiresUpdate": "on",
"description": "A policy from which all other policies can inherit. Only the most general settings should be applied to this policy as they will apply to all policies that inherit from it, unless overridden. More specific settings and rules should be added to sub-policies that are assigned to computers.",
"firewall": {
"globalStatefulConfigurationID": 1,
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off, 2 rules"
},
"ruleIDs": [
23,
28
],
"state": "off"
},
"integrityMonitoring": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off, no rules"
},
"state": "off"
},
"intrusionPrevention": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off, no rules"
},
"state": "off"
},
"logInspection": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off, no rules"
},
"state": "off"
},
"name": "Base Policy",
"policySettings": {
"activityMonitoringSettingActivityEnabled": {
"value": "Off"
},
"activityMonitoringSettingIndicatorEnabled": {
"value": "Off"
},
"activityMonitoringSettingSyslogConfigId": {
"value": "0"
},
"antiMalwareSettingBehaviorMonitoringScanExclusionList": {
"value": ""
},
"antiMalwareSettingCombinedModeProtectionSource": {
"value": "Appliance preferred"
},
"antiMalwareSettingConnectedThreatDefenseSuspiciousFileDdanSubmissionEnabled": {
"value": "true"
},
"antiMalwareSettingConnectedThreatDefenseUseControlManagerSuspiciousObjectListEnabled": {
"value": "true"
},
"antiMalwareSettingDocumentExploitProtectionRuleExceptions": {
"value": ""
},
"antiMalwareSettingFileHashEnabled": {
"value": "false"
},
"antiMalwareSettingFileHashMd5Enabled": {
"value": "false"
},
"antiMalwareSettingFileHashSha256Enabled": {
"value": "false"
},
"antiMalwareSettingFileHashSizeMaxMbytes": {
"value": "128"
},
"antiMalwareSettingIdentifiedFilesSpaceMaxMbytes": {
"value": "1024"
},
"antiMalwareSettingMalwareScanMultithreadedProcessingEnabled": {
"value": "false"
},
"antiMalwareSettingNsxSecurityTaggingEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingOnRemediationFailureEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingRemoveOnCleanScanEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingValue": {
"value": "ANTI_VIRUS.VirusFound.threat=medium"
},
"antiMalwareSettingPredictiveMachineLearningExceptions": {
"value": ""
},
"antiMalwareSettingScanCacheOnDemandConfigId": {
"value": "1"
},
"antiMalwareSettingScanCacheRealTimeConfigId": {
"value": "2"
},
"antiMalwareSettingScanFileSizeMaxMbytes": {
"value": "0"
},
"antiMalwareSettingSmartProtectionGlobalServerEnabled": {
"value": "true"
},
"antiMalwareSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"antiMalwareSettingSmartProtectionLocalServerAllowOffDomainGlobal": {
"value": "false"
},
"antiMalwareSettingSmartProtectionLocalServerUrls": {
"value": ""
},
"antiMalwareSettingSmartProtectionServerConnectionLostWarningEnabled": {
"value": "true"
},
"antiMalwareSettingSmartScanState": {
"value": "Automatic"
},
"antiMalwareSettingSpywareApprovedList": {
"value": ""
},
"antiMalwareSettingSyslogConfigId": {
"value": "0"
},
"antiMalwareSettingVirtualApplianceOnDemandScanCacheEntriesMax": {
"value": "500000"
},
"antiMalwareSettingVirtualApplianceRealTimeScanCacheEntriesMax": {
"value": "500000"
},
"applicationControlSettingExecutionEnforcementLevel": {
"value": "Allow unrecognized software until it is explicitly blocked"
},
"applicationControlSettingRulesetMode": {
"value": "Use local ruleset"
},
"applicationControlSettingSharedRulesetId": {
"value": "0"
},
"applicationControlSettingSyslogConfigId": {
"value": "0"
},
"firewallSettingAntiEvasionCheckEvasiveRetransmit": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckFinNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckFragmentedPackets": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckOutNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckPaws": {
"value": "Ignore"
},
"firewallSettingAntiEvasionCheckRstNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpChecksum": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpCongestionFlags": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpPawsZero": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpRstFinFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSplitHandshake": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynFinFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynRstFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynWithData": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpUrgentFlags": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpZeroFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionSecurityPosture": {
"value": "Normal"
},
"firewallSettingAntiEvasionTcpPawsWindowPolicy": {
"value": "0"
},
"firewallSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"firewallSettingConfigPackageExceedsAlertMaxEnabled": {
"value": "true"
},
"firewallSettingEngineOptionAckTimeout": {
"value": "1 Second"
},
"firewallSettingEngineOptionAllowNullIpEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBlockIpv6Agent8AndEarlierEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBlockIpv6Agent9AndLaterEnabled": {
"value": "false"
},
"firewallSettingEngineOptionBlockSameSrcDstIpEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBootStartTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionBypassCiscoWaasConnectionsEnabled": {
"value": "false"
},
"firewallSettingEngineOptionCloseTimeout": {
"value": "0 Seconds"
},
"firewallSettingEngineOptionCloseWaitTimeout": {
"value": "2 Minutes"
},
"firewallSettingEngineOptionClosingTimeout": {
"value": "1 Second"
},
"firewallSettingEngineOptionColdStartTimeout": {
"value": "5 Minutes"
},
"firewallSettingEngineOptionConnectionCleanupTimeout": {
"value": "10 Seconds"
},
"firewallSettingEngineOptionConnectionsCleanupMax": {
"value": "1000"
},
"firewallSettingEngineOptionConnectionsNumIcmpMax": {
"value": "10000"
},
"firewallSettingEngineOptionConnectionsNumTcpMax": {
"value": "1000000"
},
"firewallSettingEngineOptionConnectionsNumUdpMax": {
"value": "1000000"
},
"firewallSettingEngineOptionDebugModeEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDebugPacketNumMax": {
"value": "8"
},
"firewallSettingEngineOptionDisconnectTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionDrop6To4BogonsAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropEvasiveRetransmitEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDropIpZeroPayloadEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6BogonsAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6ExtType0Enabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6FragmentsLowerThanMinMtuEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6ReservedAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6SiteLocalAddressesEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDropTeredoAnomaliesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropUnknownSslProtocolEnabled": {
"value": "true"
},
"firewallSettingEngineOptionErrorTimeout": {
"value": "10 Seconds"
},
"firewallSettingEngineOptionEstablishedTimeout": {
"value": "3 Hours"
},
"firewallSettingEngineOptionEventNodesMax": {
"value": "20000"
},
"firewallSettingEngineOptionFilterIpv4Tunnels": {
"value": "Disable Detection of IPv4 Tunnels"
},
"firewallSettingEngineOptionFilterIpv6Tunnels": {
"value": "Disable Detection of IPv6 Tunnels"
},
"firewallSettingEngineOptionFinWait1Timeout": {
"value": "2 Minutes"
},
"firewallSettingEngineOptionForceAllowDhcpDns": {
"value": "Allow DNS Query and DHCP Client"
},
"firewallSettingEngineOptionForceAllowIcmpType3Code4": {
"value": "Add Force Allow rule for ICMP type3 code4"
},
"firewallSettingEngineOptionFragmentOffsetMin": {
"value": "60"
},
"firewallSettingEngineOptionFragmentSizeMin": {
"value": "120"
},
"firewallSettingEngineOptionGenerateConnectionEventsIcmpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionGenerateConnectionEventsTcpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionGenerateConnectionEventsUdpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionIcmpTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionIgnoreStatusCode0": {
"value": "None"
},
"firewallSettingEngineOptionIgnoreStatusCode1": {
"value": "None"
},
"firewallSettingEngineOptionIgnoreStatusCode2": {
"value": "None"
},
"firewallSettingEngineOptionLastAckTimeout": {
"value": "3 Minutes"
},
"firewallSettingEngineOptionLogAllPacketDataEnabled": {
"value": "false"
},
"firewallSettingEngineOptionLogEventsPerSecondMax": {
"value": "100"
},
"firewallSettingEngineOptionLogOnePacketPeriod": {
"value": "5 Minutes"
},
"firewallSettingEngineOptionLogOnePacketWithinPeriodEnabled": {
"value": "false"
},
"firewallSettingEngineOptionLogPacketLengthMax": {
"value": "1500 Bytes"
},
"firewallSettingEngineOptionLoggingPolicy": {
"value": "Default"
},
"firewallSettingEngineOptionSilentTcpConnectionDropEnabled": {
"value": "false"
},
"firewallSettingEngineOptionSslSessionSize": {
"value": "Low - 2500"
},
"firewallSettingEngineOptionSslSessionTime": {
"value": "24 Hours"
},
"firewallSettingEngineOptionStrictTerodoPortCheckEnabled": {
"value": "true"
},
"firewallSettingEngineOptionSynRcvdTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionSynSentTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionTcpMssLimit": {
"value": "128 Bytes"
},
"firewallSettingEngineOptionTunnelDepthMax": {
"value": "1"
},
"firewallSettingEngineOptionTunnelDepthMaxExceededAction": {
"value": "Drop"
},
"firewallSettingEngineOptionUdpTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionVerifyTcpChecksumEnabled": {
"value": "false"
},
"firewallSettingEngineOptionsEnabled": {
"value": "true"
},
"firewallSettingEventLogFileCachedEntriesLifeTime": {
"value": "30 Minutes"
},
"firewallSettingEventLogFileCachedEntriesNum": {
"value": "128"
},
"firewallSettingEventLogFileCachedEntriesStaleTime": {
"value": "15 Minutes"
},
"firewallSettingEventLogFileIgnoreSourceIpListId": {
"value": ""
},
"firewallSettingEventLogFileRetainNum": {
"value": "3"
},
"firewallSettingEventLogFileSizeMax": {
"value": "4 MB"
},
"firewallSettingEventsOutOfAllowedPolicyEnabled": {
"value": "true"
},
"firewallSettingFailureResponseEngineSystem": {
"value": "Fail closed"
},
"firewallSettingFailureResponsePacketSanityCheck": {
"value": "Fail closed"
},
"firewallSettingInterfaceIsolationEnabled": {
"value": "false"
},
"firewallSettingInterfaceLimitOneActiveEnabled": {
"value": "false"
},
"firewallSettingInterfacePatterns": {
"value": ""
},
"firewallSettingNetworkEngineMode": {
"value": "Inline"
},
"firewallSettingReconnaissanceBlockFingerprintProbeDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockNetworkOrPortScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpNullScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpSynFinScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpXmasAttackDuration": {
"value": "No"
},
"firewallSettingReconnaissanceDetectFingerprintProbeEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectNetworkOrPortScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpNullScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpSynFinScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpXmasAttackEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceExcludeIpListId": {
"value": "1"
},
"firewallSettingReconnaissanceIncludeIpListId": {
"value": ""
},
"firewallSettingReconnaissanceNotifyFingerprintProbeEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyNetworkOrPortScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpNullScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpSynFinScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpXmasAttackEnabled": {
"value": "true"
},
"firewallSettingSyslogConfigId": {
"value": "0"
},
"firewallSettingVirtualAndContainerNetworkScanEnabled": {
"value": "false"
},
"integrityMonitoringSettingAutoApplyRecommendationsEnabled": {
"value": "No"
},
"integrityMonitoringSettingCombinedModeProtectionSource": {
"value": "Appliance preferred"
},
"integrityMonitoringSettingContentHashAlgorithm": {
"value": "sha1"
},
"integrityMonitoringSettingCpuUsageLevel": {
"value": "High"
},
"integrityMonitoringSettingRealtimeEnabled": {
"value": "false"
},
"integrityMonitoringSettingScanCacheConfigId": {
"value": "3"
},
"integrityMonitoringSettingSyslogConfigId": {
"value": "0"
},
"integrityMonitoringSettingVirtualApplianceOptimizationScanCacheEntriesMax": {
"value": "500000"
},
"intrusionPreventionSettingAutoApplyRecommendationsEnabled": {
"value": "Yes"
},
"intrusionPreventionSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"intrusionPreventionSettingEngineOptionFragmentedIpKeepMax": {
"value": "1000"
},
"intrusionPreventionSettingEngineOptionFragmentedIpPacketSendIcmpEnabled": {
"value": "true"
},
"intrusionPreventionSettingEngineOptionFragmentedIpTimeout": {
"value": "60 Seconds"
},
"intrusionPreventionSettingEngineOptionFragmentedIpUnconcernedMacAddressBypassEnabled": {
"value": "false"
},
"intrusionPreventionSettingEngineOptionsEnabled": {
"value": "false"
},
"intrusionPreventionSettingLogDataRuleFirstMatchEnabled": {
"value": "true"
},
"intrusionPreventionSettingNsxSecurityTaggingDetectModeLevel": {
"value": "No Tagging"
},
"intrusionPreventionSettingNsxSecurityTaggingPreventModeLevel": {
"value": "No Tagging"
},
"intrusionPreventionSettingVirtualAndContainerNetworkScanEnabled": {
"value": "true"
},
"logInspectionSettingAutoApplyRecommendationsEnabled": {
"value": "No"
},
"logInspectionSettingSeverityClippingAgentEventSendSyslogLevelMin": {
"value": "Medium (6)"
},
"logInspectionSettingSeverityClippingAgentEventStoreLevelMin": {
"value": "Medium (6)"
},
"logInspectionSettingSyslogConfigId": {
"value": "0"
},
"platformSettingAgentCommunicationsDirection": {
"value": "Agent/Appliance Initiated"
},
"platformSettingAgentEventsSendInterval": {
"value": "60 Seconds"
},
"platformSettingAgentSelfProtectionEnabled": {
"value": "false"
},
"platformSettingAgentSelfProtectionPassword": {
"value": ""
},
"platformSettingAgentSelfProtectionPasswordEnabled": {
"value": "false"
},
"platformSettingAutoAssignNewIntrusionPreventionRulesEnabled": {
"value": "true"
},
"platformSettingAutoUpdateAntiMalwareEngineEnabled": {
"value": "false"
},
"platformSettingCombinedModeNetworkGroupProtectionSource": {
"value": "Agent preferred"
},
"platformSettingEnvironmentVariableOverrides": {
"value": ""
},
"platformSettingHeartbeatInactiveVmOfflineAlertEnabled": {
"value": "false"
},
"platformSettingHeartbeatInterval": {
"value": "10 Minutes"
},
"platformSettingHeartbeatLocalTimeShiftAlertThreshold": {
"value": "Unlimited"
},
"platformSettingHeartbeatMissedAlertThreshold": {
"value": "5"
},
"platformSettingInactiveAgentCleanupOverrideEnabled": {
"value": "false"
},
"platformSettingNotificationsSuppressPopupsEnabled": {
"value": "false"
},
"platformSettingRecommendationOngoingScansInterval": {
"value": "7 Days"
},
"platformSettingRelayState": {
"value": "false"
},
"platformSettingScanCacheConcurrencyMax": {
"value": "1"
},
"platformSettingScanOpenPortListId": {
"value": "1-1024"
},
"platformSettingSmartProtectionAntiMalwareGlobalServerProxyId": {
"value": ""
},
"platformSettingSmartProtectionGlobalServerEnabled": {
"value": "true"
},
"platformSettingSmartProtectionGlobalServerProxyId": {
"value": ""
},
"platformSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"platformSettingTroubleshootingLoggingLevel": {
"value": "Do Not Override"
},
"webReputationSettingAlertingEnabled": {
"value": "false"
},
"webReputationSettingAllowedUrlDomains": {
"value": ""
},
"webReputationSettingAllowedUrls": {
"value": ""
},
"webReputationSettingBlockedUrlDomains": {
"value": ""
},
"webReputationSettingBlockedUrlKeywords": {
"value": ""
},
"webReputationSettingBlockedUrls": {
"value": ""
},
"webReputationSettingBlockingPageLink": {
"value": "http://sitesafety.trendmicro.com/"
},
"webReputationSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"webReputationSettingMonitorPortListId": {
"value": "80,8080"
},
"webReputationSettingSecurityBlockUntestedPagesEnabled": {
"value": "false"
},
"webReputationSettingSecurityLevel": {
"value": "Medium"
},
"webReputationSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerAllowOffDomainGlobal": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerEnabled": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerUrls": {
"value": ""
},
"webReputationSettingSmartProtectionServerConnectionLostWarningEnabled": {
"value": "true"
},
"webReputationSettingSmartProtectionWebReputationGlobalServerProxyId": {
"value": ""
},
"webReputationSettingSyslogConfigId": {
"value": "0"
}
},
"recommendationScanMode": "ongoing",
"webReputation": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off"
},
"state": "off"
}
},
{
"ID": 2,
"activityMonitoring": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off"
},
"state": "off"
},
"antiMalware": {
"manualScanConfigurationID": 2,
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off"
},
"realTimeScanConfigurationID": 1,
"realTimeScanScheduleID": 4,
"scheduledScanConfigurationID": 3,
"state": "off"
},
"applicationControl": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off"
},
"state": "off"
},
"autoRequiresUpdate": "on",
"description": "An example policy from which all the example Windows policies inherit. Any settings that are common to all Windows policies can be set here.",
"firewall": {
"globalStatefulConfigurationID": 1,
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off, 2 rules"
},
"ruleIDs": [
23,
28
],
"state": "off"
},
"integrityMonitoring": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off, no rules"
},
"state": "off"
},
"intrusionPrevention": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off, no rules"
},
"state": "off"
},
"logInspection": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off, no rules"
},
"state": "off"
},
"name": "Windows",
"parentID": 1,
"policySettings": {
"activityMonitoringSettingActivityEnabled": {
"value": "Off"
},
"activityMonitoringSettingIndicatorEnabled": {
"value": "Off"
},
"activityMonitoringSettingSyslogConfigId": {
"value": "0"
},
"antiMalwareSettingBehaviorMonitoringScanExclusionList": {
"value": ""
},
"antiMalwareSettingCombinedModeProtectionSource": {
"value": "Appliance preferred"
},
"antiMalwareSettingConnectedThreatDefenseSuspiciousFileDdanSubmissionEnabled": {
"value": "true"
},
"antiMalwareSettingConnectedThreatDefenseUseControlManagerSuspiciousObjectListEnabled": {
"value": "true"
},
"antiMalwareSettingDocumentExploitProtectionRuleExceptions": {
"value": ""
},
"antiMalwareSettingFileHashEnabled": {
"value": "false"
},
"antiMalwareSettingFileHashMd5Enabled": {
"value": "false"
},
"antiMalwareSettingFileHashSha256Enabled": {
"value": "false"
},
"antiMalwareSettingFileHashSizeMaxMbytes": {
"value": "128"
},
"antiMalwareSettingIdentifiedFilesSpaceMaxMbytes": {
"value": "1024"
},
"antiMalwareSettingMalwareScanMultithreadedProcessingEnabled": {
"value": "false"
},
"antiMalwareSettingNsxSecurityTaggingEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingOnRemediationFailureEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingRemoveOnCleanScanEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingValue": {
"value": "ANTI_VIRUS.VirusFound.threat=medium"
},
"antiMalwareSettingPredictiveMachineLearningExceptions": {
"value": ""
},
"antiMalwareSettingScanCacheOnDemandConfigId": {
"value": "1"
},
"antiMalwareSettingScanCacheRealTimeConfigId": {
"value": "2"
},
"antiMalwareSettingScanFileSizeMaxMbytes": {
"value": "0"
},
"antiMalwareSettingSmartProtectionGlobalServerEnabled": {
"value": "true"
},
"antiMalwareSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"antiMalwareSettingSmartProtectionLocalServerAllowOffDomainGlobal": {
"value": "false"
},
"antiMalwareSettingSmartProtectionLocalServerUrls": {
"value": ""
},
"antiMalwareSettingSmartProtectionServerConnectionLostWarningEnabled": {
"value": "true"
},
"antiMalwareSettingSmartScanState": {
"value": "Automatic"
},
"antiMalwareSettingSpywareApprovedList": {
"value": ""
},
"antiMalwareSettingSyslogConfigId": {
"value": "0"
},
"antiMalwareSettingVirtualApplianceOnDemandScanCacheEntriesMax": {
"value": "500000"
},
"antiMalwareSettingVirtualApplianceRealTimeScanCacheEntriesMax": {
"value": "500000"
},
"applicationControlSettingExecutionEnforcementLevel": {
"value": "Allow unrecognized software until it is explicitly blocked"
},
"applicationControlSettingRulesetMode": {
"value": "Use local ruleset"
},
"applicationControlSettingSharedRulesetId": {
"value": "0"
},
"applicationControlSettingSyslogConfigId": {
"value": "0"
},
"firewallSettingAntiEvasionCheckEvasiveRetransmit": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckFinNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckFragmentedPackets": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckOutNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckPaws": {
"value": "Ignore"
},
"firewallSettingAntiEvasionCheckRstNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpChecksum": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpCongestionFlags": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpPawsZero": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpRstFinFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSplitHandshake": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynFinFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynRstFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynWithData": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpUrgentFlags": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpZeroFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionSecurityPosture": {
"value": "Normal"
},
"firewallSettingAntiEvasionTcpPawsWindowPolicy": {
"value": "0"
},
"firewallSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"firewallSettingConfigPackageExceedsAlertMaxEnabled": {
"value": "true"
},
"firewallSettingEngineOptionAckTimeout": {
"value": "1 Second"
},
"firewallSettingEngineOptionAllowNullIpEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBlockIpv6Agent8AndEarlierEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBlockIpv6Agent9AndLaterEnabled": {
"value": "false"
},
"firewallSettingEngineOptionBlockSameSrcDstIpEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBootStartTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionBypassCiscoWaasConnectionsEnabled": {
"value": "false"
},
"firewallSettingEngineOptionCloseTimeout": {
"value": "0 Seconds"
},
"firewallSettingEngineOptionCloseWaitTimeout": {
"value": "2 Minutes"
},
"firewallSettingEngineOptionClosingTimeout": {
"value": "1 Second"
},
"firewallSettingEngineOptionColdStartTimeout": {
"value": "5 Minutes"
},
"firewallSettingEngineOptionConnectionCleanupTimeout": {
"value": "10 Seconds"
},
"firewallSettingEngineOptionConnectionsCleanupMax": {
"value": "1000"
},
"firewallSettingEngineOptionConnectionsNumIcmpMax": {
"value": "10000"
},
"firewallSettingEngineOptionConnectionsNumTcpMax": {
"value": "1000000"
},
"firewallSettingEngineOptionConnectionsNumUdpMax": {
"value": "1000000"
},
"firewallSettingEngineOptionDebugModeEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDebugPacketNumMax": {
"value": "8"
},
"firewallSettingEngineOptionDisconnectTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionDrop6To4BogonsAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropEvasiveRetransmitEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDropIpZeroPayloadEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6BogonsAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6ExtType0Enabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6FragmentsLowerThanMinMtuEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6ReservedAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6SiteLocalAddressesEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDropTeredoAnomaliesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropUnknownSslProtocolEnabled": {
"value": "true"
},
"firewallSettingEngineOptionErrorTimeout": {
"value": "10 Seconds"
},
"firewallSettingEngineOptionEstablishedTimeout": {
"value": "3 Hours"
},
"firewallSettingEngineOptionEventNodesMax": {
"value": "20000"
},
"firewallSettingEngineOptionFilterIpv4Tunnels": {
"value": "Disable Detection of IPv4 Tunnels"
},
"firewallSettingEngineOptionFilterIpv6Tunnels": {
"value": "Disable Detection of IPv6 Tunnels"
},
"firewallSettingEngineOptionFinWait1Timeout": {
"value": "2 Minutes"
},
"firewallSettingEngineOptionForceAllowDhcpDns": {
"value": "Allow DNS Query and DHCP Client"
},
"firewallSettingEngineOptionForceAllowIcmpType3Code4": {
"value": "Add Force Allow rule for ICMP type3 code4"
},
"firewallSettingEngineOptionFragmentOffsetMin": {
"value": "60"
},
"firewallSettingEngineOptionFragmentSizeMin": {
"value": "120"
},
"firewallSettingEngineOptionGenerateConnectionEventsIcmpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionGenerateConnectionEventsTcpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionGenerateConnectionEventsUdpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionIcmpTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionIgnoreStatusCode0": {
"value": "None"
},
"firewallSettingEngineOptionIgnoreStatusCode1": {
"value": "None"
},
"firewallSettingEngineOptionIgnoreStatusCode2": {
"value": "None"
},
"firewallSettingEngineOptionLastAckTimeout": {
"value": "3 Minutes"
},
"firewallSettingEngineOptionLogAllPacketDataEnabled": {
"value": "false"
},
"firewallSettingEngineOptionLogEventsPerSecondMax": {
"value": "100"
},
"firewallSettingEngineOptionLogOnePacketPeriod": {
"value": "5 Minutes"
},
"firewallSettingEngineOptionLogOnePacketWithinPeriodEnabled": {
"value": "false"
},
"firewallSettingEngineOptionLogPacketLengthMax": {
"value": "1500 Bytes"
},
"firewallSettingEngineOptionLoggingPolicy": {
"value": "Default"
},
"firewallSettingEngineOptionSilentTcpConnectionDropEnabled": {
"value": "false"
},
"firewallSettingEngineOptionSslSessionSize": {
"value": "Low - 2500"
},
"firewallSettingEngineOptionSslSessionTime": {
"value": "24 Hours"
},
"firewallSettingEngineOptionStrictTerodoPortCheckEnabled": {
"value": "true"
},
"firewallSettingEngineOptionSynRcvdTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionSynSentTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionTcpMssLimit": {
"value": "128 Bytes"
},
"firewallSettingEngineOptionTunnelDepthMax": {
"value": "1"
},
"firewallSettingEngineOptionTunnelDepthMaxExceededAction": {
"value": "Drop"
},
"firewallSettingEngineOptionUdpTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionVerifyTcpChecksumEnabled": {
"value": "false"
},
"firewallSettingEngineOptionsEnabled": {
"value": "true"
},
"firewallSettingEventLogFileCachedEntriesLifeTime": {
"value": "30 Minutes"
},
"firewallSettingEventLogFileCachedEntriesNum": {
"value": "128"
},
"firewallSettingEventLogFileCachedEntriesStaleTime": {
"value": "15 Minutes"
},
"firewallSettingEventLogFileIgnoreSourceIpListId": {
"value": ""
},
"firewallSettingEventLogFileRetainNum": {
"value": "3"
},
"firewallSettingEventLogFileSizeMax": {
"value": "4 MB"
},
"firewallSettingEventsOutOfAllowedPolicyEnabled": {
"value": "true"
},
"firewallSettingFailureResponseEngineSystem": {
"value": "Fail closed"
},
"firewallSettingFailureResponsePacketSanityCheck": {
"value": "Fail closed"
},
"firewallSettingInterfaceIsolationEnabled": {
"value": "false"
},
"firewallSettingInterfaceLimitOneActiveEnabled": {
"value": "false"
},
"firewallSettingInterfacePatterns": {
"value": ""
},
"firewallSettingNetworkEngineMode": {
"value": "Inline"
},
"firewallSettingReconnaissanceBlockFingerprintProbeDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockNetworkOrPortScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpNullScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpSynFinScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpXmasAttackDuration": {
"value": "No"
},
"firewallSettingReconnaissanceDetectFingerprintProbeEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectNetworkOrPortScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpNullScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpSynFinScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpXmasAttackEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceExcludeIpListId": {
"value": "1"
},
"firewallSettingReconnaissanceIncludeIpListId": {
"value": ""
},
"firewallSettingReconnaissanceNotifyFingerprintProbeEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyNetworkOrPortScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpNullScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpSynFinScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpXmasAttackEnabled": {
"value": "true"
},
"firewallSettingSyslogConfigId": {
"value": "0"
},
"firewallSettingVirtualAndContainerNetworkScanEnabled": {
"value": "false"
},
"integrityMonitoringSettingAutoApplyRecommendationsEnabled": {
"value": "No"
},
"integrityMonitoringSettingCombinedModeProtectionSource": {
"value": "Appliance preferred"
},
"integrityMonitoringSettingContentHashAlgorithm": {
"value": "sha1"
},
"integrityMonitoringSettingCpuUsageLevel": {
"value": "High"
},
"integrityMonitoringSettingRealtimeEnabled": {
"value": "false"
},
"integrityMonitoringSettingScanCacheConfigId": {
"value": "3"
},
"integrityMonitoringSettingSyslogConfigId": {
"value": "0"
},
"integrityMonitoringSettingVirtualApplianceOptimizationScanCacheEntriesMax": {
"value": "500000"
},
"intrusionPreventionSettingAutoApplyRecommendationsEnabled": {
"value": "Yes"
},
"intrusionPreventionSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"intrusionPreventionSettingEngineOptionFragmentedIpKeepMax": {
"value": "1000"
},
"intrusionPreventionSettingEngineOptionFragmentedIpPacketSendIcmpEnabled": {
"value": "true"
},
"intrusionPreventionSettingEngineOptionFragmentedIpTimeout": {
"value": "60 Seconds"
},
"intrusionPreventionSettingEngineOptionFragmentedIpUnconcernedMacAddressBypassEnabled": {
"value": "false"
},
"intrusionPreventionSettingEngineOptionsEnabled": {
"value": "false"
},
"intrusionPreventionSettingLogDataRuleFirstMatchEnabled": {
"value": "true"
},
"intrusionPreventionSettingNsxSecurityTaggingDetectModeLevel": {
"value": "No Tagging"
},
"intrusionPreventionSettingNsxSecurityTaggingPreventModeLevel": {
"value": "No Tagging"
},
"intrusionPreventionSettingVirtualAndContainerNetworkScanEnabled": {
"value": "true"
},
"logInspectionSettingAutoApplyRecommendationsEnabled": {
"value": "No"
},
"logInspectionSettingSeverityClippingAgentEventSendSyslogLevelMin": {
"value": "Medium (6)"
},
"logInspectionSettingSeverityClippingAgentEventStoreLevelMin": {
"value": "Medium (6)"
},
"logInspectionSettingSyslogConfigId": {
"value": "0"
},
"platformSettingAgentCommunicationsDirection": {
"value": "Agent/Appliance Initiated"
},
"platformSettingAgentEventsSendInterval": {
"value": "60 Seconds"
},
"platformSettingAgentSelfProtectionEnabled": {
"value": "false"
},
"platformSettingAgentSelfProtectionPassword": {
"value": ""
},
"platformSettingAgentSelfProtectionPasswordEnabled": {
"value": "false"
},
"platformSettingAutoAssignNewIntrusionPreventionRulesEnabled": {
"value": "true"
},
"platformSettingAutoUpdateAntiMalwareEngineEnabled": {
"value": "false"
},
"platformSettingCombinedModeNetworkGroupProtectionSource": {
"value": "Agent preferred"
},
"platformSettingEnvironmentVariableOverrides": {
"value": ""
},
"platformSettingHeartbeatInactiveVmOfflineAlertEnabled": {
"value": "false"
},
"platformSettingHeartbeatInterval": {
"value": "10 Minutes"
},
"platformSettingHeartbeatLocalTimeShiftAlertThreshold": {
"value": "Unlimited"
},
"platformSettingHeartbeatMissedAlertThreshold": {
"value": "5"
},
"platformSettingInactiveAgentCleanupOverrideEnabled": {
"value": "false"
},
"platformSettingNotificationsSuppressPopupsEnabled": {
"value": "false"
},
"platformSettingRecommendationOngoingScansInterval": {
"value": "7 Days"
},
"platformSettingRelayState": {
"value": "false"
},
"platformSettingScanCacheConcurrencyMax": {
"value": "1"
},
"platformSettingScanOpenPortListId": {
"value": "1-1024"
},
"platformSettingSmartProtectionAntiMalwareGlobalServerProxyId": {
"value": ""
},
"platformSettingSmartProtectionGlobalServerEnabled": {
"value": "true"
},
"platformSettingSmartProtectionGlobalServerProxyId": {
"value": ""
},
"platformSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"platformSettingTroubleshootingLoggingLevel": {
"value": "Do Not Override"
},
"webReputationSettingAlertingEnabled": {
"value": "false"
},
"webReputationSettingAllowedUrlDomains": {
"value": ""
},
"webReputationSettingAllowedUrls": {
"value": ""
},
"webReputationSettingBlockedUrlDomains": {
"value": ""
},
"webReputationSettingBlockedUrlKeywords": {
"value": ""
},
"webReputationSettingBlockedUrls": {
"value": ""
},
"webReputationSettingBlockingPageLink": {
"value": "http://sitesafety.trendmicro.com/"
},
"webReputationSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"webReputationSettingMonitorPortListId": {
"value": "80,8080"
},
"webReputationSettingSecurityBlockUntestedPagesEnabled": {
"value": "false"
},
"webReputationSettingSecurityLevel": {
"value": "Medium"
},
"webReputationSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerAllowOffDomainGlobal": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerEnabled": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerUrls": {
"value": ""
},
"webReputationSettingSmartProtectionServerConnectionLostWarningEnabled": {
"value": "true"
},
"webReputationSettingSmartProtectionWebReputationGlobalServerProxyId": {
"value": ""
},
"webReputationSettingSyslogConfigId": {
"value": "0"
}
},
"recommendationScanMode": "ongoing",
"webReputation": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off"
},
"state": "off"
}
},
{
"ID": 3,
"activityMonitoring": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off"
},
"state": "off"
},
"antiMalware": {
"manualScanConfigurationID": 2,
"moduleStatus": {
"status": "active",
"statusMessage": "Real Time"
},
"realTimeScanConfigurationID": 1,
"realTimeScanScheduleID": 4,
"scheduledScanConfigurationID": 3,
"state": "on"
},
"applicationControl": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off"
},
"state": "off"
},
"autoRequiresUpdate": "on",
"description": "An example policy for Windows Server 2012 servers.",
"firewall": {
"globalStatefulConfigurationID": 1,
"moduleStatus": {
"status": "active",
"statusMessage": "On, 22 rules"
},
"ruleIDs": [
23,
24,
25,
28,
29,
30,
32,
33,
34,
36,
42,
46,
47,
48,
49,
52,
53,
54,
57,
58,
59,
60
],
"state": "on"
},
"integrityMonitoring": {
"moduleStatus": {
"status": "active",
"statusMessage": "On, 27 rules"
},
"ruleIDs": [
1,
2,
3,
4,
5,
6,
11,
12,
13,
14,
17,
19,
20,
23,
24,
38,
53,
54,
57,
62,
64,
103,
144,
151,
157,
159,
163
],
"state": "on"
},
"intrusionPrevention": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Prevent, no rules"
},
"state": "prevent"
},
"logInspection": {
"moduleStatus": {
"status": "active",
"statusMessage": "On, 5 rules"
},
"ruleIDs": [
18,
27,
28,
44,
75
],
"state": "on"
},
"name": "Windows Server 2012",
"parentID": 2,
"policySettings": {
"activityMonitoringSettingActivityEnabled": {
"value": "Off"
},
"activityMonitoringSettingIndicatorEnabled": {
"value": "Off"
},
"activityMonitoringSettingSyslogConfigId": {
"value": "0"
},
"antiMalwareSettingBehaviorMonitoringScanExclusionList": {
"value": ""
},
"antiMalwareSettingCombinedModeProtectionSource": {
"value": "Appliance preferred"
},
"antiMalwareSettingConnectedThreatDefenseSuspiciousFileDdanSubmissionEnabled": {
"value": "true"
},
"antiMalwareSettingConnectedThreatDefenseUseControlManagerSuspiciousObjectListEnabled": {
"value": "true"
},
"antiMalwareSettingDocumentExploitProtectionRuleExceptions": {
"value": ""
},
"antiMalwareSettingFileHashEnabled": {
"value": "false"
},
"antiMalwareSettingFileHashMd5Enabled": {
"value": "false"
},
"antiMalwareSettingFileHashSha256Enabled": {
"value": "false"
},
"antiMalwareSettingFileHashSizeMaxMbytes": {
"value": "128"
},
"antiMalwareSettingIdentifiedFilesSpaceMaxMbytes": {
"value": "1024"
},
"antiMalwareSettingMalwareScanMultithreadedProcessingEnabled": {
"value": "false"
},
"antiMalwareSettingNsxSecurityTaggingEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingOnRemediationFailureEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingRemoveOnCleanScanEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingValue": {
"value": "ANTI_VIRUS.VirusFound.threat=medium"
},
"antiMalwareSettingPredictiveMachineLearningExceptions": {
"value": ""
},
"antiMalwareSettingScanCacheOnDemandConfigId": {
"value": "1"
},
"antiMalwareSettingScanCacheRealTimeConfigId": {
"value": "2"
},
"antiMalwareSettingScanFileSizeMaxMbytes": {
"value": "0"
},
"antiMalwareSettingSmartProtectionGlobalServerEnabled": {
"value": "true"
},
"antiMalwareSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"antiMalwareSettingSmartProtectionLocalServerAllowOffDomainGlobal": {
"value": "false"
},
"antiMalwareSettingSmartProtectionLocalServerUrls": {
"value": ""
},
"antiMalwareSettingSmartProtectionServerConnectionLostWarningEnabled": {
"value": "true"
},
"antiMalwareSettingSmartScanState": {
"value": "Automatic"
},
"antiMalwareSettingSpywareApprovedList": {
"value": ""
},
"antiMalwareSettingSyslogConfigId": {
"value": "0"
},
"antiMalwareSettingVirtualApplianceOnDemandScanCacheEntriesMax": {
"value": "500000"
},
"antiMalwareSettingVirtualApplianceRealTimeScanCacheEntriesMax": {
"value": "500000"
},
"applicationControlSettingExecutionEnforcementLevel": {
"value": "Allow unrecognized software until it is explicitly blocked"
},
"applicationControlSettingRulesetMode": {
"value": "Use local ruleset"
},
"applicationControlSettingSharedRulesetId": {
"value": "0"
},
"applicationControlSettingSyslogConfigId": {
"value": "0"
},
"firewallSettingAntiEvasionCheckEvasiveRetransmit": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckFinNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckFragmentedPackets": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckOutNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckPaws": {
"value": "Ignore"
},
"firewallSettingAntiEvasionCheckRstNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpChecksum": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpCongestionFlags": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpPawsZero": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpRstFinFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSplitHandshake": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynFinFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynRstFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynWithData": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpUrgentFlags": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpZeroFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionSecurityPosture": {
"value": "Normal"
},
"firewallSettingAntiEvasionTcpPawsWindowPolicy": {
"value": "0"
},
"firewallSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"firewallSettingConfigPackageExceedsAlertMaxEnabled": {
"value": "true"
},
"firewallSettingEngineOptionAckTimeout": {
"value": "1 Second"
},
"firewallSettingEngineOptionAllowNullIpEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBlockIpv6Agent8AndEarlierEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBlockIpv6Agent9AndLaterEnabled": {
"value": "false"
},
"firewallSettingEngineOptionBlockSameSrcDstIpEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBootStartTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionBypassCiscoWaasConnectionsEnabled": {
"value": "false"
},
"firewallSettingEngineOptionCloseTimeout": {
"value": "0 Seconds"
},
"firewallSettingEngineOptionCloseWaitTimeout": {
"value": "2 Minutes"
},
"firewallSettingEngineOptionClosingTimeout": {
"value": "1 Second"
},
"firewallSettingEngineOptionColdStartTimeout": {
"value": "5 Minutes"
},
"firewallSettingEngineOptionConnectionCleanupTimeout": {
"value": "10 Seconds"
},
"firewallSettingEngineOptionConnectionsCleanupMax": {
"value": "1000"
},
"firewallSettingEngineOptionConnectionsNumIcmpMax": {
"value": "10000"
},
"firewallSettingEngineOptionConnectionsNumTcpMax": {
"value": "1000000"
},
"firewallSettingEngineOptionConnectionsNumUdpMax": {
"value": "1000000"
},
"firewallSettingEngineOptionDebugModeEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDebugPacketNumMax": {
"value": "8"
},
"firewallSettingEngineOptionDisconnectTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionDrop6To4BogonsAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropEvasiveRetransmitEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDropIpZeroPayloadEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6BogonsAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6ExtType0Enabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6FragmentsLowerThanMinMtuEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6ReservedAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6SiteLocalAddressesEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDropTeredoAnomaliesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropUnknownSslProtocolEnabled": {
"value": "true"
},
"firewallSettingEngineOptionErrorTimeout": {
"value": "10 Seconds"
},
"firewallSettingEngineOptionEstablishedTimeout": {
"value": "3 Hours"
},
"firewallSettingEngineOptionEventNodesMax": {
"value": "20000"
},
"firewallSettingEngineOptionFilterIpv4Tunnels": {
"value": "Disable Detection of IPv4 Tunnels"
},
"firewallSettingEngineOptionFilterIpv6Tunnels": {
"value": "Disable Detection of IPv6 Tunnels"
},
"firewallSettingEngineOptionFinWait1Timeout": {
"value": "2 Minutes"
},
"firewallSettingEngineOptionForceAllowDhcpDns": {
"value": "Allow DNS Query and DHCP Client"
},
"firewallSettingEngineOptionForceAllowIcmpType3Code4": {
"value": "Add Force Allow rule for ICMP type3 code4"
},
"firewallSettingEngineOptionFragmentOffsetMin": {
"value": "60"
},
"firewallSettingEngineOptionFragmentSizeMin": {
"value": "120"
},
"firewallSettingEngineOptionGenerateConnectionEventsIcmpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionGenerateConnectionEventsTcpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionGenerateConnectionEventsUdpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionIcmpTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionIgnoreStatusCode0": {
"value": "None"
},
"firewallSettingEngineOptionIgnoreStatusCode1": {
"value": "None"
},
"firewallSettingEngineOptionIgnoreStatusCode2": {
"value": "None"
},
"firewallSettingEngineOptionLastAckTimeout": {
"value": "3 Minutes"
},
"firewallSettingEngineOptionLogAllPacketDataEnabled": {
"value": "false"
},
"firewallSettingEngineOptionLogEventsPerSecondMax": {
"value": "100"
},
"firewallSettingEngineOptionLogOnePacketPeriod": {
"value": "5 Minutes"
},
"firewallSettingEngineOptionLogOnePacketWithinPeriodEnabled": {
"value": "false"
},
"firewallSettingEngineOptionLogPacketLengthMax": {
"value": "1500 Bytes"
},
"firewallSettingEngineOptionLoggingPolicy": {
"value": "Default"
},
"firewallSettingEngineOptionSilentTcpConnectionDropEnabled": {
"value": "false"
},
"firewallSettingEngineOptionSslSessionSize": {
"value": "Low - 2500"
},
"firewallSettingEngineOptionSslSessionTime": {
"value": "24 Hours"
},
"firewallSettingEngineOptionStrictTerodoPortCheckEnabled": {
"value": "true"
},
"firewallSettingEngineOptionSynRcvdTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionSynSentTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionTcpMssLimit": {
"value": "128 Bytes"
},
"firewallSettingEngineOptionTunnelDepthMax": {
"value": "1"
},
"firewallSettingEngineOptionTunnelDepthMaxExceededAction": {
"value": "Drop"
},
"firewallSettingEngineOptionUdpTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionVerifyTcpChecksumEnabled": {
"value": "false"
},
"firewallSettingEngineOptionsEnabled": {
"value": "false"
},
"firewallSettingEventLogFileCachedEntriesLifeTime": {
"value": "30 Minutes"
},
"firewallSettingEventLogFileCachedEntriesNum": {
"value": "128"
},
"firewallSettingEventLogFileCachedEntriesStaleTime": {
"value": "15 Minutes"
},
"firewallSettingEventLogFileIgnoreSourceIpListId": {
"value": ""
},
"firewallSettingEventLogFileRetainNum": {
"value": "3"
},
"firewallSettingEventLogFileSizeMax": {
"value": "4 MB"
},
"firewallSettingEventsOutOfAllowedPolicyEnabled": {
"value": "true"
},
"firewallSettingFailureResponseEngineSystem": {
"value": "Fail closed"
},
"firewallSettingFailureResponsePacketSanityCheck": {
"value": "Fail closed"
},
"firewallSettingInterfaceIsolationEnabled": {
"value": "false"
},
"firewallSettingInterfaceLimitOneActiveEnabled": {
"value": "false"
},
"firewallSettingInterfacePatterns": {
"value": ""
},
"firewallSettingNetworkEngineMode": {
"value": "Inline"
},
"firewallSettingReconnaissanceBlockFingerprintProbeDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockNetworkOrPortScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpNullScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpSynFinScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpXmasAttackDuration": {
"value": "No"
},
"firewallSettingReconnaissanceDetectFingerprintProbeEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectNetworkOrPortScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpNullScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpSynFinScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpXmasAttackEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceExcludeIpListId": {
"value": "1"
},
"firewallSettingReconnaissanceIncludeIpListId": {
"value": ""
},
"firewallSettingReconnaissanceNotifyFingerprintProbeEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyNetworkOrPortScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpNullScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpSynFinScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpXmasAttackEnabled": {
"value": "true"
},
"firewallSettingSyslogConfigId": {
"value": "0"
},
"firewallSettingVirtualAndContainerNetworkScanEnabled": {
"value": "false"
},
"integrityMonitoringSettingAutoApplyRecommendationsEnabled": {
"value": "No"
},
"integrityMonitoringSettingCombinedModeProtectionSource": {
"value": "Appliance preferred"
},
"integrityMonitoringSettingContentHashAlgorithm": {
"value": "sha1"
},
"integrityMonitoringSettingCpuUsageLevel": {
"value": "High"
},
"integrityMonitoringSettingRealtimeEnabled": {
"value": "false"
},
"integrityMonitoringSettingScanCacheConfigId": {
"value": "3"
},
"integrityMonitoringSettingSyslogConfigId": {
"value": "0"
},
"integrityMonitoringSettingVirtualApplianceOptimizationScanCacheEntriesMax": {
"value": "500000"
},
"intrusionPreventionSettingAutoApplyRecommendationsEnabled": {
"value": "Yes"
},
"intrusionPreventionSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"intrusionPreventionSettingEngineOptionFragmentedIpKeepMax": {
"value": "1000"
},
"intrusionPreventionSettingEngineOptionFragmentedIpPacketSendIcmpEnabled": {
"value": "true"
},
"intrusionPreventionSettingEngineOptionFragmentedIpTimeout": {
"value": "60 Seconds"
},
"intrusionPreventionSettingEngineOptionFragmentedIpUnconcernedMacAddressBypassEnabled": {
"value": "false"
},
"intrusionPreventionSettingEngineOptionsEnabled": {
"value": "false"
},
"intrusionPreventionSettingLogDataRuleFirstMatchEnabled": {
"value": "true"
},
"intrusionPreventionSettingNsxSecurityTaggingDetectModeLevel": {
"value": "No Tagging"
},
"intrusionPreventionSettingNsxSecurityTaggingPreventModeLevel": {
"value": "No Tagging"
},
"intrusionPreventionSettingVirtualAndContainerNetworkScanEnabled": {
"value": "true"
},
"logInspectionSettingAutoApplyRecommendationsEnabled": {
"value": "No"
},
"logInspectionSettingSeverityClippingAgentEventSendSyslogLevelMin": {
"value": "Medium (6)"
},
"logInspectionSettingSeverityClippingAgentEventStoreLevelMin": {
"value": "Medium (6)"
},
"logInspectionSettingSyslogConfigId": {
"value": "0"
},
"platformSettingAgentCommunicationsDirection": {
"value": "Agent/Appliance Initiated"
},
"platformSettingAgentEventsSendInterval": {
"value": "60 Seconds"
},
"platformSettingAgentSelfProtectionEnabled": {
"value": "false"
},
"platformSettingAgentSelfProtectionPassword": {
"value": ""
},
"platformSettingAgentSelfProtectionPasswordEnabled": {
"value": "false"
},
"platformSettingAutoAssignNewIntrusionPreventionRulesEnabled": {
"value": "true"
},
"platformSettingAutoUpdateAntiMalwareEngineEnabled": {
"value": "false"
},
"platformSettingCombinedModeNetworkGroupProtectionSource": {
"value": "Agent preferred"
},
"platformSettingEnvironmentVariableOverrides": {
"value": ""
},
"platformSettingHeartbeatInactiveVmOfflineAlertEnabled": {
"value": "false"
},
"platformSettingHeartbeatInterval": {
"value": "10 Minutes"
},
"platformSettingHeartbeatLocalTimeShiftAlertThreshold": {
"value": "Unlimited"
},
"platformSettingHeartbeatMissedAlertThreshold": {
"value": "5"
},
"platformSettingInactiveAgentCleanupOverrideEnabled": {
"value": "false"
},
"platformSettingNotificationsSuppressPopupsEnabled": {
"value": "false"
},
"platformSettingRecommendationOngoingScansInterval": {
"value": "7 Days"
},
"platformSettingRelayState": {
"value": "false"
},
"platformSettingScanCacheConcurrencyMax": {
"value": "1"
},
"platformSettingScanOpenPortListId": {
"value": "1-1024"
},
"platformSettingSmartProtectionAntiMalwareGlobalServerProxyId": {
"value": ""
},
"platformSettingSmartProtectionGlobalServerEnabled": {
"value": "true"
},
"platformSettingSmartProtectionGlobalServerProxyId": {
"value": ""
},
"platformSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"platformSettingTroubleshootingLoggingLevel": {
"value": "Do Not Override"
},
"webReputationSettingAlertingEnabled": {
"value": "false"
},
"webReputationSettingAllowedUrlDomains": {
"value": ""
},
"webReputationSettingAllowedUrls": {
"value": ""
},
"webReputationSettingBlockedUrlDomains": {
"value": ""
},
"webReputationSettingBlockedUrlKeywords": {
"value": ""
},
"webReputationSettingBlockedUrls": {
"value": ""
},
"webReputationSettingBlockingPageLink": {
"value": "http://sitesafety.trendmicro.com/"
},
"webReputationSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"webReputationSettingMonitorPortListId": {
"value": "80,8080"
},
"webReputationSettingSecurityBlockUntestedPagesEnabled": {
"value": "false"
},
"webReputationSettingSecurityLevel": {
"value": "Medium"
},
"webReputationSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerAllowOffDomainGlobal": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerEnabled": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerUrls": {
"value": ""
},
"webReputationSettingSmartProtectionServerConnectionLostWarningEnabled": {
"value": "true"
},
"webReputationSettingSmartProtectionWebReputationGlobalServerProxyId": {
"value": ""
},
"webReputationSettingSyslogConfigId": {
"value": "0"
}
},
"recommendationScanMode": "ongoing",
"webReputation": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off"
},
"state": "off"
}
},
{
"ID": 4,
"activityMonitoring": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off"
},
"state": "off"
},
"antiMalware": {
"manualScanConfigurationID": 2,
"moduleStatus": {
"status": "active",
"statusMessage": "Real Time"
},
"realTimeScanConfigurationID": 1,
"realTimeScanScheduleID": 4,
"scheduledScanConfigurationID": 3,
"state": "on"
},
"applicationControl": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off"
},
"state": "off"
},
"autoRequiresUpdate": "on",
"description": "An example policy for Windows Server 2008 servers.",
"firewall": {
"globalStatefulConfigurationID": 1,
"moduleStatus": {
"status": "active",
"statusMessage": "On, 22 rules"
},
"ruleIDs": [
23,
24,
25,
28,
29,
30,
32,
33,
34,
36,
42,
46,
47,
48,
49,
52,
53,
54,
57,
58,
59,
60
],
"state": "on"
},
"integrityMonitoring": {
"moduleStatus": {
"status": "active",
"statusMessage": "On, 27 rules"
},
"ruleIDs": [
1,
2,
3,
4,
5,
6,
11,
12,
13,
14,
17,
19,
20,
23,
24,
38,
53,
54,
57,
62,
64,
103,
144,
151,
157,
159,
163
],
"state": "on"
},
"intrusionPrevention": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Prevent, no rules"
},
"state": "prevent"
},
"logInspection": {
"moduleStatus": {
"status": "active",
"statusMessage": "On, 5 rules"
},
"ruleIDs": [
18,
27,
28,
44,
75
],
"state": "on"
},
"name": "Windows Server 2008",
"parentID": 2,
"policySettings": {
"activityMonitoringSettingActivityEnabled": {
"value": "Off"
},
"activityMonitoringSettingIndicatorEnabled": {
"value": "Off"
},
"activityMonitoringSettingSyslogConfigId": {
"value": "0"
},
"antiMalwareSettingBehaviorMonitoringScanExclusionList": {
"value": ""
},
"antiMalwareSettingCombinedModeProtectionSource": {
"value": "Appliance preferred"
},
"antiMalwareSettingConnectedThreatDefenseSuspiciousFileDdanSubmissionEnabled": {
"value": "true"
},
"antiMalwareSettingConnectedThreatDefenseUseControlManagerSuspiciousObjectListEnabled": {
"value": "true"
},
"antiMalwareSettingDocumentExploitProtectionRuleExceptions": {
"value": ""
},
"antiMalwareSettingFileHashEnabled": {
"value": "false"
},
"antiMalwareSettingFileHashMd5Enabled": {
"value": "false"
},
"antiMalwareSettingFileHashSha256Enabled": {
"value": "false"
},
"antiMalwareSettingFileHashSizeMaxMbytes": {
"value": "128"
},
"antiMalwareSettingIdentifiedFilesSpaceMaxMbytes": {
"value": "1024"
},
"antiMalwareSettingMalwareScanMultithreadedProcessingEnabled": {
"value": "false"
},
"antiMalwareSettingNsxSecurityTaggingEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingOnRemediationFailureEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingRemoveOnCleanScanEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingValue": {
"value": "ANTI_VIRUS.VirusFound.threat=medium"
},
"antiMalwareSettingPredictiveMachineLearningExceptions": {
"value": ""
},
"antiMalwareSettingScanCacheOnDemandConfigId": {
"value": "1"
},
"antiMalwareSettingScanCacheRealTimeConfigId": {
"value": "2"
},
"antiMalwareSettingScanFileSizeMaxMbytes": {
"value": "0"
},
"antiMalwareSettingSmartProtectionGlobalServerEnabled": {
"value": "true"
},
"antiMalwareSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"antiMalwareSettingSmartProtectionLocalServerAllowOffDomainGlobal": {
"value": "false"
},
"antiMalwareSettingSmartProtectionLocalServerUrls": {
"value": ""
},
"antiMalwareSettingSmartProtectionServerConnectionLostWarningEnabled": {
"value": "true"
},
"antiMalwareSettingSmartScanState": {
"value": "Automatic"
},
"antiMalwareSettingSpywareApprovedList": {
"value": ""
},
"antiMalwareSettingSyslogConfigId": {
"value": "0"
},
"antiMalwareSettingVirtualApplianceOnDemandScanCacheEntriesMax": {
"value": "500000"
},
"antiMalwareSettingVirtualApplianceRealTimeScanCacheEntriesMax": {
"value": "500000"
},
"applicationControlSettingExecutionEnforcementLevel": {
"value": "Allow unrecognized software until it is explicitly blocked"
},
"applicationControlSettingRulesetMode": {
"value": "Use local ruleset"
},
"applicationControlSettingSharedRulesetId": {
"value": "0"
},
"applicationControlSettingSyslogConfigId": {
"value": "0"
},
"firewallSettingAntiEvasionCheckEvasiveRetransmit": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckFinNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckFragmentedPackets": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckOutNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckPaws": {
"value": "Ignore"
},
"firewallSettingAntiEvasionCheckRstNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpChecksum": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpCongestionFlags": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpPawsZero": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpRstFinFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSplitHandshake": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynFinFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynRstFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynWithData": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpUrgentFlags": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpZeroFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionSecurityPosture": {
"value": "Normal"
},
"firewallSettingAntiEvasionTcpPawsWindowPolicy": {
"value": "0"
},
"firewallSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"firewallSettingConfigPackageExceedsAlertMaxEnabled": {
"value": "true"
},
"firewallSettingEngineOptionAckTimeout": {
"value": "1 Second"
},
"firewallSettingEngineOptionAllowNullIpEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBlockIpv6Agent8AndEarlierEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBlockIpv6Agent9AndLaterEnabled": {
"value": "false"
},
"firewallSettingEngineOptionBlockSameSrcDstIpEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBootStartTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionBypassCiscoWaasConnectionsEnabled": {
"value": "false"
},
"firewallSettingEngineOptionCloseTimeout": {
"value": "0 Seconds"
},
"firewallSettingEngineOptionCloseWaitTimeout": {
"value": "2 Minutes"
},
"firewallSettingEngineOptionClosingTimeout": {
"value": "1 Second"
},
"firewallSettingEngineOptionColdStartTimeout": {
"value": "5 Minutes"
},
"firewallSettingEngineOptionConnectionCleanupTimeout": {
"value": "10 Seconds"
},
"firewallSettingEngineOptionConnectionsCleanupMax": {
"value": "1000"
},
"firewallSettingEngineOptionConnectionsNumIcmpMax": {
"value": "10000"
},
"firewallSettingEngineOptionConnectionsNumTcpMax": {
"value": "1000000"
},
"firewallSettingEngineOptionConnectionsNumUdpMax": {
"value": "1000000"
},
"firewallSettingEngineOptionDebugModeEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDebugPacketNumMax": {
"value": "8"
},
"firewallSettingEngineOptionDisconnectTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionDrop6To4BogonsAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropEvasiveRetransmitEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDropIpZeroPayloadEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6BogonsAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6ExtType0Enabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6FragmentsLowerThanMinMtuEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6ReservedAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6SiteLocalAddressesEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDropTeredoAnomaliesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropUnknownSslProtocolEnabled": {
"value": "true"
},
"firewallSettingEngineOptionErrorTimeout": {
"value": "10 Seconds"
},
"firewallSettingEngineOptionEstablishedTimeout": {
"value": "3 Hours"
},
"firewallSettingEngineOptionEventNodesMax": {
"value": "20000"
},
"firewallSettingEngineOptionFilterIpv4Tunnels": {
"value": "Disable Detection of IPv4 Tunnels"
},
"firewallSettingEngineOptionFilterIpv6Tunnels": {
"value": "Disable Detection of IPv6 Tunnels"
},
"firewallSettingEngineOptionFinWait1Timeout": {
"value": "2 Minutes"
},
"firewallSettingEngineOptionForceAllowDhcpDns": {
"value": "Allow DNS Query and DHCP Client"
},
"firewallSettingEngineOptionForceAllowIcmpType3Code4": {
"value": "Add Force Allow rule for ICMP type3 code4"
},
"firewallSettingEngineOptionFragmentOffsetMin": {
"value": "60"
},
"firewallSettingEngineOptionFragmentSizeMin": {
"value": "120"
},
"firewallSettingEngineOptionGenerateConnectionEventsIcmpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionGenerateConnectionEventsTcpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionGenerateConnectionEventsUdpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionIcmpTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionIgnoreStatusCode0": {
"value": "None"
},
"firewallSettingEngineOptionIgnoreStatusCode1": {
"value": "None"
},
"firewallSettingEngineOptionIgnoreStatusCode2": {
"value": "None"
},
"firewallSettingEngineOptionLastAckTimeout": {
"value": "3 Minutes"
},
"firewallSettingEngineOptionLogAllPacketDataEnabled": {
"value": "false"
},
"firewallSettingEngineOptionLogEventsPerSecondMax": {
"value": "100"
},
"firewallSettingEngineOptionLogOnePacketPeriod": {
"value": "5 Minutes"
},
"firewallSettingEngineOptionLogOnePacketWithinPeriodEnabled": {
"value": "false"
},
"firewallSettingEngineOptionLogPacketLengthMax": {
"value": "1500 Bytes"
},
"firewallSettingEngineOptionLoggingPolicy": {
"value": "Default"
},
"firewallSettingEngineOptionSilentTcpConnectionDropEnabled": {
"value": "false"
},
"firewallSettingEngineOptionSslSessionSize": {
"value": "Low - 2500"
},
"firewallSettingEngineOptionSslSessionTime": {
"value": "24 Hours"
},
"firewallSettingEngineOptionStrictTerodoPortCheckEnabled": {
"value": "true"
},
"firewallSettingEngineOptionSynRcvdTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionSynSentTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionTcpMssLimit": {
"value": "128 Bytes"
},
"firewallSettingEngineOptionTunnelDepthMax": {
"value": "1"
},
"firewallSettingEngineOptionTunnelDepthMaxExceededAction": {
"value": "Drop"
},
"firewallSettingEngineOptionUdpTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionVerifyTcpChecksumEnabled": {
"value": "false"
},
"firewallSettingEngineOptionsEnabled": {
"value": "false"
},
"firewallSettingEventLogFileCachedEntriesLifeTime": {
"value": "30 Minutes"
},
"firewallSettingEventLogFileCachedEntriesNum": {
"value": "128"
},
"firewallSettingEventLogFileCachedEntriesStaleTime": {
"value": "15 Minutes"
},
"firewallSettingEventLogFileIgnoreSourceIpListId": {
"value": ""
},
"firewallSettingEventLogFileRetainNum": {
"value": "3"
},
"firewallSettingEventLogFileSizeMax": {
"value": "4 MB"
},
"firewallSettingEventsOutOfAllowedPolicyEnabled": {
"value": "true"
},
"firewallSettingFailureResponseEngineSystem": {
"value": "Fail closed"
},
"firewallSettingFailureResponsePacketSanityCheck": {
"value": "Fail closed"
},
"firewallSettingInterfaceIsolationEnabled": {
"value": "false"
},
"firewallSettingInterfaceLimitOneActiveEnabled": {
"value": "false"
},
"firewallSettingInterfacePatterns": {
"value": ""
},
"firewallSettingNetworkEngineMode": {
"value": "Inline"
},
"firewallSettingReconnaissanceBlockFingerprintProbeDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockNetworkOrPortScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpNullScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpSynFinScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpXmasAttackDuration": {
"value": "No"
},
"firewallSettingReconnaissanceDetectFingerprintProbeEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectNetworkOrPortScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpNullScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpSynFinScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpXmasAttackEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceExcludeIpListId": {
"value": "1"
},
"firewallSettingReconnaissanceIncludeIpListId": {
"value": ""
},
"firewallSettingReconnaissanceNotifyFingerprintProbeEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyNetworkOrPortScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpNullScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpSynFinScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpXmasAttackEnabled": {
"value": "true"
},
"firewallSettingSyslogConfigId": {
"value": "0"
},
"firewallSettingVirtualAndContainerNetworkScanEnabled": {
"value": "false"
},
"integrityMonitoringSettingAutoApplyRecommendationsEnabled": {
"value": "No"
},
"integrityMonitoringSettingCombinedModeProtectionSource": {
"value": "Appliance preferred"
},
"integrityMonitoringSettingContentHashAlgorithm": {
"value": "sha1"
},
"integrityMonitoringSettingCpuUsageLevel": {
"value": "High"
},
"integrityMonitoringSettingRealtimeEnabled": {
"value": "false"
},
"integrityMonitoringSettingScanCacheConfigId": {
"value": "3"
},
"integrityMonitoringSettingSyslogConfigId": {
"value": "0"
},
"integrityMonitoringSettingVirtualApplianceOptimizationScanCacheEntriesMax": {
"value": "500000"
},
"intrusionPreventionSettingAutoApplyRecommendationsEnabled": {
"value": "Yes"
},
"intrusionPreventionSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"intrusionPreventionSettingEngineOptionFragmentedIpKeepMax": {
"value": "1000"
},
"intrusionPreventionSettingEngineOptionFragmentedIpPacketSendIcmpEnabled": {
"value": "true"
},
"intrusionPreventionSettingEngineOptionFragmentedIpTimeout": {
"value": "60 Seconds"
},
"intrusionPreventionSettingEngineOptionFragmentedIpUnconcernedMacAddressBypassEnabled": {
"value": "false"
},
"intrusionPreventionSettingEngineOptionsEnabled": {
"value": "false"
},
"intrusionPreventionSettingLogDataRuleFirstMatchEnabled": {
"value": "true"
},
"intrusionPreventionSettingNsxSecurityTaggingDetectModeLevel": {
"value": "No Tagging"
},
"intrusionPreventionSettingNsxSecurityTaggingPreventModeLevel": {
"value": "No Tagging"
},
"intrusionPreventionSettingVirtualAndContainerNetworkScanEnabled": {
"value": "true"
},
"logInspectionSettingAutoApplyRecommendationsEnabled": {
"value": "No"
},
"logInspectionSettingSeverityClippingAgentEventSendSyslogLevelMin": {
"value": "Medium (6)"
},
"logInspectionSettingSeverityClippingAgentEventStoreLevelMin": {
"value": "Medium (6)"
},
"logInspectionSettingSyslogConfigId": {
"value": "0"
},
"platformSettingAgentCommunicationsDirection": {
"value": "Agent/Appliance Initiated"
},
"platformSettingAgentEventsSendInterval": {
"value": "60 Seconds"
},
"platformSettingAgentSelfProtectionEnabled": {
"value": "false"
},
"platformSettingAgentSelfProtectionPassword": {
"value": ""
},
"platformSettingAgentSelfProtectionPasswordEnabled": {
"value": "false"
},
"platformSettingAutoAssignNewIntrusionPreventionRulesEnabled": {
"value": "true"
},
"platformSettingAutoUpdateAntiMalwareEngineEnabled": {
"value": "false"
},
"platformSettingCombinedModeNetworkGroupProtectionSource": {
"value": "Agent preferred"
},
"platformSettingEnvironmentVariableOverrides": {
"value": ""
},
"platformSettingHeartbeatInactiveVmOfflineAlertEnabled": {
"value": "false"
},
"platformSettingHeartbeatInterval": {
"value": "10 Minutes"
},
"platformSettingHeartbeatLocalTimeShiftAlertThreshold": {
"value": "Unlimited"
},
"platformSettingHeartbeatMissedAlertThreshold": {
"value": "5"
},
"platformSettingInactiveAgentCleanupOverrideEnabled": {
"value": "false"
},
"platformSettingNotificationsSuppressPopupsEnabled": {
"value": "false"
},
"platformSettingRecommendationOngoingScansInterval": {
"value": "7 Days"
},
"platformSettingRelayState": {
"value": "false"
},
"platformSettingScanCacheConcurrencyMax": {
"value": "1"
},
"platformSettingScanOpenPortListId": {
"value": "1-1024"
},
"platformSettingSmartProtectionAntiMalwareGlobalServerProxyId": {
"value": ""
},
"platformSettingSmartProtectionGlobalServerEnabled": {
"value": "true"
},
"platformSettingSmartProtectionGlobalServerProxyId": {
"value": ""
},
"platformSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"platformSettingTroubleshootingLoggingLevel": {
"value": "Do Not Override"
},
"webReputationSettingAlertingEnabled": {
"value": "false"
},
"webReputationSettingAllowedUrlDomains": {
"value": ""
},
"webReputationSettingAllowedUrls": {
"value": ""
},
"webReputationSettingBlockedUrlDomains": {
"value": ""
},
"webReputationSettingBlockedUrlKeywords": {
"value": ""
},
"webReputationSettingBlockedUrls": {
"value": ""
},
"webReputationSettingBlockingPageLink": {
"value": "http://sitesafety.trendmicro.com/"
},
"webReputationSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"webReputationSettingMonitorPortListId": {
"value": "80,8080"
},
"webReputationSettingSecurityBlockUntestedPagesEnabled": {
"value": "false"
},
"webReputationSettingSecurityLevel": {
"value": "Medium"
},
"webReputationSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerAllowOffDomainGlobal": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerEnabled": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerUrls": {
"value": ""
},
"webReputationSettingSmartProtectionServerConnectionLostWarningEnabled": {
"value": "true"
},
"webReputationSettingSmartProtectionWebReputationGlobalServerProxyId": {
"value": ""
},
"webReputationSettingSyslogConfigId": {
"value": "0"
}
},
"recommendationScanMode": "ongoing",
"webReputation": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off"
},
"state": "off"
}
},
{
"ID": 5,
"activityMonitoring": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off"
},
"state": "off"
},
"antiMalware": {
"manualScanConfigurationID": 2,
"moduleStatus": {
"status": "active",
"statusMessage": "Real Time"
},
"realTimeScanConfigurationID": 1,
"realTimeScanScheduleID": 4,
"scheduledScanConfigurationID": 3,
"state": "on"
},
"applicationControl": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off"
},
"state": "off"
},
"autoRequiresUpdate": "on",
"description": "An example policy for Windows Server 2003 servers.",
"firewall": {
"globalStatefulConfigurationID": 1,
"moduleStatus": {
"status": "active",
"statusMessage": "On, 22 rules"
},
"ruleIDs": [
23,
24,
25,
28,
29,
30,
32,
33,
34,
36,
42,
46,
47,
48,
49,
52,
53,
54,
57,
58,
59,
60
],
"state": "on"
},
"integrityMonitoring": {
"moduleStatus": {
"status": "active",
"statusMessage": "On, 27 rules"
},
"ruleIDs": [
1,
2,
3,
4,
5,
6,
11,
12,
13,
14,
17,
19,
20,
23,
24,
38,
53,
54,
57,
62,
64,
103,
144,
151,
157,
159,
163
],
"state": "on"
},
"intrusionPrevention": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Prevent, no rules"
},
"state": "prevent"
},
"logInspection": {
"moduleStatus": {
"status": "active",
"statusMessage": "On, 6 rules"
},
"ruleIDs": [
18,
27,
28,
39,
44,
75
],
"state": "on"
},
"name": "Windows Server 2003",
"parentID": 2,
"policySettings": {
"activityMonitoringSettingActivityEnabled": {
"value": "Off"
},
"activityMonitoringSettingIndicatorEnabled": {
"value": "Off"
},
"activityMonitoringSettingSyslogConfigId": {
"value": "0"
},
"antiMalwareSettingBehaviorMonitoringScanExclusionList": {
"value": ""
},
"antiMalwareSettingCombinedModeProtectionSource": {
"value": "Appliance preferred"
},
"antiMalwareSettingConnectedThreatDefenseSuspiciousFileDdanSubmissionEnabled": {
"value": "true"
},
"antiMalwareSettingConnectedThreatDefenseUseControlManagerSuspiciousObjectListEnabled": {
"value": "true"
},
"antiMalwareSettingDocumentExploitProtectionRuleExceptions": {
"value": ""
},
"antiMalwareSettingFileHashEnabled": {
"value": "false"
},
"antiMalwareSettingFileHashMd5Enabled": {
"value": "false"
},
"antiMalwareSettingFileHashSha256Enabled": {
"value": "false"
},
"antiMalwareSettingFileHashSizeMaxMbytes": {
"value": "128"
},
"antiMalwareSettingIdentifiedFilesSpaceMaxMbytes": {
"value": "1024"
},
"antiMalwareSettingMalwareScanMultithreadedProcessingEnabled": {
"value": "false"
},
"antiMalwareSettingNsxSecurityTaggingEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingOnRemediationFailureEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingRemoveOnCleanScanEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingValue": {
"value": "ANTI_VIRUS.VirusFound.threat=medium"
},
"antiMalwareSettingPredictiveMachineLearningExceptions": {
"value": ""
},
"antiMalwareSettingScanCacheOnDemandConfigId": {
"value": "1"
},
"antiMalwareSettingScanCacheRealTimeConfigId": {
"value": "2"
},
"antiMalwareSettingScanFileSizeMaxMbytes": {
"value": "0"
},
"antiMalwareSettingSmartProtectionGlobalServerEnabled": {
"value": "true"
},
"antiMalwareSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"antiMalwareSettingSmartProtectionLocalServerAllowOffDomainGlobal": {
"value": "false"
},
"antiMalwareSettingSmartProtectionLocalServerUrls": {
"value": ""
},
"antiMalwareSettingSmartProtectionServerConnectionLostWarningEnabled": {
"value": "true"
},
"antiMalwareSettingSmartScanState": {
"value": "Automatic"
},
"antiMalwareSettingSpywareApprovedList": {
"value": ""
},
"antiMalwareSettingSyslogConfigId": {
"value": "0"
},
"antiMalwareSettingVirtualApplianceOnDemandScanCacheEntriesMax": {
"value": "500000"
},
"antiMalwareSettingVirtualApplianceRealTimeScanCacheEntriesMax": {
"value": "500000"
},
"applicationControlSettingExecutionEnforcementLevel": {
"value": "Allow unrecognized software until it is explicitly blocked"
},
"applicationControlSettingRulesetMode": {
"value": "Use local ruleset"
},
"applicationControlSettingSharedRulesetId": {
"value": "0"
},
"applicationControlSettingSyslogConfigId": {
"value": "0"
},
"firewallSettingAntiEvasionCheckEvasiveRetransmit": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckFinNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckFragmentedPackets": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckOutNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckPaws": {
"value": "Ignore"
},
"firewallSettingAntiEvasionCheckRstNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpChecksum": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpCongestionFlags": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpPawsZero": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpRstFinFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSplitHandshake": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynFinFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynRstFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynWithData": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpUrgentFlags": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpZeroFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionSecurityPosture": {
"value": "Normal"
},
"firewallSettingAntiEvasionTcpPawsWindowPolicy": {
"value": "0"
},
"firewallSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"firewallSettingConfigPackageExceedsAlertMaxEnabled": {
"value": "true"
},
"firewallSettingEngineOptionAckTimeout": {
"value": "1 Second"
},
"firewallSettingEngineOptionAllowNullIpEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBlockIpv6Agent8AndEarlierEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBlockIpv6Agent9AndLaterEnabled": {
"value": "false"
},
"firewallSettingEngineOptionBlockSameSrcDstIpEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBootStartTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionBypassCiscoWaasConnectionsEnabled": {
"value": "false"
},
"firewallSettingEngineOptionCloseTimeout": {
"value": "0 Seconds"
},
"firewallSettingEngineOptionCloseWaitTimeout": {
"value": "2 Minutes"
},
"firewallSettingEngineOptionClosingTimeout": {
"value": "1 Second"
},
"firewallSettingEngineOptionColdStartTimeout": {
"value": "5 Minutes"
},
"firewallSettingEngineOptionConnectionCleanupTimeout": {
"value": "10 Seconds"
},
"firewallSettingEngineOptionConnectionsCleanupMax": {
"value": "1000"
},
"firewallSettingEngineOptionConnectionsNumIcmpMax": {
"value": "10000"
},
"firewallSettingEngineOptionConnectionsNumTcpMax": {
"value": "1000000"
},
"firewallSettingEngineOptionConnectionsNumUdpMax": {
"value": "1000000"
},
"firewallSettingEngineOptionDebugModeEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDebugPacketNumMax": {
"value": "8"
},
"firewallSettingEngineOptionDisconnectTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionDrop6To4BogonsAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropEvasiveRetransmitEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDropIpZeroPayloadEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6BogonsAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6ExtType0Enabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6FragmentsLowerThanMinMtuEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6ReservedAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6SiteLocalAddressesEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDropTeredoAnomaliesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropUnknownSslProtocolEnabled": {
"value": "true"
},
"firewallSettingEngineOptionErrorTimeout": {
"value": "10 Seconds"
},
"firewallSettingEngineOptionEstablishedTimeout": {
"value": "3 Hours"
},
"firewallSettingEngineOptionEventNodesMax": {
"value": "20000"
},
"firewallSettingEngineOptionFilterIpv4Tunnels": {
"value": "Disable Detection of IPv4 Tunnels"
},
"firewallSettingEngineOptionFilterIpv6Tunnels": {
"value": "Disable Detection of IPv6 Tunnels"
},
"firewallSettingEngineOptionFinWait1Timeout": {
"value": "2 Minutes"
},
"firewallSettingEngineOptionForceAllowDhcpDns": {
"value": "Allow DNS Query and DHCP Client"
},
"firewallSettingEngineOptionForceAllowIcmpType3Code4": {
"value": "Add Force Allow rule for ICMP type3 code4"
},
"firewallSettingEngineOptionFragmentOffsetMin": {
"value": "60"
},
"firewallSettingEngineOptionFragmentSizeMin": {
"value": "120"
},
"firewallSettingEngineOptionGenerateConnectionEventsIcmpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionGenerateConnectionEventsTcpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionGenerateConnectionEventsUdpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionIcmpTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionIgnoreStatusCode0": {
"value": "None"
},
"firewallSettingEngineOptionIgnoreStatusCode1": {
"value": "None"
},
"firewallSettingEngineOptionIgnoreStatusCode2": {
"value": "None"
},
"firewallSettingEngineOptionLastAckTimeout": {
"value": "3 Minutes"
},
"firewallSettingEngineOptionLogAllPacketDataEnabled": {
"value": "false"
},
"firewallSettingEngineOptionLogEventsPerSecondMax": {
"value": "100"
},
"firewallSettingEngineOptionLogOnePacketPeriod": {
"value": "5 Minutes"
},
"firewallSettingEngineOptionLogOnePacketWithinPeriodEnabled": {
"value": "false"
},
"firewallSettingEngineOptionLogPacketLengthMax": {
"value": "1500 Bytes"
},
"firewallSettingEngineOptionLoggingPolicy": {
"value": "Default"
},
"firewallSettingEngineOptionSilentTcpConnectionDropEnabled": {
"value": "false"
},
"firewallSettingEngineOptionSslSessionSize": {
"value": "Low - 2500"
},
"firewallSettingEngineOptionSslSessionTime": {
"value": "24 Hours"
},
"firewallSettingEngineOptionStrictTerodoPortCheckEnabled": {
"value": "true"
},
"firewallSettingEngineOptionSynRcvdTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionSynSentTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionTcpMssLimit": {
"value": "128 Bytes"
},
"firewallSettingEngineOptionTunnelDepthMax": {
"value": "1"
},
"firewallSettingEngineOptionTunnelDepthMaxExceededAction": {
"value": "Drop"
},
"firewallSettingEngineOptionUdpTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionVerifyTcpChecksumEnabled": {
"value": "false"
},
"firewallSettingEngineOptionsEnabled": {
"value": "false"
},
"firewallSettingEventLogFileCachedEntriesLifeTime": {
"value": "30 Minutes"
},
"firewallSettingEventLogFileCachedEntriesNum": {
"value": "128"
},
"firewallSettingEventLogFileCachedEntriesStaleTime": {
"value": "15 Minutes"
},
"firewallSettingEventLogFileIgnoreSourceIpListId": {
"value": ""
},
"firewallSettingEventLogFileRetainNum": {
"value": "3"
},
"firewallSettingEventLogFileSizeMax": {
"value": "4 MB"
},
"firewallSettingEventsOutOfAllowedPolicyEnabled": {
"value": "true"
},
"firewallSettingFailureResponseEngineSystem": {
"value": "Fail closed"
},
"firewallSettingFailureResponsePacketSanityCheck": {
"value": "Fail closed"
},
"firewallSettingInterfaceIsolationEnabled": {
"value": "false"
},
"firewallSettingInterfaceLimitOneActiveEnabled": {
"value": "false"
},
"firewallSettingInterfacePatterns": {
"value": ""
},
"firewallSettingNetworkEngineMode": {
"value": "Inline"
},
"firewallSettingReconnaissanceBlockFingerprintProbeDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockNetworkOrPortScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpNullScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpSynFinScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpXmasAttackDuration": {
"value": "No"
},
"firewallSettingReconnaissanceDetectFingerprintProbeEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectNetworkOrPortScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpNullScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpSynFinScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpXmasAttackEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceExcludeIpListId": {
"value": "1"
},
"firewallSettingReconnaissanceIncludeIpListId": {
"value": ""
},
"firewallSettingReconnaissanceNotifyFingerprintProbeEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyNetworkOrPortScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpNullScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpSynFinScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpXmasAttackEnabled": {
"value": "true"
},
"firewallSettingSyslogConfigId": {
"value": "0"
},
"firewallSettingVirtualAndContainerNetworkScanEnabled": {
"value": "false"
},
"integrityMonitoringSettingAutoApplyRecommendationsEnabled": {
"value": "No"
},
"integrityMonitoringSettingCombinedModeProtectionSource": {
"value": "Appliance preferred"
},
"integrityMonitoringSettingContentHashAlgorithm": {
"value": "sha1"
},
"integrityMonitoringSettingCpuUsageLevel": {
"value": "High"
},
"integrityMonitoringSettingRealtimeEnabled": {
"value": "false"
},
"integrityMonitoringSettingScanCacheConfigId": {
"value": "3"
},
"integrityMonitoringSettingSyslogConfigId": {
"value": "0"
},
"integrityMonitoringSettingVirtualApplianceOptimizationScanCacheEntriesMax": {
"value": "500000"
},
"intrusionPreventionSettingAutoApplyRecommendationsEnabled": {
"value": "Yes"
},
"intrusionPreventionSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"intrusionPreventionSettingEngineOptionFragmentedIpKeepMax": {
"value": "1000"
},
"intrusionPreventionSettingEngineOptionFragmentedIpPacketSendIcmpEnabled": {
"value": "true"
},
"intrusionPreventionSettingEngineOptionFragmentedIpTimeout": {
"value": "60 Seconds"
},
"intrusionPreventionSettingEngineOptionFragmentedIpUnconcernedMacAddressBypassEnabled": {
"value": "false"
},
"intrusionPreventionSettingEngineOptionsEnabled": {
"value": "false"
},
"intrusionPreventionSettingLogDataRuleFirstMatchEnabled": {
"value": "true"
},
"intrusionPreventionSettingNsxSecurityTaggingDetectModeLevel": {
"value": "No Tagging"
},
"intrusionPreventionSettingNsxSecurityTaggingPreventModeLevel": {
"value": "No Tagging"
},
"intrusionPreventionSettingVirtualAndContainerNetworkScanEnabled": {
"value": "true"
},
"logInspectionSettingAutoApplyRecommendationsEnabled": {
"value": "No"
},
"logInspectionSettingSeverityClippingAgentEventSendSyslogLevelMin": {
"value": "Medium (6)"
},
"logInspectionSettingSeverityClippingAgentEventStoreLevelMin": {
"value": "Medium (6)"
},
"logInspectionSettingSyslogConfigId": {
"value": "0"
},
"platformSettingAgentCommunicationsDirection": {
"value": "Agent/Appliance Initiated"
},
"platformSettingAgentEventsSendInterval": {
"value": "60 Seconds"
},
"platformSettingAgentSelfProtectionEnabled": {
"value": "false"
},
"platformSettingAgentSelfProtectionPassword": {
"value": ""
},
"platformSettingAgentSelfProtectionPasswordEnabled": {
"value": "false"
},
"platformSettingAutoAssignNewIntrusionPreventionRulesEnabled": {
"value": "true"
},
"platformSettingAutoUpdateAntiMalwareEngineEnabled": {
"value": "false"
},
"platformSettingCombinedModeNetworkGroupProtectionSource": {
"value": "Agent preferred"
},
"platformSettingEnvironmentVariableOverrides": {
"value": ""
},
"platformSettingHeartbeatInactiveVmOfflineAlertEnabled": {
"value": "false"
},
"platformSettingHeartbeatInterval": {
"value": "10 Minutes"
},
"platformSettingHeartbeatLocalTimeShiftAlertThreshold": {
"value": "Unlimited"
},
"platformSettingHeartbeatMissedAlertThreshold": {
"value": "5"
},
"platformSettingInactiveAgentCleanupOverrideEnabled": {
"value": "false"
},
"platformSettingNotificationsSuppressPopupsEnabled": {
"value": "false"
},
"platformSettingRecommendationOngoingScansInterval": {
"value": "7 Days"
},
"platformSettingRelayState": {
"value": "false"
},
"platformSettingScanCacheConcurrencyMax": {
"value": "1"
},
"platformSettingScanOpenPortListId": {
"value": "1-1024"
},
"platformSettingSmartProtectionAntiMalwareGlobalServerProxyId": {
"value": ""
},
"platformSettingSmartProtectionGlobalServerEnabled": {
"value": "true"
},
"platformSettingSmartProtectionGlobalServerProxyId": {
"value": ""
},
"platformSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"platformSettingTroubleshootingLoggingLevel": {
"value": "Do Not Override"
},
"webReputationSettingAlertingEnabled": {
"value": "false"
},
"webReputationSettingAllowedUrlDomains": {
"value": ""
},
"webReputationSettingAllowedUrls": {
"value": ""
},
"webReputationSettingBlockedUrlDomains": {
"value": ""
},
"webReputationSettingBlockedUrlKeywords": {
"value": ""
},
"webReputationSettingBlockedUrls": {
"value": ""
},
"webReputationSettingBlockingPageLink": {
"value": "http://sitesafety.trendmicro.com/"
},
"webReputationSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"webReputationSettingMonitorPortListId": {
"value": "80,8080"
},
"webReputationSettingSecurityBlockUntestedPagesEnabled": {
"value": "false"
},
"webReputationSettingSecurityLevel": {
"value": "Medium"
},
"webReputationSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerAllowOffDomainGlobal": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerEnabled": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerUrls": {
"value": ""
},
"webReputationSettingSmartProtectionServerConnectionLostWarningEnabled": {
"value": "true"
},
"webReputationSettingSmartProtectionWebReputationGlobalServerProxyId": {
"value": ""
},
"webReputationSettingSyslogConfigId": {
"value": "0"
}
},
"recommendationScanMode": "ongoing",
"webReputation": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off"
},
"state": "off"
}
},
{
"ID": 6,
"activityMonitoring": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off"
},
"state": "off"
},
"antiMalware": {
"manualScanConfigurationID": 2,
"moduleStatus": {
"status": "active",
"statusMessage": "Real Time"
},
"realTimeScanConfigurationID": 1,
"realTimeScanScheduleID": 4,
"scheduledScanConfigurationID": 3,
"state": "on"
},
"applicationControl": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off"
},
"state": "off"
},
"autoRequiresUpdate": "on",
"description": "An example policy for Linux servers.",
"firewall": {
"globalStatefulConfigurationID": 1,
"moduleStatus": {
"status": "active",
"statusMessage": "On, 17 rules"
},
"ruleIDs": [
23,
24,
25,
28,
29,
30,
32,
34,
42,
43,
46,
47,
48,
49,
53,
54,
57
],
"state": "on"
},
"integrityMonitoring": {
"moduleStatus": {
"status": "active",
"statusMessage": "On, 23 rules"
},
"ruleIDs": [
7,
8,
9,
10,
15,
16,
20,
25,
26,
33,
34,
35,
40,
41,
48,
51,
55,
60,
72,
75,
86,
148,
159
],
"state": "on"
},
"intrusionPrevention": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Prevent, no rules"
},
"state": "prevent"
},
"logInspection": {
"moduleStatus": {
"status": "active",
"statusMessage": "On, 7 rules"
},
"ruleIDs": [
18,
24,
43,
57,
60,
61,
78
],
"state": "on"
},
"name": "Linux Server",
"parentID": 1,
"policySettings": {
"activityMonitoringSettingActivityEnabled": {
"value": "Off"
},
"activityMonitoringSettingIndicatorEnabled": {
"value": "Off"
},
"activityMonitoringSettingSyslogConfigId": {
"value": "0"
},
"antiMalwareSettingBehaviorMonitoringScanExclusionList": {
"value": ""
},
"antiMalwareSettingCombinedModeProtectionSource": {
"value": "Appliance preferred"
},
"antiMalwareSettingConnectedThreatDefenseSuspiciousFileDdanSubmissionEnabled": {
"value": "true"
},
"antiMalwareSettingConnectedThreatDefenseUseControlManagerSuspiciousObjectListEnabled": {
"value": "true"
},
"antiMalwareSettingDocumentExploitProtectionRuleExceptions": {
"value": ""
},
"antiMalwareSettingFileHashEnabled": {
"value": "false"
},
"antiMalwareSettingFileHashMd5Enabled": {
"value": "false"
},
"antiMalwareSettingFileHashSha256Enabled": {
"value": "false"
},
"antiMalwareSettingFileHashSizeMaxMbytes": {
"value": "128"
},
"antiMalwareSettingIdentifiedFilesSpaceMaxMbytes": {
"value": "1024"
},
"antiMalwareSettingMalwareScanMultithreadedProcessingEnabled": {
"value": "false"
},
"antiMalwareSettingNsxSecurityTaggingEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingOnRemediationFailureEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingRemoveOnCleanScanEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingValue": {
"value": "ANTI_VIRUS.VirusFound.threat=medium"
},
"antiMalwareSettingPredictiveMachineLearningExceptions": {
"value": ""
},
"antiMalwareSettingScanCacheOnDemandConfigId": {
"value": "1"
},
"antiMalwareSettingScanCacheRealTimeConfigId": {
"value": "2"
},
"antiMalwareSettingScanFileSizeMaxMbytes": {
"value": "0"
},
"antiMalwareSettingSmartProtectionGlobalServerEnabled": {
"value": "true"
},
"antiMalwareSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"antiMalwareSettingSmartProtectionLocalServerAllowOffDomainGlobal": {
"value": "false"
},
"antiMalwareSettingSmartProtectionLocalServerUrls": {
"value": ""
},
"antiMalwareSettingSmartProtectionServerConnectionLostWarningEnabled": {
"value": "true"
},
"antiMalwareSettingSmartScanState": {
"value": "Automatic"
},
"antiMalwareSettingSpywareApprovedList": {
"value": ""
},
"antiMalwareSettingSyslogConfigId": {
"value": "0"
},
"antiMalwareSettingVirtualApplianceOnDemandScanCacheEntriesMax": {
"value": "500000"
},
"antiMalwareSettingVirtualApplianceRealTimeScanCacheEntriesMax": {
"value": "500000"
},
"applicationControlSettingExecutionEnforcementLevel": {
"value": "Allow unrecognized software until it is explicitly blocked"
},
"applicationControlSettingRulesetMode": {
"value": "Use local ruleset"
},
"applicationControlSettingSharedRulesetId": {
"value": "0"
},
"applicationControlSettingSyslogConfigId": {
"value": "0"
},
"firewallSettingAntiEvasionCheckEvasiveRetransmit": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckFinNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckFragmentedPackets": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckOutNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckPaws": {
"value": "Ignore"
},
"firewallSettingAntiEvasionCheckRstNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpChecksum": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpCongestionFlags": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpPawsZero": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpRstFinFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSplitHandshake": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynFinFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynRstFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynWithData": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpUrgentFlags": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpZeroFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionSecurityPosture": {
"value": "Normal"
},
"firewallSettingAntiEvasionTcpPawsWindowPolicy": {
"value": "0"
},
"firewallSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"firewallSettingConfigPackageExceedsAlertMaxEnabled": {
"value": "true"
},
"firewallSettingEngineOptionAckTimeout": {
"value": "1 Second"
},
"firewallSettingEngineOptionAllowNullIpEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBlockIpv6Agent8AndEarlierEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBlockIpv6Agent9AndLaterEnabled": {
"value": "false"
},
"firewallSettingEngineOptionBlockSameSrcDstIpEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBootStartTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionBypassCiscoWaasConnectionsEnabled": {
"value": "false"
},
"firewallSettingEngineOptionCloseTimeout": {
"value": "0 Seconds"
},
"firewallSettingEngineOptionCloseWaitTimeout": {
"value": "2 Minutes"
},
"firewallSettingEngineOptionClosingTimeout": {
"value": "1 Second"
},
"firewallSettingEngineOptionColdStartTimeout": {
"value": "5 Minutes"
},
"firewallSettingEngineOptionConnectionCleanupTimeout": {
"value": "10 Seconds"
},
"firewallSettingEngineOptionConnectionsCleanupMax": {
"value": "1000"
},
"firewallSettingEngineOptionConnectionsNumIcmpMax": {
"value": "10000"
},
"firewallSettingEngineOptionConnectionsNumTcpMax": {
"value": "1000000"
},
"firewallSettingEngineOptionConnectionsNumUdpMax": {
"value": "1000000"
},
"firewallSettingEngineOptionDebugModeEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDebugPacketNumMax": {
"value": "8"
},
"firewallSettingEngineOptionDisconnectTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionDrop6To4BogonsAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropEvasiveRetransmitEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDropIpZeroPayloadEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6BogonsAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6ExtType0Enabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6FragmentsLowerThanMinMtuEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6ReservedAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6SiteLocalAddressesEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDropTeredoAnomaliesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropUnknownSslProtocolEnabled": {
"value": "true"
},
"firewallSettingEngineOptionErrorTimeout": {
"value": "10 Seconds"
},
"firewallSettingEngineOptionEstablishedTimeout": {
"value": "3 Hours"
},
"firewallSettingEngineOptionEventNodesMax": {
"value": "20000"
},
"firewallSettingEngineOptionFilterIpv4Tunnels": {
"value": "Disable Detection of IPv4 Tunnels"
},
"firewallSettingEngineOptionFilterIpv6Tunnels": {
"value": "Disable Detection of IPv6 Tunnels"
},
"firewallSettingEngineOptionFinWait1Timeout": {
"value": "2 Minutes"
},
"firewallSettingEngineOptionForceAllowDhcpDns": {
"value": "Allow DNS Query and DHCP Client"
},
"firewallSettingEngineOptionForceAllowIcmpType3Code4": {
"value": "Add Force Allow rule for ICMP type3 code4"
},
"firewallSettingEngineOptionFragmentOffsetMin": {
"value": "60"
},
"firewallSettingEngineOptionFragmentSizeMin": {
"value": "120"
},
"firewallSettingEngineOptionGenerateConnectionEventsIcmpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionGenerateConnectionEventsTcpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionGenerateConnectionEventsUdpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionIcmpTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionIgnoreStatusCode0": {
"value": "None"
},
"firewallSettingEngineOptionIgnoreStatusCode1": {
"value": "None"
},
"firewallSettingEngineOptionIgnoreStatusCode2": {
"value": "None"
},
"firewallSettingEngineOptionLastAckTimeout": {
"value": "3 Minutes"
},
"firewallSettingEngineOptionLogAllPacketDataEnabled": {
"value": "false"
},
"firewallSettingEngineOptionLogEventsPerSecondMax": {
"value": "100"
},
"firewallSettingEngineOptionLogOnePacketPeriod": {
"value": "5 Minutes"
},
"firewallSettingEngineOptionLogOnePacketWithinPeriodEnabled": {
"value": "false"
},
"firewallSettingEngineOptionLogPacketLengthMax": {
"value": "1500 Bytes"
},
"firewallSettingEngineOptionLoggingPolicy": {
"value": "Default"
},
"firewallSettingEngineOptionSilentTcpConnectionDropEnabled": {
"value": "false"
},
"firewallSettingEngineOptionSslSessionSize": {
"value": "Low - 2500"
},
"firewallSettingEngineOptionSslSessionTime": {
"value": "24 Hours"
},
"firewallSettingEngineOptionStrictTerodoPortCheckEnabled": {
"value": "true"
},
"firewallSettingEngineOptionSynRcvdTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionSynSentTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionTcpMssLimit": {
"value": "128 Bytes"
},
"firewallSettingEngineOptionTunnelDepthMax": {
"value": "1"
},
"firewallSettingEngineOptionTunnelDepthMaxExceededAction": {
"value": "Drop"
},
"firewallSettingEngineOptionUdpTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionVerifyTcpChecksumEnabled": {
"value": "false"
},
"firewallSettingEngineOptionsEnabled": {
"value": "false"
},
"firewallSettingEventLogFileCachedEntriesLifeTime": {
"value": "30 Minutes"
},
"firewallSettingEventLogFileCachedEntriesNum": {
"value": "128"
},
"firewallSettingEventLogFileCachedEntriesStaleTime": {
"value": "15 Minutes"
},
"firewallSettingEventLogFileIgnoreSourceIpListId": {
"value": ""
},
"firewallSettingEventLogFileRetainNum": {
"value": "3"
},
"firewallSettingEventLogFileSizeMax": {
"value": "4 MB"
},
"firewallSettingEventsOutOfAllowedPolicyEnabled": {
"value": "true"
},
"firewallSettingFailureResponseEngineSystem": {
"value": "Fail closed"
},
"firewallSettingFailureResponsePacketSanityCheck": {
"value": "Fail closed"
},
"firewallSettingInterfaceIsolationEnabled": {
"value": "false"
},
"firewallSettingInterfaceLimitOneActiveEnabled": {
"value": "false"
},
"firewallSettingInterfacePatterns": {
"value": ""
},
"firewallSettingNetworkEngineMode": {
"value": "Inline"
},
"firewallSettingReconnaissanceBlockFingerprintProbeDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockNetworkOrPortScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpNullScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpSynFinScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpXmasAttackDuration": {
"value": "No"
},
"firewallSettingReconnaissanceDetectFingerprintProbeEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectNetworkOrPortScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpNullScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpSynFinScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpXmasAttackEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceExcludeIpListId": {
"value": "1"
},
"firewallSettingReconnaissanceIncludeIpListId": {
"value": ""
},
"firewallSettingReconnaissanceNotifyFingerprintProbeEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyNetworkOrPortScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpNullScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpSynFinScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpXmasAttackEnabled": {
"value": "true"
},
"firewallSettingSyslogConfigId": {
"value": "0"
},
"firewallSettingVirtualAndContainerNetworkScanEnabled": {
"value": "false"
},
"integrityMonitoringSettingAutoApplyRecommendationsEnabled": {
"value": "No"
},
"integrityMonitoringSettingCombinedModeProtectionSource": {
"value": "Appliance preferred"
},
"integrityMonitoringSettingContentHashAlgorithm": {
"value": "sha1"
},
"integrityMonitoringSettingCpuUsageLevel": {
"value": "High"
},
"integrityMonitoringSettingRealtimeEnabled": {
"value": "false"
},
"integrityMonitoringSettingScanCacheConfigId": {
"value": "3"
},
"integrityMonitoringSettingSyslogConfigId": {
"value": "0"
},
"integrityMonitoringSettingVirtualApplianceOptimizationScanCacheEntriesMax": {
"value": "500000"
},
"intrusionPreventionSettingAutoApplyRecommendationsEnabled": {
"value": "Yes"
},
"intrusionPreventionSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"intrusionPreventionSettingEngineOptionFragmentedIpKeepMax": {
"value": "1000"
},
"intrusionPreventionSettingEngineOptionFragmentedIpPacketSendIcmpEnabled": {
"value": "true"
},
"intrusionPreventionSettingEngineOptionFragmentedIpTimeout": {
"value": "60 Seconds"
},
"intrusionPreventionSettingEngineOptionFragmentedIpUnconcernedMacAddressBypassEnabled": {
"value": "false"
},
"intrusionPreventionSettingEngineOptionsEnabled": {
"value": "false"
},
"intrusionPreventionSettingLogDataRuleFirstMatchEnabled": {
"value": "true"
},
"intrusionPreventionSettingNsxSecurityTaggingDetectModeLevel": {
"value": "No Tagging"
},
"intrusionPreventionSettingNsxSecurityTaggingPreventModeLevel": {
"value": "No Tagging"
},
"intrusionPreventionSettingVirtualAndContainerNetworkScanEnabled": {
"value": "true"
},
"logInspectionSettingAutoApplyRecommendationsEnabled": {
"value": "No"
},
"logInspectionSettingSeverityClippingAgentEventSendSyslogLevelMin": {
"value": "Medium (6)"
},
"logInspectionSettingSeverityClippingAgentEventStoreLevelMin": {
"value": "Medium (6)"
},
"logInspectionSettingSyslogConfigId": {
"value": "0"
},
"platformSettingAgentCommunicationsDirection": {
"value": "Agent/Appliance Initiated"
},
"platformSettingAgentEventsSendInterval": {
"value": "60 Seconds"
},
"platformSettingAgentSelfProtectionEnabled": {
"value": "false"
},
"platformSettingAgentSelfProtectionPassword": {
"value": ""
},
"platformSettingAgentSelfProtectionPasswordEnabled": {
"value": "false"
},
"platformSettingAutoAssignNewIntrusionPreventionRulesEnabled": {
"value": "true"
},
"platformSettingAutoUpdateAntiMalwareEngineEnabled": {
"value": "false"
},
"platformSettingCombinedModeNetworkGroupProtectionSource": {
"value": "Agent preferred"
},
"platformSettingEnvironmentVariableOverrides": {
"value": ""
},
"platformSettingHeartbeatInactiveVmOfflineAlertEnabled": {
"value": "false"
},
"platformSettingHeartbeatInterval": {
"value": "10 Minutes"
},
"platformSettingHeartbeatLocalTimeShiftAlertThreshold": {
"value": "Unlimited"
},
"platformSettingHeartbeatMissedAlertThreshold": {
"value": "5"
},
"platformSettingInactiveAgentCleanupOverrideEnabled": {
"value": "false"
},
"platformSettingNotificationsSuppressPopupsEnabled": {
"value": "false"
},
"platformSettingRecommendationOngoingScansInterval": {
"value": "7 Days"
},
"platformSettingRelayState": {
"value": "false"
},
"platformSettingScanCacheConcurrencyMax": {
"value": "1"
},
"platformSettingScanOpenPortListId": {
"value": "1-1024"
},
"platformSettingSmartProtectionAntiMalwareGlobalServerProxyId": {
"value": ""
},
"platformSettingSmartProtectionGlobalServerEnabled": {
"value": "true"
},
"platformSettingSmartProtectionGlobalServerProxyId": {
"value": ""
},
"platformSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"platformSettingTroubleshootingLoggingLevel": {
"value": "Do Not Override"
},
"webReputationSettingAlertingEnabled": {
"value": "false"
},
"webReputationSettingAllowedUrlDomains": {
"value": ""
},
"webReputationSettingAllowedUrls": {
"value": ""
},
"webReputationSettingBlockedUrlDomains": {
"value": ""
},
"webReputationSettingBlockedUrlKeywords": {
"value": ""
},
"webReputationSettingBlockedUrls": {
"value": ""
},
"webReputationSettingBlockingPageLink": {
"value": "http://sitesafety.trendmicro.com/"
},
"webReputationSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"webReputationSettingMonitorPortListId": {
"value": "80,8080"
},
"webReputationSettingSecurityBlockUntestedPagesEnabled": {
"value": "false"
},
"webReputationSettingSecurityLevel": {
"value": "Medium"
},
"webReputationSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerAllowOffDomainGlobal": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerEnabled": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerUrls": {
"value": ""
},
"webReputationSettingSmartProtectionServerConnectionLostWarningEnabled": {
"value": "true"
},
"webReputationSettingSmartProtectionWebReputationGlobalServerProxyId": {
"value": ""
},
"webReputationSettingSyslogConfigId": {
"value": "0"
}
},
"recommendationScanMode": "ongoing",
"webReputation": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off"
},
"state": "off"
}
},
{
"ID": 7,
"activityMonitoring": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off"
},
"state": "off"
},
"antiMalware": {
"manualScanConfigurationID": 2,
"moduleStatus": {
"status": "active",
"statusMessage": "Real Time"
},
"realTimeScanConfigurationID": 1,
"realTimeScanScheduleID": 4,
"scheduledScanConfigurationID": 3,
"state": "on"
},
"applicationControl": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off"
},
"state": "off"
},
"autoRequiresUpdate": "on",
"description": "Demo policy for the demo computer added to all accounts. This policy has all security modules enabled.",
"firewall": {
"globalStatefulConfigurationID": 1,
"moduleStatus": {
"status": "active",
"statusMessage": "On, 6 rules"
},
"ruleIDs": [
23,
24,
25,
28,
42,
49
],
"state": "on"
},
"integrityMonitoring": {
"moduleStatus": {
"status": "active",
"statusMessage": "Real Time, 1 rule"
},
"ruleIDs": [
9
],
"state": "real-time"
},
"intrusionPrevention": {
"applicationTypeIDs": [
387,
400
],
"moduleStatus": {
"status": "active",
"statusMessage": "Prevent, 2 rules"
},
"ruleIDs": [
7080,
7526
],
"state": "prevent"
},
"logInspection": {
"moduleStatus": {
"status": "active",
"statusMessage": "On, 2 rules"
},
"ruleIDs": [
18,
57
],
"state": "on"
},
"name": "Demo",
"parentID": 1,
"policySettings": {
"activityMonitoringSettingActivityEnabled": {
"value": "Off"
},
"activityMonitoringSettingIndicatorEnabled": {
"value": "Off"
},
"activityMonitoringSettingSyslogConfigId": {
"value": "0"
},
"antiMalwareSettingBehaviorMonitoringScanExclusionList": {
"value": ""
},
"antiMalwareSettingCombinedModeProtectionSource": {
"value": "Appliance preferred"
},
"antiMalwareSettingConnectedThreatDefenseSuspiciousFileDdanSubmissionEnabled": {
"value": "true"
},
"antiMalwareSettingConnectedThreatDefenseUseControlManagerSuspiciousObjectListEnabled": {
"value": "true"
},
"antiMalwareSettingDocumentExploitProtectionRuleExceptions": {
"value": ""
},
"antiMalwareSettingFileHashEnabled": {
"value": "false"
},
"antiMalwareSettingFileHashMd5Enabled": {
"value": "false"
},
"antiMalwareSettingFileHashSha256Enabled": {
"value": "false"
},
"antiMalwareSettingFileHashSizeMaxMbytes": {
"value": "128"
},
"antiMalwareSettingIdentifiedFilesSpaceMaxMbytes": {
"value": "1024"
},
"antiMalwareSettingMalwareScanMultithreadedProcessingEnabled": {
"value": "false"
},
"antiMalwareSettingNsxSecurityTaggingEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingOnRemediationFailureEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingRemoveOnCleanScanEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingValue": {
"value": "ANTI_VIRUS.VirusFound.threat=medium"
},
"antiMalwareSettingPredictiveMachineLearningExceptions": {
"value": ""
},
"antiMalwareSettingScanCacheOnDemandConfigId": {
"value": "1"
},
"antiMalwareSettingScanCacheRealTimeConfigId": {
"value": "2"
},
"antiMalwareSettingScanFileSizeMaxMbytes": {
"value": "0"
},
"antiMalwareSettingSmartProtectionGlobalServerEnabled": {
"value": "true"
},
"antiMalwareSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"antiMalwareSettingSmartProtectionLocalServerAllowOffDomainGlobal": {
"value": "false"
},
"antiMalwareSettingSmartProtectionLocalServerUrls": {
"value": ""
},
"antiMalwareSettingSmartProtectionServerConnectionLostWarningEnabled": {
"value": "true"
},
"antiMalwareSettingSmartScanState": {
"value": "Automatic"
},
"antiMalwareSettingSpywareApprovedList": {
"value": ""
},
"antiMalwareSettingSyslogConfigId": {
"value": "0"
},
"antiMalwareSettingVirtualApplianceOnDemandScanCacheEntriesMax": {
"value": "500000"
},
"antiMalwareSettingVirtualApplianceRealTimeScanCacheEntriesMax": {
"value": "500000"
},
"applicationControlSettingExecutionEnforcementLevel": {
"value": "Allow unrecognized software until it is explicitly blocked"
},
"applicationControlSettingRulesetMode": {
"value": "Use local ruleset"
},
"applicationControlSettingSharedRulesetId": {
"value": "0"
},
"applicationControlSettingSyslogConfigId": {
"value": "0"
},
"firewallSettingAntiEvasionCheckEvasiveRetransmit": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckFinNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckFragmentedPackets": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckOutNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckPaws": {
"value": "Ignore"
},
"firewallSettingAntiEvasionCheckRstNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpChecksum": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpCongestionFlags": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpPawsZero": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpRstFinFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSplitHandshake": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynFinFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynRstFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynWithData": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpUrgentFlags": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpZeroFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionSecurityPosture": {
"value": "Normal"
},
"firewallSettingAntiEvasionTcpPawsWindowPolicy": {
"value": "0"
},
"firewallSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"firewallSettingConfigPackageExceedsAlertMaxEnabled": {
"value": "true"
},
"firewallSettingEngineOptionAckTimeout": {
"value": "1 Second"
},
"firewallSettingEngineOptionAllowNullIpEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBlockIpv6Agent8AndEarlierEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBlockIpv6Agent9AndLaterEnabled": {
"value": "false"
},
"firewallSettingEngineOptionBlockSameSrcDstIpEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBootStartTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionBypassCiscoWaasConnectionsEnabled": {
"value": "false"
},
"firewallSettingEngineOptionCloseTimeout": {
"value": "0 Seconds"
},
"firewallSettingEngineOptionCloseWaitTimeout": {
"value": "2 Minutes"
},
"firewallSettingEngineOptionClosingTimeout": {
"value": "1 Second"
},
"firewallSettingEngineOptionColdStartTimeout": {
"value": "5 Minutes"
},
"firewallSettingEngineOptionConnectionCleanupTimeout": {
"value": "10 Seconds"
},
"firewallSettingEngineOptionConnectionsCleanupMax": {
"value": "1000"
},
"firewallSettingEngineOptionConnectionsNumIcmpMax": {
"value": "10000"
},
"firewallSettingEngineOptionConnectionsNumTcpMax": {
"value": "1000000"
},
"firewallSettingEngineOptionConnectionsNumUdpMax": {
"value": "1000000"
},
"firewallSettingEngineOptionDebugModeEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDebugPacketNumMax": {
"value": "8"
},
"firewallSettingEngineOptionDisconnectTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionDrop6To4BogonsAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropEvasiveRetransmitEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDropIpZeroPayloadEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6BogonsAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6ExtType0Enabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6FragmentsLowerThanMinMtuEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6ReservedAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6SiteLocalAddressesEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDropTeredoAnomaliesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropUnknownSslProtocolEnabled": {
"value": "true"
},
"firewallSettingEngineOptionErrorTimeout": {
"value": "10 Seconds"
},
"firewallSettingEngineOptionEstablishedTimeout": {
"value": "3 Hours"
},
"firewallSettingEngineOptionEventNodesMax": {
"value": "20000"
},
"firewallSettingEngineOptionFilterIpv4Tunnels": {
"value": "Disable Detection of IPv4 Tunnels"
},
"firewallSettingEngineOptionFilterIpv6Tunnels": {
"value": "Disable Detection of IPv6 Tunnels"
},
"firewallSettingEngineOptionFinWait1Timeout": {
"value": "2 Minutes"
},
"firewallSettingEngineOptionForceAllowDhcpDns": {
"value": "Allow DNS Query and DHCP Client"
},
"firewallSettingEngineOptionForceAllowIcmpType3Code4": {
"value": "Add Force Allow rule for ICMP type3 code4"
},
"firewallSettingEngineOptionFragmentOffsetMin": {
"value": "60"
},
"firewallSettingEngineOptionFragmentSizeMin": {
"value": "120"
},
"firewallSettingEngineOptionGenerateConnectionEventsIcmpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionGenerateConnectionEventsTcpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionGenerateConnectionEventsUdpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionIcmpTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionIgnoreStatusCode0": {
"value": "None"
},
"firewallSettingEngineOptionIgnoreStatusCode1": {
"value": "None"
},
"firewallSettingEngineOptionIgnoreStatusCode2": {
"value": "None"
},
"firewallSettingEngineOptionLastAckTimeout": {
"value": "3 Minutes"
},
"firewallSettingEngineOptionLogAllPacketDataEnabled": {
"value": "false"
},
"firewallSettingEngineOptionLogEventsPerSecondMax": {
"value": "100"
},
"firewallSettingEngineOptionLogOnePacketPeriod": {
"value": "5 Minutes"
},
"firewallSettingEngineOptionLogOnePacketWithinPeriodEnabled": {
"value": "false"
},
"firewallSettingEngineOptionLogPacketLengthMax": {
"value": "1500 Bytes"
},
"firewallSettingEngineOptionLoggingPolicy": {
"value": "Default"
},
"firewallSettingEngineOptionSilentTcpConnectionDropEnabled": {
"value": "false"
},
"firewallSettingEngineOptionSslSessionSize": {
"value": "Low - 2500"
},
"firewallSettingEngineOptionSslSessionTime": {
"value": "24 Hours"
},
"firewallSettingEngineOptionStrictTerodoPortCheckEnabled": {
"value": "true"
},
"firewallSettingEngineOptionSynRcvdTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionSynSentTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionTcpMssLimit": {
"value": "128 Bytes"
},
"firewallSettingEngineOptionTunnelDepthMax": {
"value": "1"
},
"firewallSettingEngineOptionTunnelDepthMaxExceededAction": {
"value": "Drop"
},
"firewallSettingEngineOptionUdpTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionVerifyTcpChecksumEnabled": {
"value": "false"
},
"firewallSettingEngineOptionsEnabled": {
"value": "false"
},
"firewallSettingEventLogFileCachedEntriesLifeTime": {
"value": "30 Minutes"
},
"firewallSettingEventLogFileCachedEntriesNum": {
"value": "128"
},
"firewallSettingEventLogFileCachedEntriesStaleTime": {
"value": "15 Minutes"
},
"firewallSettingEventLogFileIgnoreSourceIpListId": {
"value": ""
},
"firewallSettingEventLogFileRetainNum": {
"value": "3"
},
"firewallSettingEventLogFileSizeMax": {
"value": "4 MB"
},
"firewallSettingEventsOutOfAllowedPolicyEnabled": {
"value": "true"
},
"firewallSettingFailureResponseEngineSystem": {
"value": "Fail closed"
},
"firewallSettingFailureResponsePacketSanityCheck": {
"value": "Fail closed"
},
"firewallSettingInterfaceIsolationEnabled": {
"value": "false"
},
"firewallSettingInterfaceLimitOneActiveEnabled": {
"value": "false"
},
"firewallSettingInterfacePatterns": {
"value": ""
},
"firewallSettingNetworkEngineMode": {
"value": "Inline"
},
"firewallSettingReconnaissanceBlockFingerprintProbeDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockNetworkOrPortScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpNullScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpSynFinScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpXmasAttackDuration": {
"value": "No"
},
"firewallSettingReconnaissanceDetectFingerprintProbeEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectNetworkOrPortScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpNullScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpSynFinScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpXmasAttackEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceExcludeIpListId": {
"value": "1"
},
"firewallSettingReconnaissanceIncludeIpListId": {
"value": ""
},
"firewallSettingReconnaissanceNotifyFingerprintProbeEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyNetworkOrPortScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpNullScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpSynFinScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpXmasAttackEnabled": {
"value": "true"
},
"firewallSettingSyslogConfigId": {
"value": "0"
},
"firewallSettingVirtualAndContainerNetworkScanEnabled": {
"value": "false"
},
"integrityMonitoringSettingAutoApplyRecommendationsEnabled": {
"value": "No"
},
"integrityMonitoringSettingCombinedModeProtectionSource": {
"value": "Appliance preferred"
},
"integrityMonitoringSettingContentHashAlgorithm": {
"value": "sha1"
},
"integrityMonitoringSettingCpuUsageLevel": {
"value": "High"
},
"integrityMonitoringSettingRealtimeEnabled": {
"value": "false"
},
"integrityMonitoringSettingScanCacheConfigId": {
"value": "3"
},
"integrityMonitoringSettingSyslogConfigId": {
"value": "0"
},
"integrityMonitoringSettingVirtualApplianceOptimizationScanCacheEntriesMax": {
"value": "500000"
},
"intrusionPreventionSettingAutoApplyRecommendationsEnabled": {
"value": "No"
},
"intrusionPreventionSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"intrusionPreventionSettingEngineOptionFragmentedIpKeepMax": {
"value": "1000"
},
"intrusionPreventionSettingEngineOptionFragmentedIpPacketSendIcmpEnabled": {
"value": "true"
},
"intrusionPreventionSettingEngineOptionFragmentedIpTimeout": {
"value": "60 Seconds"
},
"intrusionPreventionSettingEngineOptionFragmentedIpUnconcernedMacAddressBypassEnabled": {
"value": "false"
},
"intrusionPreventionSettingEngineOptionsEnabled": {
"value": "false"
},
"intrusionPreventionSettingLogDataRuleFirstMatchEnabled": {
"value": "true"
},
"intrusionPreventionSettingNsxSecurityTaggingDetectModeLevel": {
"value": "No Tagging"
},
"intrusionPreventionSettingNsxSecurityTaggingPreventModeLevel": {
"value": "No Tagging"
},
"intrusionPreventionSettingVirtualAndContainerNetworkScanEnabled": {
"value": "true"
},
"logInspectionSettingAutoApplyRecommendationsEnabled": {
"value": "No"
},
"logInspectionSettingSeverityClippingAgentEventSendSyslogLevelMin": {
"value": "Medium (6)"
},
"logInspectionSettingSeverityClippingAgentEventStoreLevelMin": {
"value": "Medium (6)"
},
"logInspectionSettingSyslogConfigId": {
"value": "0"
},
"platformSettingAgentCommunicationsDirection": {
"value": "Agent/Appliance Initiated"
},
"platformSettingAgentEventsSendInterval": {
"value": "60 Seconds"
},
"platformSettingAgentSelfProtectionEnabled": {
"value": "false"
},
"platformSettingAgentSelfProtectionPassword": {
"value": ""
},
"platformSettingAgentSelfProtectionPasswordEnabled": {
"value": "false"
},
"platformSettingAutoAssignNewIntrusionPreventionRulesEnabled": {
"value": "true"
},
"platformSettingAutoUpdateAntiMalwareEngineEnabled": {
"value": "false"
},
"platformSettingCombinedModeNetworkGroupProtectionSource": {
"value": "Agent preferred"
},
"platformSettingEnvironmentVariableOverrides": {
"value": ""
},
"platformSettingHeartbeatInactiveVmOfflineAlertEnabled": {
"value": "false"
},
"platformSettingHeartbeatInterval": {
"value": "10 Minutes"
},
"platformSettingHeartbeatLocalTimeShiftAlertThreshold": {
"value": "Unlimited"
},
"platformSettingHeartbeatMissedAlertThreshold": {
"value": "5"
},
"platformSettingInactiveAgentCleanupOverrideEnabled": {
"value": "false"
},
"platformSettingNotificationsSuppressPopupsEnabled": {
"value": "false"
},
"platformSettingRecommendationOngoingScansInterval": {
"value": "7 Days"
},
"platformSettingRelayState": {
"value": "false"
},
"platformSettingScanCacheConcurrencyMax": {
"value": "1"
},
"platformSettingScanOpenPortListId": {
"value": "1-1024"
},
"platformSettingSmartProtectionAntiMalwareGlobalServerProxyId": {
"value": ""
},
"platformSettingSmartProtectionGlobalServerEnabled": {
"value": "true"
},
"platformSettingSmartProtectionGlobalServerProxyId": {
"value": ""
},
"platformSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"platformSettingTroubleshootingLoggingLevel": {
"value": "Do Not Override"
},
"webReputationSettingAlertingEnabled": {
"value": "false"
},
"webReputationSettingAllowedUrlDomains": {
"value": ""
},
"webReputationSettingAllowedUrls": {
"value": ""
},
"webReputationSettingBlockedUrlDomains": {
"value": ""
},
"webReputationSettingBlockedUrlKeywords": {
"value": ""
},
"webReputationSettingBlockedUrls": {
"value": ""
},
"webReputationSettingBlockingPageLink": {
"value": "http://sitesafety.trendmicro.com/"
},
"webReputationSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"webReputationSettingMonitorPortListId": {
"value": "80,8080"
},
"webReputationSettingSecurityBlockUntestedPagesEnabled": {
"value": "false"
},
"webReputationSettingSecurityLevel": {
"value": "Medium"
},
"webReputationSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerAllowOffDomainGlobal": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerEnabled": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerUrls": {
"value": ""
},
"webReputationSettingSmartProtectionServerConnectionLostWarningEnabled": {
"value": "true"
},
"webReputationSettingSmartProtectionWebReputationGlobalServerProxyId": {
"value": ""
},
"webReputationSettingSyslogConfigId": {
"value": "0"
}
},
"recommendationScanMode": "off",
"webReputation": {
"moduleStatus": {
"status": "active",
"statusMessage": "On"
},
"state": "on"
}
},
{
"ID": 8,
"activityMonitoring": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off"
},
"state": "off"
},
"antiMalware": {
"manualScanConfigurationID": 2,
"moduleStatus": {
"status": "active",
"statusMessage": "Real Time"
},
"realTimeScanConfigurationID": 1,
"realTimeScanScheduleID": 4,
"scheduledScanConfigurationID": 3,
"state": "on"
},
"applicationControl": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off"
},
"state": "off"
},
"autoRequiresUpdate": "on",
"description": "Sample policy for a server running a Linux/Apache/MySQL/PHP stack. Firewall rules allow SSH access but do not allow remote access to MySQL.",
"firewall": {
"globalStatefulConfigurationID": 1,
"moduleStatus": {
"status": "active",
"statusMessage": "On, 11 rules"
},
"ruleIDs": [
20,
23,
24,
25,
28,
29,
30,
42,
43,
47,
49
],
"state": "on"
},
"integrityMonitoring": {
"moduleStatus": {
"status": "active",
"statusMessage": "On, 23 rules"
},
"ruleIDs": [
7,
8,
9,
10,
15,
16,
20,
25,
26,
33,
34,
35,
40,
41,
48,
56,
60,
72,
75,
86,
96,
148,
159
],
"state": "on"
},
"intrusionPrevention": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Prevent, no rules"
},
"state": "prevent"
},
"logInspection": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off, no rules"
},
"state": "off"
},
"name": "LAMP Server",
"parentID": 1,
"policySettings": {
"activityMonitoringSettingActivityEnabled": {
"value": "Off"
},
"activityMonitoringSettingIndicatorEnabled": {
"value": "Off"
},
"activityMonitoringSettingSyslogConfigId": {
"value": "0"
},
"antiMalwareSettingBehaviorMonitoringScanExclusionList": {
"value": ""
},
"antiMalwareSettingCombinedModeProtectionSource": {
"value": "Appliance preferred"
},
"antiMalwareSettingConnectedThreatDefenseSuspiciousFileDdanSubmissionEnabled": {
"value": "true"
},
"antiMalwareSettingConnectedThreatDefenseUseControlManagerSuspiciousObjectListEnabled": {
"value": "true"
},
"antiMalwareSettingDocumentExploitProtectionRuleExceptions": {
"value": ""
},
"antiMalwareSettingFileHashEnabled": {
"value": "false"
},
"antiMalwareSettingFileHashMd5Enabled": {
"value": "false"
},
"antiMalwareSettingFileHashSha256Enabled": {
"value": "false"
},
"antiMalwareSettingFileHashSizeMaxMbytes": {
"value": "128"
},
"antiMalwareSettingIdentifiedFilesSpaceMaxMbytes": {
"value": "1024"
},
"antiMalwareSettingMalwareScanMultithreadedProcessingEnabled": {
"value": "false"
},
"antiMalwareSettingNsxSecurityTaggingEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingOnRemediationFailureEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingRemoveOnCleanScanEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingValue": {
"value": "ANTI_VIRUS.VirusFound.threat=medium"
},
"antiMalwareSettingPredictiveMachineLearningExceptions": {
"value": ""
},
"antiMalwareSettingScanCacheOnDemandConfigId": {
"value": "1"
},
"antiMalwareSettingScanCacheRealTimeConfigId": {
"value": "2"
},
"antiMalwareSettingScanFileSizeMaxMbytes": {
"value": "0"
},
"antiMalwareSettingSmartProtectionGlobalServerEnabled": {
"value": "true"
},
"antiMalwareSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"antiMalwareSettingSmartProtectionLocalServerAllowOffDomainGlobal": {
"value": "false"
},
"antiMalwareSettingSmartProtectionLocalServerUrls": {
"value": ""
},
"antiMalwareSettingSmartProtectionServerConnectionLostWarningEnabled": {
"value": "true"
},
"antiMalwareSettingSmartScanState": {
"value": "Automatic"
},
"antiMalwareSettingSpywareApprovedList": {
"value": ""
},
"antiMalwareSettingSyslogConfigId": {
"value": "0"
},
"antiMalwareSettingVirtualApplianceOnDemandScanCacheEntriesMax": {
"value": "500000"
},
"antiMalwareSettingVirtualApplianceRealTimeScanCacheEntriesMax": {
"value": "500000"
},
"applicationControlSettingExecutionEnforcementLevel": {
"value": "Allow unrecognized software until it is explicitly blocked"
},
"applicationControlSettingRulesetMode": {
"value": "Use local ruleset"
},
"applicationControlSettingSharedRulesetId": {
"value": "0"
},
"applicationControlSettingSyslogConfigId": {
"value": "0"
},
"firewallSettingAntiEvasionCheckEvasiveRetransmit": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckFinNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckFragmentedPackets": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckOutNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckPaws": {
"value": "Ignore"
},
"firewallSettingAntiEvasionCheckRstNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpChecksum": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpCongestionFlags": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpPawsZero": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpRstFinFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSplitHandshake": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynFinFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynRstFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynWithData": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpUrgentFlags": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpZeroFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionSecurityPosture": {
"value": "Normal"
},
"firewallSettingAntiEvasionTcpPawsWindowPolicy": {
"value": "0"
},
"firewallSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"firewallSettingConfigPackageExceedsAlertMaxEnabled": {
"value": "true"
},
"firewallSettingEngineOptionAckTimeout": {
"value": "1 Second"
},
"firewallSettingEngineOptionAllowNullIpEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBlockIpv6Agent8AndEarlierEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBlockIpv6Agent9AndLaterEnabled": {
"value": "false"
},
"firewallSettingEngineOptionBlockSameSrcDstIpEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBootStartTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionBypassCiscoWaasConnectionsEnabled": {
"value": "false"
},
"firewallSettingEngineOptionCloseTimeout": {
"value": "0 Seconds"
},
"firewallSettingEngineOptionCloseWaitTimeout": {
"value": "2 Minutes"
},
"firewallSettingEngineOptionClosingTimeout": {
"value": "1 Second"
},
"firewallSettingEngineOptionColdStartTimeout": {
"value": "5 Minutes"
},
"firewallSettingEngineOptionConnectionCleanupTimeout": {
"value": "10 Seconds"
},
"firewallSettingEngineOptionConnectionsCleanupMax": {
"value": "1000"
},
"firewallSettingEngineOptionConnectionsNumIcmpMax": {
"value": "10000"
},
"firewallSettingEngineOptionConnectionsNumTcpMax": {
"value": "1000000"
},
"firewallSettingEngineOptionConnectionsNumUdpMax": {
"value": "1000000"
},
"firewallSettingEngineOptionDebugModeEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDebugPacketNumMax": {
"value": "8"
},
"firewallSettingEngineOptionDisconnectTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionDrop6To4BogonsAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropEvasiveRetransmitEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDropIpZeroPayloadEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6BogonsAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6ExtType0Enabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6FragmentsLowerThanMinMtuEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6ReservedAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6SiteLocalAddressesEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDropTeredoAnomaliesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropUnknownSslProtocolEnabled": {
"value": "true"
},
"firewallSettingEngineOptionErrorTimeout": {
"value": "10 Seconds"
},
"firewallSettingEngineOptionEstablishedTimeout": {
"value": "3 Hours"
},
"firewallSettingEngineOptionEventNodesMax": {
"value": "20000"
},
"firewallSettingEngineOptionFilterIpv4Tunnels": {
"value": "Disable Detection of IPv4 Tunnels"
},
"firewallSettingEngineOptionFilterIpv6Tunnels": {
"value": "Disable Detection of IPv6 Tunnels"
},
"firewallSettingEngineOptionFinWait1Timeout": {
"value": "2 Minutes"
},
"firewallSettingEngineOptionForceAllowDhcpDns": {
"value": "Allow DNS Query and DHCP Client"
},
"firewallSettingEngineOptionForceAllowIcmpType3Code4": {
"value": "Add Force Allow rule for ICMP type3 code4"
},
"firewallSettingEngineOptionFragmentOffsetMin": {
"value": "60"
},
"firewallSettingEngineOptionFragmentSizeMin": {
"value": "120"
},
"firewallSettingEngineOptionGenerateConnectionEventsIcmpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionGenerateConnectionEventsTcpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionGenerateConnectionEventsUdpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionIcmpTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionIgnoreStatusCode0": {
"value": "None"
},
"firewallSettingEngineOptionIgnoreStatusCode1": {
"value": "None"
},
"firewallSettingEngineOptionIgnoreStatusCode2": {
"value": "None"
},
"firewallSettingEngineOptionLastAckTimeout": {
"value": "3 Minutes"
},
"firewallSettingEngineOptionLogAllPacketDataEnabled": {
"value": "false"
},
"firewallSettingEngineOptionLogEventsPerSecondMax": {
"value": "100"
},
"firewallSettingEngineOptionLogOnePacketPeriod": {
"value": "5 Minutes"
},
"firewallSettingEngineOptionLogOnePacketWithinPeriodEnabled": {
"value": "false"
},
"firewallSettingEngineOptionLogPacketLengthMax": {
"value": "1500 Bytes"
},
"firewallSettingEngineOptionLoggingPolicy": {
"value": "Default"
},
"firewallSettingEngineOptionSilentTcpConnectionDropEnabled": {
"value": "false"
},
"firewallSettingEngineOptionSslSessionSize": {
"value": "Low - 2500"
},
"firewallSettingEngineOptionSslSessionTime": {
"value": "24 Hours"
},
"firewallSettingEngineOptionStrictTerodoPortCheckEnabled": {
"value": "true"
},
"firewallSettingEngineOptionSynRcvdTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionSynSentTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionTcpMssLimit": {
"value": "128 Bytes"
},
"firewallSettingEngineOptionTunnelDepthMax": {
"value": "1"
},
"firewallSettingEngineOptionTunnelDepthMaxExceededAction": {
"value": "Drop"
},
"firewallSettingEngineOptionUdpTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionVerifyTcpChecksumEnabled": {
"value": "false"
},
"firewallSettingEngineOptionsEnabled": {
"value": "false"
},
"firewallSettingEventLogFileCachedEntriesLifeTime": {
"value": "30 Minutes"
},
"firewallSettingEventLogFileCachedEntriesNum": {
"value": "128"
},
"firewallSettingEventLogFileCachedEntriesStaleTime": {
"value": "15 Minutes"
},
"firewallSettingEventLogFileIgnoreSourceIpListId": {
"value": ""
},
"firewallSettingEventLogFileRetainNum": {
"value": "3"
},
"firewallSettingEventLogFileSizeMax": {
"value": "4 MB"
},
"firewallSettingEventsOutOfAllowedPolicyEnabled": {
"value": "true"
},
"firewallSettingFailureResponseEngineSystem": {
"value": "Fail closed"
},
"firewallSettingFailureResponsePacketSanityCheck": {
"value": "Fail closed"
},
"firewallSettingInterfaceIsolationEnabled": {
"value": "false"
},
"firewallSettingInterfaceLimitOneActiveEnabled": {
"value": "false"
},
"firewallSettingInterfacePatterns": {
"value": ""
},
"firewallSettingNetworkEngineMode": {
"value": "Inline"
},
"firewallSettingReconnaissanceBlockFingerprintProbeDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockNetworkOrPortScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpNullScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpSynFinScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpXmasAttackDuration": {
"value": "No"
},
"firewallSettingReconnaissanceDetectFingerprintProbeEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectNetworkOrPortScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpNullScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpSynFinScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpXmasAttackEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceExcludeIpListId": {
"value": "1"
},
"firewallSettingReconnaissanceIncludeIpListId": {
"value": ""
},
"firewallSettingReconnaissanceNotifyFingerprintProbeEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyNetworkOrPortScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpNullScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpSynFinScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpXmasAttackEnabled": {
"value": "true"
},
"firewallSettingSyslogConfigId": {
"value": "0"
},
"firewallSettingVirtualAndContainerNetworkScanEnabled": {
"value": "false"
},
"integrityMonitoringSettingAutoApplyRecommendationsEnabled": {
"value": "No"
},
"integrityMonitoringSettingCombinedModeProtectionSource": {
"value": "Appliance preferred"
},
"integrityMonitoringSettingContentHashAlgorithm": {
"value": "sha1"
},
"integrityMonitoringSettingCpuUsageLevel": {
"value": "High"
},
"integrityMonitoringSettingRealtimeEnabled": {
"value": "false"
},
"integrityMonitoringSettingScanCacheConfigId": {
"value": "3"
},
"integrityMonitoringSettingSyslogConfigId": {
"value": "0"
},
"integrityMonitoringSettingVirtualApplianceOptimizationScanCacheEntriesMax": {
"value": "500000"
},
"intrusionPreventionSettingAutoApplyRecommendationsEnabled": {
"value": "Yes"
},
"intrusionPreventionSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"intrusionPreventionSettingEngineOptionFragmentedIpKeepMax": {
"value": "1000"
},
"intrusionPreventionSettingEngineOptionFragmentedIpPacketSendIcmpEnabled": {
"value": "true"
},
"intrusionPreventionSettingEngineOptionFragmentedIpTimeout": {
"value": "60 Seconds"
},
"intrusionPreventionSettingEngineOptionFragmentedIpUnconcernedMacAddressBypassEnabled": {
"value": "false"
},
"intrusionPreventionSettingEngineOptionsEnabled": {
"value": "false"
},
"intrusionPreventionSettingLogDataRuleFirstMatchEnabled": {
"value": "true"
},
"intrusionPreventionSettingNsxSecurityTaggingDetectModeLevel": {
"value": "No Tagging"
},
"intrusionPreventionSettingNsxSecurityTaggingPreventModeLevel": {
"value": "No Tagging"
},
"intrusionPreventionSettingVirtualAndContainerNetworkScanEnabled": {
"value": "true"
},
"logInspectionSettingAutoApplyRecommendationsEnabled": {
"value": "No"
},
"logInspectionSettingSeverityClippingAgentEventSendSyslogLevelMin": {
"value": "Medium (6)"
},
"logInspectionSettingSeverityClippingAgentEventStoreLevelMin": {
"value": "Medium (6)"
},
"logInspectionSettingSyslogConfigId": {
"value": "0"
},
"platformSettingAgentCommunicationsDirection": {
"value": "Agent/Appliance Initiated"
},
"platformSettingAgentEventsSendInterval": {
"value": "60 Seconds"
},
"platformSettingAgentSelfProtectionEnabled": {
"value": "false"
},
"platformSettingAgentSelfProtectionPassword": {
"value": ""
},
"platformSettingAgentSelfProtectionPasswordEnabled": {
"value": "false"
},
"platformSettingAutoAssignNewIntrusionPreventionRulesEnabled": {
"value": "true"
},
"platformSettingAutoUpdateAntiMalwareEngineEnabled": {
"value": "false"
},
"platformSettingCombinedModeNetworkGroupProtectionSource": {
"value": "Agent preferred"
},
"platformSettingEnvironmentVariableOverrides": {
"value": ""
},
"platformSettingHeartbeatInactiveVmOfflineAlertEnabled": {
"value": "false"
},
"platformSettingHeartbeatInterval": {
"value": "10 Minutes"
},
"platformSettingHeartbeatLocalTimeShiftAlertThreshold": {
"value": "Unlimited"
},
"platformSettingHeartbeatMissedAlertThreshold": {
"value": "5"
},
"platformSettingInactiveAgentCleanupOverrideEnabled": {
"value": "false"
},
"platformSettingNotificationsSuppressPopupsEnabled": {
"value": "false"
},
"platformSettingRecommendationOngoingScansInterval": {
"value": "7 Days"
},
"platformSettingRelayState": {
"value": "false"
},
"platformSettingScanCacheConcurrencyMax": {
"value": "1"
},
"platformSettingScanOpenPortListId": {
"value": "1-1024"
},
"platformSettingSmartProtectionAntiMalwareGlobalServerProxyId": {
"value": ""
},
"platformSettingSmartProtectionGlobalServerEnabled": {
"value": "true"
},
"platformSettingSmartProtectionGlobalServerProxyId": {
"value": ""
},
"platformSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"platformSettingTroubleshootingLoggingLevel": {
"value": "Do Not Override"
},
"webReputationSettingAlertingEnabled": {
"value": "false"
},
"webReputationSettingAllowedUrlDomains": {
"value": ""
},
"webReputationSettingAllowedUrls": {
"value": ""
},
"webReputationSettingBlockedUrlDomains": {
"value": ""
},
"webReputationSettingBlockedUrlKeywords": {
"value": ""
},
"webReputationSettingBlockedUrls": {
"value": ""
},
"webReputationSettingBlockingPageLink": {
"value": "http://sitesafety.trendmicro.com/"
},
"webReputationSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"webReputationSettingMonitorPortListId": {
"value": "80,8080"
},
"webReputationSettingSecurityBlockUntestedPagesEnabled": {
"value": "false"
},
"webReputationSettingSecurityLevel": {
"value": "Medium"
},
"webReputationSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerAllowOffDomainGlobal": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerEnabled": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerUrls": {
"value": ""
},
"webReputationSettingSmartProtectionServerConnectionLostWarningEnabled": {
"value": "true"
},
"webReputationSettingSmartProtectionWebReputationGlobalServerProxyId": {
"value": ""
},
"webReputationSettingSyslogConfigId": {
"value": "0"
}
},
"recommendationScanMode": "ongoing",
"webReputation": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off"
},
"state": "off"
}
},
{
"ID": 37,
"activityMonitoring": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off"
},
"state": "off"
},
"antiMalware": {
"manualScanConfigurationID": 2,
"moduleStatus": {
"status": "active",
"statusMessage": "Real Time"
},
"realTimeScanConfigurationID": 1,
"realTimeScanScheduleID": 4,
"scheduledScanConfigurationID": 3,
"state": "on"
},
"applicationControl": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off"
},
"state": "off"
},
"autoRequiresUpdate": "on",
"description": "",
"firewall": {
"globalStatefulConfigurationID": 1,
"moduleStatus": {
"status": "active",
"statusMessage": "On, 22 rules"
},
"ruleIDs": [
23,
24,
25,
28,
29,
30,
32,
33,
34,
36,
42,
46,
47,
48,
49,
52,
53,
54,
57,
58,
59,
60
],
"state": "on"
},
"integrityMonitoring": {
"moduleStatus": {
"status": "active",
"statusMessage": "On, 27 rules"
},
"ruleIDs": [
1,
2,
3,
4,
5,
6,
11,
12,
13,
14,
17,
19,
20,
23,
24,
38,
53,
54,
57,
62,
64,
103,
144,
151,
157,
159,
163
],
"state": "on"
},
"intrusionPrevention": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Prevent, no rules"
},
"state": "prevent"
},
"logInspection": {
"moduleStatus": {
"status": "active",
"statusMessage": "On, 5 rules"
},
"ruleIDs": [
18,
27,
28,
44,
75
],
"state": "on"
},
"name": "test3",
"parentID": 3,
"policySettings": {
"activityMonitoringSettingActivityEnabled": {
"value": "Off"
},
"activityMonitoringSettingIndicatorEnabled": {
"value": "Off"
},
"activityMonitoringSettingSyslogConfigId": {
"value": "0"
},
"antiMalwareSettingBehaviorMonitoringScanExclusionList": {
"value": ""
},
"antiMalwareSettingCombinedModeProtectionSource": {
"value": "Appliance preferred"
},
"antiMalwareSettingConnectedThreatDefenseSuspiciousFileDdanSubmissionEnabled": {
"value": "true"
},
"antiMalwareSettingConnectedThreatDefenseUseControlManagerSuspiciousObjectListEnabled": {
"value": "true"
},
"antiMalwareSettingDocumentExploitProtectionRuleExceptions": {
"value": ""
},
"antiMalwareSettingFileHashEnabled": {
"value": "false"
},
"antiMalwareSettingFileHashMd5Enabled": {
"value": "false"
},
"antiMalwareSettingFileHashSha256Enabled": {
"value": "false"
},
"antiMalwareSettingFileHashSizeMaxMbytes": {
"value": "128"
},
"antiMalwareSettingIdentifiedFilesSpaceMaxMbytes": {
"value": "1024"
},
"antiMalwareSettingMalwareScanMultithreadedProcessingEnabled": {
"value": "false"
},
"antiMalwareSettingNsxSecurityTaggingEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingOnRemediationFailureEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingRemoveOnCleanScanEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingValue": {
"value": "ANTI_VIRUS.VirusFound.threat=medium"
},
"antiMalwareSettingPredictiveMachineLearningExceptions": {
"value": ""
},
"antiMalwareSettingScanCacheOnDemandConfigId": {
"value": "1"
},
"antiMalwareSettingScanCacheRealTimeConfigId": {
"value": "2"
},
"antiMalwareSettingScanFileSizeMaxMbytes": {
"value": "0"
},
"antiMalwareSettingSmartProtectionGlobalServerEnabled": {
"value": "true"
},
"antiMalwareSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"antiMalwareSettingSmartProtectionLocalServerAllowOffDomainGlobal": {
"value": "false"
},
"antiMalwareSettingSmartProtectionLocalServerUrls": {
"value": ""
},
"antiMalwareSettingSmartProtectionServerConnectionLostWarningEnabled": {
"value": "true"
},
"antiMalwareSettingSmartScanState": {
"value": "Automatic"
},
"antiMalwareSettingSpywareApprovedList": {
"value": ""
},
"antiMalwareSettingSyslogConfigId": {
"value": "0"
},
"antiMalwareSettingVirtualApplianceOnDemandScanCacheEntriesMax": {
"value": "500000"
},
"antiMalwareSettingVirtualApplianceRealTimeScanCacheEntriesMax": {
"value": "500000"
},
"applicationControlSettingExecutionEnforcementLevel": {
"value": "Allow unrecognized software until it is explicitly blocked"
},
"applicationControlSettingRulesetMode": {
"value": "Use local ruleset"
},
"applicationControlSettingSharedRulesetId": {
"value": "0"
},
"applicationControlSettingSyslogConfigId": {
"value": "0"
},
"firewallSettingAntiEvasionCheckEvasiveRetransmit": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckFinNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckFragmentedPackets": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckOutNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckPaws": {
"value": "Ignore"
},
"firewallSettingAntiEvasionCheckRstNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpChecksum": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpCongestionFlags": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpPawsZero": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpRstFinFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSplitHandshake": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynFinFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynRstFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynWithData": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpUrgentFlags": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpZeroFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionSecurityPosture": {
"value": "Normal"
},
"firewallSettingAntiEvasionTcpPawsWindowPolicy": {
"value": "0"
},
"firewallSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"firewallSettingConfigPackageExceedsAlertMaxEnabled": {
"value": "true"
},
"firewallSettingEngineOptionAckTimeout": {
"value": "1 Second"
},
"firewallSettingEngineOptionAllowNullIpEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBlockIpv6Agent8AndEarlierEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBlockIpv6Agent9AndLaterEnabled": {
"value": "false"
},
"firewallSettingEngineOptionBlockSameSrcDstIpEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBootStartTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionBypassCiscoWaasConnectionsEnabled": {
"value": "false"
},
"firewallSettingEngineOptionCloseTimeout": {
"value": "0 Seconds"
},
"firewallSettingEngineOptionCloseWaitTimeout": {
"value": "2 Minutes"
},
"firewallSettingEngineOptionClosingTimeout": {
"value": "1 Second"
},
"firewallSettingEngineOptionColdStartTimeout": {
"value": "5 Minutes"
},
"firewallSettingEngineOptionConnectionCleanupTimeout": {
"value": "10 Seconds"
},
"firewallSettingEngineOptionConnectionsCleanupMax": {
"value": "1000"
},
"firewallSettingEngineOptionConnectionsNumIcmpMax": {
"value": "10000"
},
"firewallSettingEngineOptionConnectionsNumTcpMax": {
"value": "1000000"
},
"firewallSettingEngineOptionConnectionsNumUdpMax": {
"value": "1000000"
},
"firewallSettingEngineOptionDebugModeEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDebugPacketNumMax": {
"value": "8"
},
"firewallSettingEngineOptionDisconnectTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionDrop6To4BogonsAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropEvasiveRetransmitEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDropIpZeroPayloadEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6BogonsAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6ExtType0Enabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6FragmentsLowerThanMinMtuEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6ReservedAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6SiteLocalAddressesEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDropTeredoAnomaliesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropUnknownSslProtocolEnabled": {
"value": "true"
},
"firewallSettingEngineOptionErrorTimeout": {
"value": "10 Seconds"
},
"firewallSettingEngineOptionEstablishedTimeout": {
"value": "3 Hours"
},
"firewallSettingEngineOptionEventNodesMax": {
"value": "20000"
},
"firewallSettingEngineOptionFilterIpv4Tunnels": {
"value": "Disable Detection of IPv4 Tunnels"
},
"firewallSettingEngineOptionFilterIpv6Tunnels": {
"value": "Disable Detection of IPv6 Tunnels"
},
"firewallSettingEngineOptionFinWait1Timeout": {
"value": "2 Minutes"
},
"firewallSettingEngineOptionForceAllowDhcpDns": {
"value": "Allow DNS Query and DHCP Client"
},
"firewallSettingEngineOptionForceAllowIcmpType3Code4": {
"value": "Add Force Allow rule for ICMP type3 code4"
},
"firewallSettingEngineOptionFragmentOffsetMin": {
"value": "60"
},
"firewallSettingEngineOptionFragmentSizeMin": {
"value": "120"
},
"firewallSettingEngineOptionGenerateConnectionEventsIcmpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionGenerateConnectionEventsTcpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionGenerateConnectionEventsUdpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionIcmpTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionIgnoreStatusCode0": {
"value": "None"
},
"firewallSettingEngineOptionIgnoreStatusCode1": {
"value": "None"
},
"firewallSettingEngineOptionIgnoreStatusCode2": {
"value": "None"
},
"firewallSettingEngineOptionLastAckTimeout": {
"value": "3 Minutes"
},
"firewallSettingEngineOptionLogAllPacketDataEnabled": {
"value": "false"
},
"firewallSettingEngineOptionLogEventsPerSecondMax": {
"value": "100"
},
"firewallSettingEngineOptionLogOnePacketPeriod": {
"value": "5 Minutes"
},
"firewallSettingEngineOptionLogOnePacketWithinPeriodEnabled": {
"value": "false"
},
"firewallSettingEngineOptionLogPacketLengthMax": {
"value": "1500 Bytes"
},
"firewallSettingEngineOptionLoggingPolicy": {
"value": "Default"
},
"firewallSettingEngineOptionSilentTcpConnectionDropEnabled": {
"value": "false"
},
"firewallSettingEngineOptionSslSessionSize": {
"value": "Low - 2500"
},
"firewallSettingEngineOptionSslSessionTime": {
"value": "24 Hours"
},
"firewallSettingEngineOptionStrictTerodoPortCheckEnabled": {
"value": "true"
},
"firewallSettingEngineOptionSynRcvdTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionSynSentTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionTcpMssLimit": {
"value": "128 Bytes"
},
"firewallSettingEngineOptionTunnelDepthMax": {
"value": "1"
},
"firewallSettingEngineOptionTunnelDepthMaxExceededAction": {
"value": "Drop"
},
"firewallSettingEngineOptionUdpTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionVerifyTcpChecksumEnabled": {
"value": "false"
},
"firewallSettingEngineOptionsEnabled": {
"value": "false"
},
"firewallSettingEventLogFileCachedEntriesLifeTime": {
"value": "30 Minutes"
},
"firewallSettingEventLogFileCachedEntriesNum": {
"value": "128"
},
"firewallSettingEventLogFileCachedEntriesStaleTime": {
"value": "15 Minutes"
},
"firewallSettingEventLogFileIgnoreSourceIpListId": {
"value": ""
},
"firewallSettingEventLogFileRetainNum": {
"value": "3"
},
"firewallSettingEventLogFileSizeMax": {
"value": "4 MB"
},
"firewallSettingEventsOutOfAllowedPolicyEnabled": {
"value": "true"
},
"firewallSettingFailureResponseEngineSystem": {
"value": "Fail closed"
},
"firewallSettingFailureResponsePacketSanityCheck": {
"value": "Fail closed"
},
"firewallSettingInterfaceIsolationEnabled": {
"value": "false"
},
"firewallSettingInterfaceLimitOneActiveEnabled": {
"value": "false"
},
"firewallSettingInterfacePatterns": {
"value": ""
},
"firewallSettingNetworkEngineMode": {
"value": "Inline"
},
"firewallSettingReconnaissanceBlockFingerprintProbeDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockNetworkOrPortScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpNullScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpSynFinScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpXmasAttackDuration": {
"value": "No"
},
"firewallSettingReconnaissanceDetectFingerprintProbeEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectNetworkOrPortScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpNullScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpSynFinScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpXmasAttackEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceExcludeIpListId": {
"value": "1"
},
"firewallSettingReconnaissanceIncludeIpListId": {
"value": ""
},
"firewallSettingReconnaissanceNotifyFingerprintProbeEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyNetworkOrPortScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpNullScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpSynFinScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpXmasAttackEnabled": {
"value": "true"
},
"firewallSettingSyslogConfigId": {
"value": "0"
},
"firewallSettingVirtualAndContainerNetworkScanEnabled": {
"value": "false"
},
"integrityMonitoringSettingAutoApplyRecommendationsEnabled": {
"value": "No"
},
"integrityMonitoringSettingCombinedModeProtectionSource": {
"value": "Appliance preferred"
},
"integrityMonitoringSettingContentHashAlgorithm": {
"value": "sha1"
},
"integrityMonitoringSettingCpuUsageLevel": {
"value": "High"
},
"integrityMonitoringSettingRealtimeEnabled": {
"value": "false"
},
"integrityMonitoringSettingScanCacheConfigId": {
"value": "3"
},
"integrityMonitoringSettingSyslogConfigId": {
"value": "0"
},
"integrityMonitoringSettingVirtualApplianceOptimizationScanCacheEntriesMax": {
"value": "500000"
},
"intrusionPreventionSettingAutoApplyRecommendationsEnabled": {
"value": "Yes"
},
"intrusionPreventionSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"intrusionPreventionSettingEngineOptionFragmentedIpKeepMax": {
"value": "1000"
},
"intrusionPreventionSettingEngineOptionFragmentedIpPacketSendIcmpEnabled": {
"value": "true"
},
"intrusionPreventionSettingEngineOptionFragmentedIpTimeout": {
"value": "60 Seconds"
},
"intrusionPreventionSettingEngineOptionFragmentedIpUnconcernedMacAddressBypassEnabled": {
"value": "false"
},
"intrusionPreventionSettingEngineOptionsEnabled": {
"value": "false"
},
"intrusionPreventionSettingLogDataRuleFirstMatchEnabled": {
"value": "true"
},
"intrusionPreventionSettingNsxSecurityTaggingDetectModeLevel": {
"value": "No Tagging"
},
"intrusionPreventionSettingNsxSecurityTaggingPreventModeLevel": {
"value": "No Tagging"
},
"intrusionPreventionSettingVirtualAndContainerNetworkScanEnabled": {
"value": "true"
},
"logInspectionSettingAutoApplyRecommendationsEnabled": {
"value": "No"
},
"logInspectionSettingSeverityClippingAgentEventSendSyslogLevelMin": {
"value": "Medium (6)"
},
"logInspectionSettingSeverityClippingAgentEventStoreLevelMin": {
"value": "Medium (6)"
},
"logInspectionSettingSyslogConfigId": {
"value": "0"
},
"platformSettingAgentCommunicationsDirection": {
"value": "Agent/Appliance Initiated"
},
"platformSettingAgentEventsSendInterval": {
"value": "60 Seconds"
},
"platformSettingAgentSelfProtectionEnabled": {
"value": "false"
},
"platformSettingAgentSelfProtectionPassword": {
"value": ""
},
"platformSettingAgentSelfProtectionPasswordEnabled": {
"value": "false"
},
"platformSettingAutoAssignNewIntrusionPreventionRulesEnabled": {
"value": "true"
},
"platformSettingAutoUpdateAntiMalwareEngineEnabled": {
"value": "false"
},
"platformSettingCombinedModeNetworkGroupProtectionSource": {
"value": "Agent preferred"
},
"platformSettingEnvironmentVariableOverrides": {
"value": ""
},
"platformSettingHeartbeatInactiveVmOfflineAlertEnabled": {
"value": "false"
},
"platformSettingHeartbeatInterval": {
"value": "10 Minutes"
},
"platformSettingHeartbeatLocalTimeShiftAlertThreshold": {
"value": "Unlimited"
},
"platformSettingHeartbeatMissedAlertThreshold": {
"value": "5"
},
"platformSettingInactiveAgentCleanupOverrideEnabled": {
"value": "false"
},
"platformSettingNotificationsSuppressPopupsEnabled": {
"value": "false"
},
"platformSettingRecommendationOngoingScansInterval": {
"value": "7 Days"
},
"platformSettingRelayState": {
"value": "false"
},
"platformSettingScanCacheConcurrencyMax": {
"value": "1"
},
"platformSettingScanOpenPortListId": {
"value": "1-1024"
},
"platformSettingSmartProtectionAntiMalwareGlobalServerProxyId": {
"value": ""
},
"platformSettingSmartProtectionGlobalServerEnabled": {
"value": "true"
},
"platformSettingSmartProtectionGlobalServerProxyId": {
"value": ""
},
"platformSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"platformSettingTroubleshootingLoggingLevel": {
"value": "Do Not Override"
},
"webReputationSettingAlertingEnabled": {
"value": "false"
},
"webReputationSettingAllowedUrlDomains": {
"value": ""
},
"webReputationSettingAllowedUrls": {
"value": ""
},
"webReputationSettingBlockedUrlDomains": {
"value": ""
},
"webReputationSettingBlockedUrlKeywords": {
"value": ""
},
"webReputationSettingBlockedUrls": {
"value": ""
},
"webReputationSettingBlockingPageLink": {
"value": "http://sitesafety.trendmicro.com/"
},
"webReputationSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"webReputationSettingMonitorPortListId": {
"value": "80,8080"
},
"webReputationSettingSecurityBlockUntestedPagesEnabled": {
"value": "false"
},
"webReputationSettingSecurityLevel": {
"value": "Medium"
},
"webReputationSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerAllowOffDomainGlobal": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerEnabled": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerUrls": {
"value": ""
},
"webReputationSettingSmartProtectionServerConnectionLostWarningEnabled": {
"value": "true"
},
"webReputationSettingSmartProtectionWebReputationGlobalServerProxyId": {
"value": ""
},
"webReputationSettingSyslogConfigId": {
"value": "0"
}
},
"recommendationScanMode": "ongoing",
"webReputation": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off"
},
"state": "off"
}
},
{
"ID": 68,
"activityMonitoring": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off"
},
"state": "off"
},
"antiMalware": {
"manualScanConfigurationID": 2,
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off"
},
"realTimeScanConfigurationID": 1,
"realTimeScanScheduleID": 4,
"scheduledScanConfigurationID": 3,
"state": "off"
},
"applicationControl": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off"
},
"state": "off"
},
"autoRequiresUpdate": "on",
"description": "PoC Policy",
"firewall": {
"globalStatefulConfigurationID": 1,
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off, 2 rules"
},
"ruleIDs": [
23,
28
],
"state": "off"
},
"integrityMonitoring": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off, no rules"
},
"state": "off"
},
"intrusionPrevention": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off, no rules"
},
"state": "off"
},
"logInspection": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off, no rules"
},
"state": "off"
},
"name": "PoC1",
"parentID": 2,
"policySettings": {
"activityMonitoringSettingActivityEnabled": {
"value": "Off"
},
"activityMonitoringSettingIndicatorEnabled": {
"value": "Off"
},
"activityMonitoringSettingSyslogConfigId": {
"value": "0"
},
"antiMalwareSettingBehaviorMonitoringScanExclusionList": {
"value": ""
},
"antiMalwareSettingCombinedModeProtectionSource": {
"value": "Appliance preferred"
},
"antiMalwareSettingConnectedThreatDefenseSuspiciousFileDdanSubmissionEnabled": {
"value": "true"
},
"antiMalwareSettingConnectedThreatDefenseUseControlManagerSuspiciousObjectListEnabled": {
"value": "true"
},
"antiMalwareSettingDocumentExploitProtectionRuleExceptions": {
"value": ""
},
"antiMalwareSettingFileHashEnabled": {
"value": "false"
},
"antiMalwareSettingFileHashMd5Enabled": {
"value": "false"
},
"antiMalwareSettingFileHashSha256Enabled": {
"value": "false"
},
"antiMalwareSettingFileHashSizeMaxMbytes": {
"value": "128"
},
"antiMalwareSettingIdentifiedFilesSpaceMaxMbytes": {
"value": "1024"
},
"antiMalwareSettingMalwareScanMultithreadedProcessingEnabled": {
"value": "false"
},
"antiMalwareSettingNsxSecurityTaggingEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingOnRemediationFailureEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingRemoveOnCleanScanEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingValue": {
"value": "ANTI_VIRUS.VirusFound.threat=medium"
},
"antiMalwareSettingPredictiveMachineLearningExceptions": {
"value": ""
},
"antiMalwareSettingScanCacheOnDemandConfigId": {
"value": "1"
},
"antiMalwareSettingScanCacheRealTimeConfigId": {
"value": "2"
},
"antiMalwareSettingScanFileSizeMaxMbytes": {
"value": "0"
},
"antiMalwareSettingSmartProtectionGlobalServerEnabled": {
"value": "true"
},
"antiMalwareSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"antiMalwareSettingSmartProtectionLocalServerAllowOffDomainGlobal": {
"value": "false"
},
"antiMalwareSettingSmartProtectionLocalServerUrls": {
"value": ""
},
"antiMalwareSettingSmartProtectionServerConnectionLostWarningEnabled": {
"value": "true"
},
"antiMalwareSettingSmartScanState": {
"value": "Automatic"
},
"antiMalwareSettingSpywareApprovedList": {
"value": ""
},
"antiMalwareSettingSyslogConfigId": {
"value": "0"
},
"antiMalwareSettingVirtualApplianceOnDemandScanCacheEntriesMax": {
"value": "500000"
},
"antiMalwareSettingVirtualApplianceRealTimeScanCacheEntriesMax": {
"value": "500000"
},
"applicationControlSettingExecutionEnforcementLevel": {
"value": "Allow unrecognized software until it is explicitly blocked"
},
"applicationControlSettingRulesetMode": {
"value": "Use local ruleset"
},
"applicationControlSettingSharedRulesetId": {
"value": "0"
},
"applicationControlSettingSyslogConfigId": {
"value": "0"
},
"firewallSettingAntiEvasionCheckEvasiveRetransmit": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckFinNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckFragmentedPackets": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckOutNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckPaws": {
"value": "Ignore"
},
"firewallSettingAntiEvasionCheckRstNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpChecksum": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpCongestionFlags": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpPawsZero": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpRstFinFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSplitHandshake": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynFinFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynRstFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynWithData": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpUrgentFlags": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpZeroFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionSecurityPosture": {
"value": "Normal"
},
"firewallSettingAntiEvasionTcpPawsWindowPolicy": {
"value": "0"
},
"firewallSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"firewallSettingConfigPackageExceedsAlertMaxEnabled": {
"value": "true"
},
"firewallSettingEngineOptionAckTimeout": {
"value": "1 Second"
},
"firewallSettingEngineOptionAllowNullIpEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBlockIpv6Agent8AndEarlierEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBlockIpv6Agent9AndLaterEnabled": {
"value": "false"
},
"firewallSettingEngineOptionBlockSameSrcDstIpEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBootStartTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionBypassCiscoWaasConnectionsEnabled": {
"value": "false"
},
"firewallSettingEngineOptionCloseTimeout": {
"value": "0 Seconds"
},
"firewallSettingEngineOptionCloseWaitTimeout": {
"value": "2 Minutes"
},
"firewallSettingEngineOptionClosingTimeout": {
"value": "1 Second"
},
"firewallSettingEngineOptionColdStartTimeout": {
"value": "5 Minutes"
},
"firewallSettingEngineOptionConnectionCleanupTimeout": {
"value": "10 Seconds"
},
"firewallSettingEngineOptionConnectionsCleanupMax": {
"value": "1000"
},
"firewallSettingEngineOptionConnectionsNumIcmpMax": {
"value": "10000"
},
"firewallSettingEngineOptionConnectionsNumTcpMax": {
"value": "1000000"
},
"firewallSettingEngineOptionConnectionsNumUdpMax": {
"value": "1000000"
},
"firewallSettingEngineOptionDebugModeEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDebugPacketNumMax": {
"value": "8"
},
"firewallSettingEngineOptionDisconnectTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionDrop6To4BogonsAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropEvasiveRetransmitEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDropIpZeroPayloadEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6BogonsAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6ExtType0Enabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6FragmentsLowerThanMinMtuEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6ReservedAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6SiteLocalAddressesEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDropTeredoAnomaliesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropUnknownSslProtocolEnabled": {
"value": "true"
},
"firewallSettingEngineOptionErrorTimeout": {
"value": "10 Seconds"
},
"firewallSettingEngineOptionEstablishedTimeout": {
"value": "3 Hours"
},
"firewallSettingEngineOptionEventNodesMax": {
"value": "20000"
},
"firewallSettingEngineOptionFilterIpv4Tunnels": {
"value": "Disable Detection of IPv4 Tunnels"
},
"firewallSettingEngineOptionFilterIpv6Tunnels": {
"value": "Disable Detection of IPv6 Tunnels"
},
"firewallSettingEngineOptionFinWait1Timeout": {
"value": "2 Minutes"
},
"firewallSettingEngineOptionForceAllowDhcpDns": {
"value": "Allow DNS Query and DHCP Client"
},
"firewallSettingEngineOptionForceAllowIcmpType3Code4": {
"value": "Add Force Allow rule for ICMP type3 code4"
},
"firewallSettingEngineOptionFragmentOffsetMin": {
"value": "60"
},
"firewallSettingEngineOptionFragmentSizeMin": {
"value": "120"
},
"firewallSettingEngineOptionGenerateConnectionEventsIcmpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionGenerateConnectionEventsTcpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionGenerateConnectionEventsUdpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionIcmpTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionIgnoreStatusCode0": {
"value": "None"
},
"firewallSettingEngineOptionIgnoreStatusCode1": {
"value": "None"
},
"firewallSettingEngineOptionIgnoreStatusCode2": {
"value": "None"
},
"firewallSettingEngineOptionLastAckTimeout": {
"value": "3 Minutes"
},
"firewallSettingEngineOptionLogAllPacketDataEnabled": {
"value": "false"
},
"firewallSettingEngineOptionLogEventsPerSecondMax": {
"value": "100"
},
"firewallSettingEngineOptionLogOnePacketPeriod": {
"value": "5 Minutes"
},
"firewallSettingEngineOptionLogOnePacketWithinPeriodEnabled": {
"value": "false"
},
"firewallSettingEngineOptionLogPacketLengthMax": {
"value": "1500 Bytes"
},
"firewallSettingEngineOptionLoggingPolicy": {
"value": "Default"
},
"firewallSettingEngineOptionSilentTcpConnectionDropEnabled": {
"value": "false"
},
"firewallSettingEngineOptionSslSessionSize": {
"value": "Low - 2500"
},
"firewallSettingEngineOptionSslSessionTime": {
"value": "24 Hours"
},
"firewallSettingEngineOptionStrictTerodoPortCheckEnabled": {
"value": "true"
},
"firewallSettingEngineOptionSynRcvdTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionSynSentTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionTcpMssLimit": {
"value": "128 Bytes"
},
"firewallSettingEngineOptionTunnelDepthMax": {
"value": "1"
},
"firewallSettingEngineOptionTunnelDepthMaxExceededAction": {
"value": "Drop"
},
"firewallSettingEngineOptionUdpTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionVerifyTcpChecksumEnabled": {
"value": "false"
},
"firewallSettingEngineOptionsEnabled": {
"value": "true"
},
"firewallSettingEventLogFileCachedEntriesLifeTime": {
"value": "30 Minutes"
},
"firewallSettingEventLogFileCachedEntriesNum": {
"value": "128"
},
"firewallSettingEventLogFileCachedEntriesStaleTime": {
"value": "15 Minutes"
},
"firewallSettingEventLogFileIgnoreSourceIpListId": {
"value": ""
},
"firewallSettingEventLogFileRetainNum": {
"value": "3"
},
"firewallSettingEventLogFileSizeMax": {
"value": "4 MB"
},
"firewallSettingEventsOutOfAllowedPolicyEnabled": {
"value": "true"
},
"firewallSettingFailureResponseEngineSystem": {
"value": "Fail closed"
},
"firewallSettingFailureResponsePacketSanityCheck": {
"value": "Fail closed"
},
"firewallSettingInterfaceIsolationEnabled": {
"value": "false"
},
"firewallSettingInterfaceLimitOneActiveEnabled": {
"value": "false"
},
"firewallSettingInterfacePatterns": {
"value": ""
},
"firewallSettingNetworkEngineMode": {
"value": "Inline"
},
"firewallSettingReconnaissanceBlockFingerprintProbeDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockNetworkOrPortScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpNullScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpSynFinScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpXmasAttackDuration": {
"value": "No"
},
"firewallSettingReconnaissanceDetectFingerprintProbeEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectNetworkOrPortScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpNullScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpSynFinScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpXmasAttackEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceExcludeIpListId": {
"value": "1"
},
"firewallSettingReconnaissanceIncludeIpListId": {
"value": ""
},
"firewallSettingReconnaissanceNotifyFingerprintProbeEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyNetworkOrPortScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpNullScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpSynFinScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpXmasAttackEnabled": {
"value": "true"
},
"firewallSettingSyslogConfigId": {
"value": "0"
},
"firewallSettingVirtualAndContainerNetworkScanEnabled": {
"value": "false"
},
"integrityMonitoringSettingAutoApplyRecommendationsEnabled": {
"value": "No"
},
"integrityMonitoringSettingCombinedModeProtectionSource": {
"value": "Appliance preferred"
},
"integrityMonitoringSettingContentHashAlgorithm": {
"value": "sha1"
},
"integrityMonitoringSettingCpuUsageLevel": {
"value": "High"
},
"integrityMonitoringSettingRealtimeEnabled": {
"value": "false"
},
"integrityMonitoringSettingScanCacheConfigId": {
"value": "3"
},
"integrityMonitoringSettingSyslogConfigId": {
"value": "0"
},
"integrityMonitoringSettingVirtualApplianceOptimizationScanCacheEntriesMax": {
"value": "500000"
},
"intrusionPreventionSettingAutoApplyRecommendationsEnabled": {
"value": "Yes"
},
"intrusionPreventionSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"intrusionPreventionSettingEngineOptionFragmentedIpKeepMax": {
"value": "1000"
},
"intrusionPreventionSettingEngineOptionFragmentedIpPacketSendIcmpEnabled": {
"value": "true"
},
"intrusionPreventionSettingEngineOptionFragmentedIpTimeout": {
"value": "60 Seconds"
},
"intrusionPreventionSettingEngineOptionFragmentedIpUnconcernedMacAddressBypassEnabled": {
"value": "false"
},
"intrusionPreventionSettingEngineOptionsEnabled": {
"value": "false"
},
"intrusionPreventionSettingLogDataRuleFirstMatchEnabled": {
"value": "true"
},
"intrusionPreventionSettingNsxSecurityTaggingDetectModeLevel": {
"value": "No Tagging"
},
"intrusionPreventionSettingNsxSecurityTaggingPreventModeLevel": {
"value": "No Tagging"
},
"intrusionPreventionSettingVirtualAndContainerNetworkScanEnabled": {
"value": "true"
},
"logInspectionSettingAutoApplyRecommendationsEnabled": {
"value": "No"
},
"logInspectionSettingSeverityClippingAgentEventSendSyslogLevelMin": {
"value": "Medium (6)"
},
"logInspectionSettingSeverityClippingAgentEventStoreLevelMin": {
"value": "Medium (6)"
},
"logInspectionSettingSyslogConfigId": {
"value": "0"
},
"platformSettingAgentCommunicationsDirection": {
"value": "Agent/Appliance Initiated"
},
"platformSettingAgentEventsSendInterval": {
"value": "60 Seconds"
},
"platformSettingAgentSelfProtectionEnabled": {
"value": "false"
},
"platformSettingAgentSelfProtectionPassword": {
"value": ""
},
"platformSettingAgentSelfProtectionPasswordEnabled": {
"value": "false"
},
"platformSettingAutoAssignNewIntrusionPreventionRulesEnabled": {
"value": "true"
},
"platformSettingAutoUpdateAntiMalwareEngineEnabled": {
"value": "false"
},
"platformSettingCombinedModeNetworkGroupProtectionSource": {
"value": "Agent preferred"
},
"platformSettingEnvironmentVariableOverrides": {
"value": ""
},
"platformSettingHeartbeatInactiveVmOfflineAlertEnabled": {
"value": "false"
},
"platformSettingHeartbeatInterval": {
"value": "10 Minutes"
},
"platformSettingHeartbeatLocalTimeShiftAlertThreshold": {
"value": "Unlimited"
},
"platformSettingHeartbeatMissedAlertThreshold": {
"value": "5"
},
"platformSettingInactiveAgentCleanupOverrideEnabled": {
"value": "false"
},
"platformSettingNotificationsSuppressPopupsEnabled": {
"value": "false"
},
"platformSettingRecommendationOngoingScansInterval": {
"value": "7 Days"
},
"platformSettingRelayState": {
"value": "false"
},
"platformSettingScanCacheConcurrencyMax": {
"value": "1"
},
"platformSettingScanOpenPortListId": {
"value": "1-1024"
},
"platformSettingSmartProtectionAntiMalwareGlobalServerProxyId": {
"value": ""
},
"platformSettingSmartProtectionGlobalServerEnabled": {
"value": "true"
},
"platformSettingSmartProtectionGlobalServerProxyId": {
"value": ""
},
"platformSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"platformSettingTroubleshootingLoggingLevel": {
"value": "Do Not Override"
},
"webReputationSettingAlertingEnabled": {
"value": "false"
},
"webReputationSettingAllowedUrlDomains": {
"value": ""
},
"webReputationSettingAllowedUrls": {
"value": ""
},
"webReputationSettingBlockedUrlDomains": {
"value": ""
},
"webReputationSettingBlockedUrlKeywords": {
"value": ""
},
"webReputationSettingBlockedUrls": {
"value": ""
},
"webReputationSettingBlockingPageLink": {
"value": "http://sitesafety.trendmicro.com/"
},
"webReputationSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"webReputationSettingMonitorPortListId": {
"value": "80,8080"
},
"webReputationSettingSecurityBlockUntestedPagesEnabled": {
"value": "false"
},
"webReputationSettingSecurityLevel": {
"value": "Medium"
},
"webReputationSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerAllowOffDomainGlobal": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerEnabled": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerUrls": {
"value": ""
},
"webReputationSettingSmartProtectionServerConnectionLostWarningEnabled": {
"value": "true"
},
"webReputationSettingSmartProtectionWebReputationGlobalServerProxyId": {
"value": ""
},
"webReputationSettingSyslogConfigId": {
"value": "0"
}
},
"recommendationScanMode": "ongoing",
"webReputation": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off"
},
"state": "off"
}
},
{
"ID": 101,
"activityMonitoring": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off"
},
"state": "off"
},
"antiMalware": {
"manualScanConfigurationID": 2,
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off"
},
"realTimeScanConfigurationID": 1,
"realTimeScanScheduleID": 4,
"scheduledScanConfigurationID": 3,
"state": "off"
},
"applicationControl": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off"
},
"state": "off"
},
"autoRequiresUpdate": "on",
"description": "PoC Policy",
"firewall": {
"globalStatefulConfigurationID": 1,
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off, 2 rules"
},
"ruleIDs": [
23,
28
],
"state": "off"
},
"integrityMonitoring": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off, no rules"
},
"state": "off"
},
"intrusionPrevention": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off, no rules"
},
"state": "off"
},
"logInspection": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off, no rules"
},
"state": "off"
},
"name": "PoC Policy",
"parentID": 2,
"policySettings": {
"activityMonitoringSettingActivityEnabled": {
"value": "Off"
},
"activityMonitoringSettingIndicatorEnabled": {
"value": "Off"
},
"activityMonitoringSettingSyslogConfigId": {
"value": "0"
},
"antiMalwareSettingBehaviorMonitoringScanExclusionList": {
"value": ""
},
"antiMalwareSettingCombinedModeProtectionSource": {
"value": "Appliance preferred"
},
"antiMalwareSettingConnectedThreatDefenseSuspiciousFileDdanSubmissionEnabled": {
"value": "true"
},
"antiMalwareSettingConnectedThreatDefenseUseControlManagerSuspiciousObjectListEnabled": {
"value": "true"
},
"antiMalwareSettingDocumentExploitProtectionRuleExceptions": {
"value": ""
},
"antiMalwareSettingFileHashEnabled": {
"value": "false"
},
"antiMalwareSettingFileHashMd5Enabled": {
"value": "false"
},
"antiMalwareSettingFileHashSha256Enabled": {
"value": "false"
},
"antiMalwareSettingFileHashSizeMaxMbytes": {
"value": "128"
},
"antiMalwareSettingIdentifiedFilesSpaceMaxMbytes": {
"value": "1024"
},
"antiMalwareSettingMalwareScanMultithreadedProcessingEnabled": {
"value": "false"
},
"antiMalwareSettingNsxSecurityTaggingEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingOnRemediationFailureEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingRemoveOnCleanScanEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingValue": {
"value": "ANTI_VIRUS.VirusFound.threat=medium"
},
"antiMalwareSettingPredictiveMachineLearningExceptions": {
"value": ""
},
"antiMalwareSettingScanCacheOnDemandConfigId": {
"value": "1"
},
"antiMalwareSettingScanCacheRealTimeConfigId": {
"value": "2"
},
"antiMalwareSettingScanFileSizeMaxMbytes": {
"value": "0"
},
"antiMalwareSettingSmartProtectionGlobalServerEnabled": {
"value": "true"
},
"antiMalwareSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"antiMalwareSettingSmartProtectionLocalServerAllowOffDomainGlobal": {
"value": "false"
},
"antiMalwareSettingSmartProtectionLocalServerUrls": {
"value": ""
},
"antiMalwareSettingSmartProtectionServerConnectionLostWarningEnabled": {
"value": "true"
},
"antiMalwareSettingSmartScanState": {
"value": "Automatic"
},
"antiMalwareSettingSpywareApprovedList": {
"value": ""
},
"antiMalwareSettingSyslogConfigId": {
"value": "0"
},
"antiMalwareSettingVirtualApplianceOnDemandScanCacheEntriesMax": {
"value": "500000"
},
"antiMalwareSettingVirtualApplianceRealTimeScanCacheEntriesMax": {
"value": "500000"
},
"applicationControlSettingExecutionEnforcementLevel": {
"value": "Allow unrecognized software until it is explicitly blocked"
},
"applicationControlSettingRulesetMode": {
"value": "Use local ruleset"
},
"applicationControlSettingSharedRulesetId": {
"value": "0"
},
"applicationControlSettingSyslogConfigId": {
"value": "0"
},
"firewallSettingAntiEvasionCheckEvasiveRetransmit": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckFinNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckFragmentedPackets": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckOutNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckPaws": {
"value": "Ignore"
},
"firewallSettingAntiEvasionCheckRstNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpChecksum": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpCongestionFlags": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpPawsZero": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpRstFinFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSplitHandshake": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynFinFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynRstFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynWithData": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpUrgentFlags": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpZeroFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionSecurityPosture": {
"value": "Normal"
},
"firewallSettingAntiEvasionTcpPawsWindowPolicy": {
"value": "0"
},
"firewallSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"firewallSettingConfigPackageExceedsAlertMaxEnabled": {
"value": "true"
},
"firewallSettingEngineOptionAckTimeout": {
"value": "1 Second"
},
"firewallSettingEngineOptionAllowNullIpEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBlockIpv6Agent8AndEarlierEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBlockIpv6Agent9AndLaterEnabled": {
"value": "false"
},
"firewallSettingEngineOptionBlockSameSrcDstIpEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBootStartTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionBypassCiscoWaasConnectionsEnabled": {
"value": "false"
},
"firewallSettingEngineOptionCloseTimeout": {
"value": "0 Seconds"
},
"firewallSettingEngineOptionCloseWaitTimeout": {
"value": "2 Minutes"
},
"firewallSettingEngineOptionClosingTimeout": {
"value": "1 Second"
},
"firewallSettingEngineOptionColdStartTimeout": {
"value": "5 Minutes"
},
"firewallSettingEngineOptionConnectionCleanupTimeout": {
"value": "10 Seconds"
},
"firewallSettingEngineOptionConnectionsCleanupMax": {
"value": "1000"
},
"firewallSettingEngineOptionConnectionsNumIcmpMax": {
"value": "10000"
},
"firewallSettingEngineOptionConnectionsNumTcpMax": {
"value": "1000000"
},
"firewallSettingEngineOptionConnectionsNumUdpMax": {
"value": "1000000"
},
"firewallSettingEngineOptionDebugModeEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDebugPacketNumMax": {
"value": "8"
},
"firewallSettingEngineOptionDisconnectTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionDrop6To4BogonsAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropEvasiveRetransmitEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDropIpZeroPayloadEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6BogonsAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6ExtType0Enabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6FragmentsLowerThanMinMtuEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6ReservedAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6SiteLocalAddressesEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDropTeredoAnomaliesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropUnknownSslProtocolEnabled": {
"value": "true"
},
"firewallSettingEngineOptionErrorTimeout": {
"value": "10 Seconds"
},
"firewallSettingEngineOptionEstablishedTimeout": {
"value": "3 Hours"
},
"firewallSettingEngineOptionEventNodesMax": {
"value": "20000"
},
"firewallSettingEngineOptionFilterIpv4Tunnels": {
"value": "Disable Detection of IPv4 Tunnels"
},
"firewallSettingEngineOptionFilterIpv6Tunnels": {
"value": "Disable Detection of IPv6 Tunnels"
},
"firewallSettingEngineOptionFinWait1Timeout": {
"value": "2 Minutes"
},
"firewallSettingEngineOptionForceAllowDhcpDns": {
"value": "Allow DNS Query and DHCP Client"
},
"firewallSettingEngineOptionForceAllowIcmpType3Code4": {
"value": "Add Force Allow rule for ICMP type3 code4"
},
"firewallSettingEngineOptionFragmentOffsetMin": {
"value": "60"
},
"firewallSettingEngineOptionFragmentSizeMin": {
"value": "120"
},
"firewallSettingEngineOptionGenerateConnectionEventsIcmpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionGenerateConnectionEventsTcpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionGenerateConnectionEventsUdpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionIcmpTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionIgnoreStatusCode0": {
"value": "None"
},
"firewallSettingEngineOptionIgnoreStatusCode1": {
"value": "None"
},
"firewallSettingEngineOptionIgnoreStatusCode2": {
"value": "None"
},
"firewallSettingEngineOptionLastAckTimeout": {
"value": "3 Minutes"
},
"firewallSettingEngineOptionLogAllPacketDataEnabled": {
"value": "false"
},
"firewallSettingEngineOptionLogEventsPerSecondMax": {
"value": "100"
},
"firewallSettingEngineOptionLogOnePacketPeriod": {
"value": "5 Minutes"
},
"firewallSettingEngineOptionLogOnePacketWithinPeriodEnabled": {
"value": "false"
},
"firewallSettingEngineOptionLogPacketLengthMax": {
"value": "1500 Bytes"
},
"firewallSettingEngineOptionLoggingPolicy": {
"value": "Default"
},
"firewallSettingEngineOptionSilentTcpConnectionDropEnabled": {
"value": "false"
},
"firewallSettingEngineOptionSslSessionSize": {
"value": "Low - 2500"
},
"firewallSettingEngineOptionSslSessionTime": {
"value": "24 Hours"
},
"firewallSettingEngineOptionStrictTerodoPortCheckEnabled": {
"value": "true"
},
"firewallSettingEngineOptionSynRcvdTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionSynSentTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionTcpMssLimit": {
"value": "128 Bytes"
},
"firewallSettingEngineOptionTunnelDepthMax": {
"value": "1"
},
"firewallSettingEngineOptionTunnelDepthMaxExceededAction": {
"value": "Drop"
},
"firewallSettingEngineOptionUdpTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionVerifyTcpChecksumEnabled": {
"value": "false"
},
"firewallSettingEngineOptionsEnabled": {
"value": "true"
},
"firewallSettingEventLogFileCachedEntriesLifeTime": {
"value": "30 Minutes"
},
"firewallSettingEventLogFileCachedEntriesNum": {
"value": "128"
},
"firewallSettingEventLogFileCachedEntriesStaleTime": {
"value": "15 Minutes"
},
"firewallSettingEventLogFileIgnoreSourceIpListId": {
"value": ""
},
"firewallSettingEventLogFileRetainNum": {
"value": "3"
},
"firewallSettingEventLogFileSizeMax": {
"value": "4 MB"
},
"firewallSettingEventsOutOfAllowedPolicyEnabled": {
"value": "true"
},
"firewallSettingFailureResponseEngineSystem": {
"value": "Fail closed"
},
"firewallSettingFailureResponsePacketSanityCheck": {
"value": "Fail closed"
},
"firewallSettingInterfaceIsolationEnabled": {
"value": "false"
},
"firewallSettingInterfaceLimitOneActiveEnabled": {
"value": "false"
},
"firewallSettingInterfacePatterns": {
"value": ""
},
"firewallSettingNetworkEngineMode": {
"value": "Inline"
},
"firewallSettingReconnaissanceBlockFingerprintProbeDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockNetworkOrPortScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpNullScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpSynFinScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpXmasAttackDuration": {
"value": "No"
},
"firewallSettingReconnaissanceDetectFingerprintProbeEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectNetworkOrPortScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpNullScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpSynFinScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpXmasAttackEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceExcludeIpListId": {
"value": "1"
},
"firewallSettingReconnaissanceIncludeIpListId": {
"value": ""
},
"firewallSettingReconnaissanceNotifyFingerprintProbeEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyNetworkOrPortScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpNullScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpSynFinScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpXmasAttackEnabled": {
"value": "true"
},
"firewallSettingSyslogConfigId": {
"value": "0"
},
"firewallSettingVirtualAndContainerNetworkScanEnabled": {
"value": "false"
},
"integrityMonitoringSettingAutoApplyRecommendationsEnabled": {
"value": "No"
},
"integrityMonitoringSettingCombinedModeProtectionSource": {
"value": "Appliance preferred"
},
"integrityMonitoringSettingContentHashAlgorithm": {
"value": "sha1"
},
"integrityMonitoringSettingCpuUsageLevel": {
"value": "High"
},
"integrityMonitoringSettingRealtimeEnabled": {
"value": "false"
},
"integrityMonitoringSettingScanCacheConfigId": {
"value": "3"
},
"integrityMonitoringSettingSyslogConfigId": {
"value": "0"
},
"integrityMonitoringSettingVirtualApplianceOptimizationScanCacheEntriesMax": {
"value": "500000"
},
"intrusionPreventionSettingAutoApplyRecommendationsEnabled": {
"value": "Yes"
},
"intrusionPreventionSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"intrusionPreventionSettingEngineOptionFragmentedIpKeepMax": {
"value": "1000"
},
"intrusionPreventionSettingEngineOptionFragmentedIpPacketSendIcmpEnabled": {
"value": "true"
},
"intrusionPreventionSettingEngineOptionFragmentedIpTimeout": {
"value": "60 Seconds"
},
"intrusionPreventionSettingEngineOptionFragmentedIpUnconcernedMacAddressBypassEnabled": {
"value": "false"
},
"intrusionPreventionSettingEngineOptionsEnabled": {
"value": "false"
},
"intrusionPreventionSettingLogDataRuleFirstMatchEnabled": {
"value": "true"
},
"intrusionPreventionSettingNsxSecurityTaggingDetectModeLevel": {
"value": "No Tagging"
},
"intrusionPreventionSettingNsxSecurityTaggingPreventModeLevel": {
"value": "No Tagging"
},
"intrusionPreventionSettingVirtualAndContainerNetworkScanEnabled": {
"value": "true"
},
"logInspectionSettingAutoApplyRecommendationsEnabled": {
"value": "No"
},
"logInspectionSettingSeverityClippingAgentEventSendSyslogLevelMin": {
"value": "Medium (6)"
},
"logInspectionSettingSeverityClippingAgentEventStoreLevelMin": {
"value": "Medium (6)"
},
"logInspectionSettingSyslogConfigId": {
"value": "0"
},
"platformSettingAgentCommunicationsDirection": {
"value": "Agent/Appliance Initiated"
},
"platformSettingAgentEventsSendInterval": {
"value": "60 Seconds"
},
"platformSettingAgentSelfProtectionEnabled": {
"value": "false"
},
"platformSettingAgentSelfProtectionPassword": {
"value": ""
},
"platformSettingAgentSelfProtectionPasswordEnabled": {
"value": "false"
},
"platformSettingAutoAssignNewIntrusionPreventionRulesEnabled": {
"value": "true"
},
"platformSettingAutoUpdateAntiMalwareEngineEnabled": {
"value": "false"
},
"platformSettingCombinedModeNetworkGroupProtectionSource": {
"value": "Agent preferred"
},
"platformSettingEnvironmentVariableOverrides": {
"value": ""
},
"platformSettingHeartbeatInactiveVmOfflineAlertEnabled": {
"value": "false"
},
"platformSettingHeartbeatInterval": {
"value": "10 Minutes"
},
"platformSettingHeartbeatLocalTimeShiftAlertThreshold": {
"value": "Unlimited"
},
"platformSettingHeartbeatMissedAlertThreshold": {
"value": "5"
},
"platformSettingInactiveAgentCleanupOverrideEnabled": {
"value": "false"
},
"platformSettingNotificationsSuppressPopupsEnabled": {
"value": "false"
},
"platformSettingRecommendationOngoingScansInterval": {
"value": "7 Days"
},
"platformSettingRelayState": {
"value": "false"
},
"platformSettingScanCacheConcurrencyMax": {
"value": "1"
},
"platformSettingScanOpenPortListId": {
"value": "1-1024"
},
"platformSettingSmartProtectionAntiMalwareGlobalServerProxyId": {
"value": ""
},
"platformSettingSmartProtectionGlobalServerEnabled": {
"value": "true"
},
"platformSettingSmartProtectionGlobalServerProxyId": {
"value": ""
},
"platformSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"platformSettingTroubleshootingLoggingLevel": {
"value": "Do Not Override"
},
"webReputationSettingAlertingEnabled": {
"value": "false"
},
"webReputationSettingAllowedUrlDomains": {
"value": ""
},
"webReputationSettingAllowedUrls": {
"value": ""
},
"webReputationSettingBlockedUrlDomains": {
"value": ""
},
"webReputationSettingBlockedUrlKeywords": {
"value": ""
},
"webReputationSettingBlockedUrls": {
"value": ""
},
"webReputationSettingBlockingPageLink": {
"value": "http://sitesafety.trendmicro.com/"
},
"webReputationSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"webReputationSettingMonitorPortListId": {
"value": "80,8080"
},
"webReputationSettingSecurityBlockUntestedPagesEnabled": {
"value": "false"
},
"webReputationSettingSecurityLevel": {
"value": "Medium"
},
"webReputationSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerAllowOffDomainGlobal": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerEnabled": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerUrls": {
"value": ""
},
"webReputationSettingSmartProtectionServerConnectionLostWarningEnabled": {
"value": "true"
},
"webReputationSettingSmartProtectionWebReputationGlobalServerProxyId": {
"value": ""
},
"webReputationSettingSyslogConfigId": {
"value": "0"
}
},
"recommendationScanMode": "ongoing",
"webReputation": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off"
},
"state": "off"
}
},
{
"ID": 102,
"activityMonitoring": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off"
},
"state": "off"
},
"antiMalware": {
"manualScanConfigurationID": 0,
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off, no configuration"
},
"realTimeScanConfigurationID": 0,
"realTimeScanScheduleID": 0,
"scheduledScanConfigurationID": 0,
"state": "off"
},
"applicationControl": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off"
},
"state": "off"
},
"autoRequiresUpdate": "on",
"description": "",
"firewall": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off, no rules"
},
"state": "off"
},
"integrityMonitoring": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off, no rules"
},
"state": "off"
},
"intrusionPrevention": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off, no rules"
},
"state": "off"
},
"logInspection": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off, no rules"
},
"state": "off"
},
"name": "test policy",
"policySettings": {
"activityMonitoringSettingActivityEnabled": {
"value": "Off"
},
"activityMonitoringSettingIndicatorEnabled": {
"value": "Off"
},
"activityMonitoringSettingSyslogConfigId": {
"value": "0"
},
"antiMalwareSettingBehaviorMonitoringScanExclusionList": {
"value": ""
},
"antiMalwareSettingCombinedModeProtectionSource": {
"value": "Appliance preferred"
},
"antiMalwareSettingConnectedThreatDefenseSuspiciousFileDdanSubmissionEnabled": {
"value": "true"
},
"antiMalwareSettingConnectedThreatDefenseUseControlManagerSuspiciousObjectListEnabled": {
"value": "true"
},
"antiMalwareSettingDocumentExploitProtectionRuleExceptions": {
"value": ""
},
"antiMalwareSettingFileHashEnabled": {
"value": "false"
},
"antiMalwareSettingFileHashMd5Enabled": {
"value": "false"
},
"antiMalwareSettingFileHashSha256Enabled": {
"value": "false"
},
"antiMalwareSettingFileHashSizeMaxMbytes": {
"value": "128"
},
"antiMalwareSettingIdentifiedFilesSpaceMaxMbytes": {
"value": "1024"
},
"antiMalwareSettingMalwareScanMultithreadedProcessingEnabled": {
"value": "false"
},
"antiMalwareSettingNsxSecurityTaggingEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingOnRemediationFailureEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingRemoveOnCleanScanEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingValue": {
"value": "ANTI_VIRUS.VirusFound.threat=medium"
},
"antiMalwareSettingPredictiveMachineLearningExceptions": {
"value": ""
},
"antiMalwareSettingScanCacheOnDemandConfigId": {
"value": ""
},
"antiMalwareSettingScanCacheRealTimeConfigId": {
"value": ""
},
"antiMalwareSettingScanFileSizeMaxMbytes": {
"value": "0"
},
"antiMalwareSettingSmartProtectionGlobalServerEnabled": {
"value": "true"
},
"antiMalwareSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"antiMalwareSettingSmartProtectionLocalServerAllowOffDomainGlobal": {
"value": "false"
},
"antiMalwareSettingSmartProtectionLocalServerUrls": {
"value": ""
},
"antiMalwareSettingSmartProtectionServerConnectionLostWarningEnabled": {
"value": "true"
},
"antiMalwareSettingSmartScanState": {
"value": "Automatic"
},
"antiMalwareSettingSpywareApprovedList": {
"value": ""
},
"antiMalwareSettingSyslogConfigId": {
"value": "0"
},
"antiMalwareSettingVirtualApplianceOnDemandScanCacheEntriesMax": {
"value": "500000"
},
"antiMalwareSettingVirtualApplianceRealTimeScanCacheEntriesMax": {
"value": "500000"
},
"applicationControlSettingExecutionEnforcementLevel": {
"value": "Allow unrecognized software until it is explicitly blocked"
},
"applicationControlSettingRulesetMode": {
"value": "Use local ruleset"
},
"applicationControlSettingSharedRulesetId": {
"value": "0"
},
"applicationControlSettingSyslogConfigId": {
"value": "0"
},
"firewallSettingAntiEvasionCheckEvasiveRetransmit": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckFinNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckFragmentedPackets": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckOutNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckPaws": {
"value": "Ignore"
},
"firewallSettingAntiEvasionCheckRstNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpChecksum": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpCongestionFlags": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpPawsZero": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpRstFinFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSplitHandshake": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynFinFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynRstFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynWithData": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpUrgentFlags": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpZeroFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionSecurityPosture": {
"value": "Normal"
},
"firewallSettingAntiEvasionTcpPawsWindowPolicy": {
"value": "0"
},
"firewallSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"firewallSettingConfigPackageExceedsAlertMaxEnabled": {
"value": "true"
},
"firewallSettingEngineOptionAckTimeout": {
"value": "1 Second"
},
"firewallSettingEngineOptionAllowNullIpEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBlockIpv6Agent8AndEarlierEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBlockIpv6Agent9AndLaterEnabled": {
"value": "false"
},
"firewallSettingEngineOptionBlockSameSrcDstIpEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBootStartTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionBypassCiscoWaasConnectionsEnabled": {
"value": "false"
},
"firewallSettingEngineOptionCloseTimeout": {
"value": "0 Seconds"
},
"firewallSettingEngineOptionCloseWaitTimeout": {
"value": "2 Minutes"
},
"firewallSettingEngineOptionClosingTimeout": {
"value": "1 Second"
},
"firewallSettingEngineOptionColdStartTimeout": {
"value": "5 Minutes"
},
"firewallSettingEngineOptionConnectionCleanupTimeout": {
"value": "10 Seconds"
},
"firewallSettingEngineOptionConnectionsCleanupMax": {
"value": "1000"
},
"firewallSettingEngineOptionConnectionsNumIcmpMax": {
"value": "10000"
},
"firewallSettingEngineOptionConnectionsNumTcpMax": {
"value": "1000000"
},
"firewallSettingEngineOptionConnectionsNumUdpMax": {
"value": "1000000"
},
"firewallSettingEngineOptionDebugModeEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDebugPacketNumMax": {
"value": "8"
},
"firewallSettingEngineOptionDisconnectTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionDrop6To4BogonsAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropEvasiveRetransmitEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDropIpZeroPayloadEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6BogonsAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6ExtType0Enabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6FragmentsLowerThanMinMtuEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6ReservedAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6SiteLocalAddressesEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDropTeredoAnomaliesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropUnknownSslProtocolEnabled": {
"value": "true"
},
"firewallSettingEngineOptionErrorTimeout": {
"value": "10 Seconds"
},
"firewallSettingEngineOptionEstablishedTimeout": {
"value": "3 Hours"
},
"firewallSettingEngineOptionEventNodesMax": {
"value": "20000"
},
"firewallSettingEngineOptionFilterIpv4Tunnels": {
"value": "Disable Detection of IPv4 Tunnels"
},
"firewallSettingEngineOptionFilterIpv6Tunnels": {
"value": "Disable Detection of IPv6 Tunnels"
},
"firewallSettingEngineOptionFinWait1Timeout": {
"value": "2 Minutes"
},
"firewallSettingEngineOptionForceAllowDhcpDns": {
"value": "Allow DNS Query and DHCP Client"
},
"firewallSettingEngineOptionForceAllowIcmpType3Code4": {
"value": "Add Force Allow rule for ICMP type3 code4"
},
"firewallSettingEngineOptionFragmentOffsetMin": {
"value": "60"
},
"firewallSettingEngineOptionFragmentSizeMin": {
"value": "120"
},
"firewallSettingEngineOptionGenerateConnectionEventsIcmpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionGenerateConnectionEventsTcpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionGenerateConnectionEventsUdpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionIcmpTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionIgnoreStatusCode0": {
"value": "None"
},
"firewallSettingEngineOptionIgnoreStatusCode1": {
"value": "None"
},
"firewallSettingEngineOptionIgnoreStatusCode2": {
"value": "None"
},
"firewallSettingEngineOptionLastAckTimeout": {
"value": "30 Seconds"
},
"firewallSettingEngineOptionLogAllPacketDataEnabled": {
"value": "false"
},
"firewallSettingEngineOptionLogEventsPerSecondMax": {
"value": "100"
},
"firewallSettingEngineOptionLogOnePacketPeriod": {
"value": "5 Minutes"
},
"firewallSettingEngineOptionLogOnePacketWithinPeriodEnabled": {
"value": "false"
},
"firewallSettingEngineOptionLogPacketLengthMax": {
"value": "1500 Bytes"
},
"firewallSettingEngineOptionLoggingPolicy": {
"value": "Default"
},
"firewallSettingEngineOptionSilentTcpConnectionDropEnabled": {
"value": "false"
},
"firewallSettingEngineOptionSslSessionSize": {
"value": "Low - 2500"
},
"firewallSettingEngineOptionSslSessionTime": {
"value": "24 Hours"
},
"firewallSettingEngineOptionStrictTerodoPortCheckEnabled": {
"value": "true"
},
"firewallSettingEngineOptionSynRcvdTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionSynSentTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionTcpMssLimit": {
"value": "128 Bytes"
},
"firewallSettingEngineOptionTunnelDepthMax": {
"value": "1"
},
"firewallSettingEngineOptionTunnelDepthMaxExceededAction": {
"value": "Drop"
},
"firewallSettingEngineOptionUdpTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionVerifyTcpChecksumEnabled": {
"value": "false"
},
"firewallSettingEngineOptionsEnabled": {
"value": "false"
},
"firewallSettingEventLogFileCachedEntriesLifeTime": {
"value": "30 Minutes"
},
"firewallSettingEventLogFileCachedEntriesNum": {
"value": "128"
},
"firewallSettingEventLogFileCachedEntriesStaleTime": {
"value": "15 Minutes"
},
"firewallSettingEventLogFileIgnoreSourceIpListId": {
"value": ""
},
"firewallSettingEventLogFileRetainNum": {
"value": "3"
},
"firewallSettingEventLogFileSizeMax": {
"value": "4 MB"
},
"firewallSettingEventsOutOfAllowedPolicyEnabled": {
"value": "true"
},
"firewallSettingFailureResponseEngineSystem": {
"value": "Fail closed"
},
"firewallSettingFailureResponsePacketSanityCheck": {
"value": "Fail closed"
},
"firewallSettingInterfaceIsolationEnabled": {
"value": "false"
},
"firewallSettingInterfaceLimitOneActiveEnabled": {
"value": "false"
},
"firewallSettingInterfacePatterns": {
"value": ""
},
"firewallSettingNetworkEngineMode": {
"value": "Inline"
},
"firewallSettingReconnaissanceBlockFingerprintProbeDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockNetworkOrPortScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpNullScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpSynFinScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpXmasAttackDuration": {
"value": "No"
},
"firewallSettingReconnaissanceDetectFingerprintProbeEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectNetworkOrPortScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpNullScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpSynFinScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpXmasAttackEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceExcludeIpListId": {
"value": ""
},
"firewallSettingReconnaissanceIncludeIpListId": {
"value": ""
},
"firewallSettingReconnaissanceNotifyFingerprintProbeEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyNetworkOrPortScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpNullScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpSynFinScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpXmasAttackEnabled": {
"value": "true"
},
"firewallSettingSyslogConfigId": {
"value": "0"
},
"firewallSettingVirtualAndContainerNetworkScanEnabled": {
"value": "false"
},
"integrityMonitoringSettingAutoApplyRecommendationsEnabled": {
"value": "No"
},
"integrityMonitoringSettingCombinedModeProtectionSource": {
"value": "Appliance preferred"
},
"integrityMonitoringSettingContentHashAlgorithm": {
"value": "sha1"
},
"integrityMonitoringSettingCpuUsageLevel": {
"value": "High"
},
"integrityMonitoringSettingRealtimeEnabled": {
"value": "false"
},
"integrityMonitoringSettingScanCacheConfigId": {
"value": ""
},
"integrityMonitoringSettingSyslogConfigId": {
"value": "0"
},
"integrityMonitoringSettingVirtualApplianceOptimizationScanCacheEntriesMax": {
"value": "500000"
},
"intrusionPreventionSettingAutoApplyRecommendationsEnabled": {
"value": "No"
},
"intrusionPreventionSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"intrusionPreventionSettingEngineOptionFragmentedIpKeepMax": {
"value": "1000"
},
"intrusionPreventionSettingEngineOptionFragmentedIpPacketSendIcmpEnabled": {
"value": "true"
},
"intrusionPreventionSettingEngineOptionFragmentedIpTimeout": {
"value": "60 Seconds"
},
"intrusionPreventionSettingEngineOptionFragmentedIpUnconcernedMacAddressBypassEnabled": {
"value": "false"
},
"intrusionPreventionSettingEngineOptionsEnabled": {
"value": "false"
},
"intrusionPreventionSettingLogDataRuleFirstMatchEnabled": {
"value": "true"
},
"intrusionPreventionSettingNsxSecurityTaggingDetectModeLevel": {
"value": "No Tagging"
},
"intrusionPreventionSettingNsxSecurityTaggingPreventModeLevel": {
"value": "No Tagging"
},
"intrusionPreventionSettingVirtualAndContainerNetworkScanEnabled": {
"value": "true"
},
"logInspectionSettingAutoApplyRecommendationsEnabled": {
"value": "No"
},
"logInspectionSettingSeverityClippingAgentEventSendSyslogLevelMin": {
"value": "Medium (6)"
},
"logInspectionSettingSeverityClippingAgentEventStoreLevelMin": {
"value": "Medium (6)"
},
"logInspectionSettingSyslogConfigId": {
"value": "0"
},
"platformSettingAgentCommunicationsDirection": {
"value": "Agent/Appliance Initiated"
},
"platformSettingAgentEventsSendInterval": {
"value": "60 Seconds"
},
"platformSettingAgentSelfProtectionEnabled": {
"value": "false"
},
"platformSettingAgentSelfProtectionPassword": {
"value": ""
},
"platformSettingAgentSelfProtectionPasswordEnabled": {
"value": "false"
},
"platformSettingAutoAssignNewIntrusionPreventionRulesEnabled": {
"value": "true"
},
"platformSettingAutoUpdateAntiMalwareEngineEnabled": {
"value": "false"
},
"platformSettingCombinedModeNetworkGroupProtectionSource": {
"value": "Agent preferred"
},
"platformSettingEnvironmentVariableOverrides": {
"value": ""
},
"platformSettingHeartbeatInactiveVmOfflineAlertEnabled": {
"value": "false"
},
"platformSettingHeartbeatInterval": {
"value": "10 Minutes"
},
"platformSettingHeartbeatLocalTimeShiftAlertThreshold": {
"value": "Unlimited"
},
"platformSettingHeartbeatMissedAlertThreshold": {
"value": "2"
},
"platformSettingInactiveAgentCleanupOverrideEnabled": {
"value": "false"
},
"platformSettingNotificationsSuppressPopupsEnabled": {
"value": "false"
},
"platformSettingRecommendationOngoingScansInterval": {
"value": "7 Days"
},
"platformSettingRelayState": {
"value": "false"
},
"platformSettingScanCacheConcurrencyMax": {
"value": "1"
},
"platformSettingScanOpenPortListId": {
"value": "1-1024"
},
"platformSettingSmartProtectionAntiMalwareGlobalServerProxyId": {
"value": ""
},
"platformSettingSmartProtectionGlobalServerEnabled": {
"value": "true"
},
"platformSettingSmartProtectionGlobalServerProxyId": {
"value": ""
},
"platformSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"platformSettingTroubleshootingLoggingLevel": {
"value": "Do Not Override"
},
"webReputationSettingAlertingEnabled": {
"value": "false"
},
"webReputationSettingAllowedUrlDomains": {
"value": ""
},
"webReputationSettingAllowedUrls": {
"value": ""
},
"webReputationSettingBlockedUrlDomains": {
"value": ""
},
"webReputationSettingBlockedUrlKeywords": {
"value": ""
},
"webReputationSettingBlockedUrls": {
"value": ""
},
"webReputationSettingBlockingPageLink": {
"value": "http://sitesafety.trendmicro.com/"
},
"webReputationSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"webReputationSettingMonitorPortListId": {
"value": "80,8080"
},
"webReputationSettingSecurityBlockUntestedPagesEnabled": {
"value": "false"
},
"webReputationSettingSecurityLevel": {
"value": "Medium"
},
"webReputationSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerAllowOffDomainGlobal": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerEnabled": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerUrls": {
"value": ""
},
"webReputationSettingSmartProtectionServerConnectionLostWarningEnabled": {
"value": "true"
},
"webReputationSettingSmartProtectionWebReputationGlobalServerProxyId": {
"value": ""
},
"webReputationSettingSyslogConfigId": {
"value": "0"
}
},
"recommendationScanMode": "off",
"webReputation": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off"
},
"state": "off"
}
},
{
"ID": 105,
"activityMonitoring": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off"
},
"state": "off"
},
"antiMalware": {
"manualScanConfigurationID": 2,
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off"
},
"realTimeScanConfigurationID": 1,
"realTimeScanScheduleID": 4,
"scheduledScanConfigurationID": 3,
"state": "off"
},
"applicationControl": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off"
},
"state": "off"
},
"autoRequiresUpdate": "on",
"description": "Example policy description",
"firewall": {
"globalStatefulConfigurationID": 1,
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off, 2 rules"
},
"ruleIDs": [
23,
28
],
"state": "off"
},
"integrityMonitoring": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off, no rules"
},
"state": "off"
},
"intrusionPrevention": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off, no rules"
},
"state": "off"
},
"logInspection": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off, no rules"
},
"state": "off"
},
"name": "Example Policy",
"parentID": 2,
"policySettings": {
"activityMonitoringSettingActivityEnabled": {
"value": "Off"
},
"activityMonitoringSettingIndicatorEnabled": {
"value": "Off"
},
"activityMonitoringSettingSyslogConfigId": {
"value": "0"
},
"antiMalwareSettingBehaviorMonitoringScanExclusionList": {
"value": ""
},
"antiMalwareSettingCombinedModeProtectionSource": {
"value": "Appliance preferred"
},
"antiMalwareSettingConnectedThreatDefenseSuspiciousFileDdanSubmissionEnabled": {
"value": "true"
},
"antiMalwareSettingConnectedThreatDefenseUseControlManagerSuspiciousObjectListEnabled": {
"value": "true"
},
"antiMalwareSettingDocumentExploitProtectionRuleExceptions": {
"value": ""
},
"antiMalwareSettingFileHashEnabled": {
"value": "false"
},
"antiMalwareSettingFileHashMd5Enabled": {
"value": "false"
},
"antiMalwareSettingFileHashSha256Enabled": {
"value": "false"
},
"antiMalwareSettingFileHashSizeMaxMbytes": {
"value": "128"
},
"antiMalwareSettingIdentifiedFilesSpaceMaxMbytes": {
"value": "1024"
},
"antiMalwareSettingMalwareScanMultithreadedProcessingEnabled": {
"value": "false"
},
"antiMalwareSettingNsxSecurityTaggingEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingOnRemediationFailureEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingRemoveOnCleanScanEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingValue": {
"value": "ANTI_VIRUS.VirusFound.threat=medium"
},
"antiMalwareSettingPredictiveMachineLearningExceptions": {
"value": ""
},
"antiMalwareSettingScanCacheOnDemandConfigId": {
"value": "1"
},
"antiMalwareSettingScanCacheRealTimeConfigId": {
"value": "2"
},
"antiMalwareSettingScanFileSizeMaxMbytes": {
"value": "0"
},
"antiMalwareSettingSmartProtectionGlobalServerEnabled": {
"value": "true"
},
"antiMalwareSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"antiMalwareSettingSmartProtectionLocalServerAllowOffDomainGlobal": {
"value": "false"
},
"antiMalwareSettingSmartProtectionLocalServerUrls": {
"value": ""
},
"antiMalwareSettingSmartProtectionServerConnectionLostWarningEnabled": {
"value": "true"
},
"antiMalwareSettingSmartScanState": {
"value": "Automatic"
},
"antiMalwareSettingSpywareApprovedList": {
"value": ""
},
"antiMalwareSettingSyslogConfigId": {
"value": "0"
},
"antiMalwareSettingVirtualApplianceOnDemandScanCacheEntriesMax": {
"value": "500000"
},
"antiMalwareSettingVirtualApplianceRealTimeScanCacheEntriesMax": {
"value": "500000"
},
"applicationControlSettingExecutionEnforcementLevel": {
"value": "Allow unrecognized software until it is explicitly blocked"
},
"applicationControlSettingRulesetMode": {
"value": "Use local ruleset"
},
"applicationControlSettingSharedRulesetId": {
"value": "0"
},
"applicationControlSettingSyslogConfigId": {
"value": "0"
},
"firewallSettingAntiEvasionCheckEvasiveRetransmit": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckFinNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckFragmentedPackets": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckOutNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckPaws": {
"value": "Ignore"
},
"firewallSettingAntiEvasionCheckRstNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpChecksum": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpCongestionFlags": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpPawsZero": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpRstFinFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSplitHandshake": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynFinFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynRstFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynWithData": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpUrgentFlags": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpZeroFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionSecurityPosture": {
"value": "Normal"
},
"firewallSettingAntiEvasionTcpPawsWindowPolicy": {
"value": "0"
},
"firewallSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"firewallSettingConfigPackageExceedsAlertMaxEnabled": {
"value": "true"
},
"firewallSettingEngineOptionAckTimeout": {
"value": "1 Second"
},
"firewallSettingEngineOptionAllowNullIpEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBlockIpv6Agent8AndEarlierEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBlockIpv6Agent9AndLaterEnabled": {
"value": "false"
},
"firewallSettingEngineOptionBlockSameSrcDstIpEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBootStartTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionBypassCiscoWaasConnectionsEnabled": {
"value": "false"
},
"firewallSettingEngineOptionCloseTimeout": {
"value": "0 Seconds"
},
"firewallSettingEngineOptionCloseWaitTimeout": {
"value": "2 Minutes"
},
"firewallSettingEngineOptionClosingTimeout": {
"value": "1 Second"
},
"firewallSettingEngineOptionColdStartTimeout": {
"value": "5 Minutes"
},
"firewallSettingEngineOptionConnectionCleanupTimeout": {
"value": "10 Seconds"
},
"firewallSettingEngineOptionConnectionsCleanupMax": {
"value": "1000"
},
"firewallSettingEngineOptionConnectionsNumIcmpMax": {
"value": "10000"
},
"firewallSettingEngineOptionConnectionsNumTcpMax": {
"value": "1000000"
},
"firewallSettingEngineOptionConnectionsNumUdpMax": {
"value": "1000000"
},
"firewallSettingEngineOptionDebugModeEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDebugPacketNumMax": {
"value": "8"
},
"firewallSettingEngineOptionDisconnectTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionDrop6To4BogonsAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropEvasiveRetransmitEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDropIpZeroPayloadEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6BogonsAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6ExtType0Enabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6FragmentsLowerThanMinMtuEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6ReservedAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6SiteLocalAddressesEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDropTeredoAnomaliesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropUnknownSslProtocolEnabled": {
"value": "true"
},
"firewallSettingEngineOptionErrorTimeout": {
"value": "10 Seconds"
},
"firewallSettingEngineOptionEstablishedTimeout": {
"value": "3 Hours"
},
"firewallSettingEngineOptionEventNodesMax": {
"value": "20000"
},
"firewallSettingEngineOptionFilterIpv4Tunnels": {
"value": "Disable Detection of IPv4 Tunnels"
},
"firewallSettingEngineOptionFilterIpv6Tunnels": {
"value": "Disable Detection of IPv6 Tunnels"
},
"firewallSettingEngineOptionFinWait1Timeout": {
"value": "2 Minutes"
},
"firewallSettingEngineOptionForceAllowDhcpDns": {
"value": "Allow DNS Query and DHCP Client"
},
"firewallSettingEngineOptionForceAllowIcmpType3Code4": {
"value": "Add Force Allow rule for ICMP type3 code4"
},
"firewallSettingEngineOptionFragmentOffsetMin": {
"value": "60"
},
"firewallSettingEngineOptionFragmentSizeMin": {
"value": "120"
},
"firewallSettingEngineOptionGenerateConnectionEventsIcmpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionGenerateConnectionEventsTcpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionGenerateConnectionEventsUdpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionIcmpTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionIgnoreStatusCode0": {
"value": "None"
},
"firewallSettingEngineOptionIgnoreStatusCode1": {
"value": "None"
},
"firewallSettingEngineOptionIgnoreStatusCode2": {
"value": "None"
},
"firewallSettingEngineOptionLastAckTimeout": {
"value": "3 Minutes"
},
"firewallSettingEngineOptionLogAllPacketDataEnabled": {
"value": "false"
},
"firewallSettingEngineOptionLogEventsPerSecondMax": {
"value": "100"
},
"firewallSettingEngineOptionLogOnePacketPeriod": {
"value": "5 Minutes"
},
"firewallSettingEngineOptionLogOnePacketWithinPeriodEnabled": {
"value": "false"
},
"firewallSettingEngineOptionLogPacketLengthMax": {
"value": "1500 Bytes"
},
"firewallSettingEngineOptionLoggingPolicy": {
"value": "Default"
},
"firewallSettingEngineOptionSilentTcpConnectionDropEnabled": {
"value": "false"
},
"firewallSettingEngineOptionSslSessionSize": {
"value": "Low - 2500"
},
"firewallSettingEngineOptionSslSessionTime": {
"value": "24 Hours"
},
"firewallSettingEngineOptionStrictTerodoPortCheckEnabled": {
"value": "true"
},
"firewallSettingEngineOptionSynRcvdTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionSynSentTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionTcpMssLimit": {
"value": "128 Bytes"
},
"firewallSettingEngineOptionTunnelDepthMax": {
"value": "1"
},
"firewallSettingEngineOptionTunnelDepthMaxExceededAction": {
"value": "Drop"
},
"firewallSettingEngineOptionUdpTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionVerifyTcpChecksumEnabled": {
"value": "false"
},
"firewallSettingEngineOptionsEnabled": {
"value": "true"
},
"firewallSettingEventLogFileCachedEntriesLifeTime": {
"value": "30 Minutes"
},
"firewallSettingEventLogFileCachedEntriesNum": {
"value": "128"
},
"firewallSettingEventLogFileCachedEntriesStaleTime": {
"value": "15 Minutes"
},
"firewallSettingEventLogFileIgnoreSourceIpListId": {
"value": ""
},
"firewallSettingEventLogFileRetainNum": {
"value": "3"
},
"firewallSettingEventLogFileSizeMax": {
"value": "4 MB"
},
"firewallSettingEventsOutOfAllowedPolicyEnabled": {
"value": "true"
},
"firewallSettingFailureResponseEngineSystem": {
"value": "Fail closed"
},
"firewallSettingFailureResponsePacketSanityCheck": {
"value": "Fail closed"
},
"firewallSettingInterfaceIsolationEnabled": {
"value": "false"
},
"firewallSettingInterfaceLimitOneActiveEnabled": {
"value": "false"
},
"firewallSettingInterfacePatterns": {
"value": ""
},
"firewallSettingNetworkEngineMode": {
"value": "Inline"
},
"firewallSettingReconnaissanceBlockFingerprintProbeDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockNetworkOrPortScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpNullScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpSynFinScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpXmasAttackDuration": {
"value": "No"
},
"firewallSettingReconnaissanceDetectFingerprintProbeEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectNetworkOrPortScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpNullScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpSynFinScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpXmasAttackEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceExcludeIpListId": {
"value": "1"
},
"firewallSettingReconnaissanceIncludeIpListId": {
"value": ""
},
"firewallSettingReconnaissanceNotifyFingerprintProbeEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyNetworkOrPortScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpNullScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpSynFinScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpXmasAttackEnabled": {
"value": "true"
},
"firewallSettingSyslogConfigId": {
"value": "0"
},
"firewallSettingVirtualAndContainerNetworkScanEnabled": {
"value": "false"
},
"integrityMonitoringSettingAutoApplyRecommendationsEnabled": {
"value": "No"
},
"integrityMonitoringSettingCombinedModeProtectionSource": {
"value": "Appliance preferred"
},
"integrityMonitoringSettingContentHashAlgorithm": {
"value": "sha1"
},
"integrityMonitoringSettingCpuUsageLevel": {
"value": "High"
},
"integrityMonitoringSettingRealtimeEnabled": {
"value": "false"
},
"integrityMonitoringSettingScanCacheConfigId": {
"value": "3"
},
"integrityMonitoringSettingSyslogConfigId": {
"value": "0"
},
"integrityMonitoringSettingVirtualApplianceOptimizationScanCacheEntriesMax": {
"value": "500000"
},
"intrusionPreventionSettingAutoApplyRecommendationsEnabled": {
"value": "Yes"
},
"intrusionPreventionSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"intrusionPreventionSettingEngineOptionFragmentedIpKeepMax": {
"value": "1000"
},
"intrusionPreventionSettingEngineOptionFragmentedIpPacketSendIcmpEnabled": {
"value": "true"
},
"intrusionPreventionSettingEngineOptionFragmentedIpTimeout": {
"value": "60 Seconds"
},
"intrusionPreventionSettingEngineOptionFragmentedIpUnconcernedMacAddressBypassEnabled": {
"value": "false"
},
"intrusionPreventionSettingEngineOptionsEnabled": {
"value": "false"
},
"intrusionPreventionSettingLogDataRuleFirstMatchEnabled": {
"value": "true"
},
"intrusionPreventionSettingNsxSecurityTaggingDetectModeLevel": {
"value": "No Tagging"
},
"intrusionPreventionSettingNsxSecurityTaggingPreventModeLevel": {
"value": "No Tagging"
},
"intrusionPreventionSettingVirtualAndContainerNetworkScanEnabled": {
"value": "true"
},
"logInspectionSettingAutoApplyRecommendationsEnabled": {
"value": "No"
},
"logInspectionSettingSeverityClippingAgentEventSendSyslogLevelMin": {
"value": "Medium (6)"
},
"logInspectionSettingSeverityClippingAgentEventStoreLevelMin": {
"value": "Medium (6)"
},
"logInspectionSettingSyslogConfigId": {
"value": "0"
},
"platformSettingAgentCommunicationsDirection": {
"value": "Agent/Appliance Initiated"
},
"platformSettingAgentEventsSendInterval": {
"value": "60 Seconds"
},
"platformSettingAgentSelfProtectionEnabled": {
"value": "false"
},
"platformSettingAgentSelfProtectionPassword": {
"value": ""
},
"platformSettingAgentSelfProtectionPasswordEnabled": {
"value": "false"
},
"platformSettingAutoAssignNewIntrusionPreventionRulesEnabled": {
"value": "true"
},
"platformSettingAutoUpdateAntiMalwareEngineEnabled": {
"value": "false"
},
"platformSettingCombinedModeNetworkGroupProtectionSource": {
"value": "Agent preferred"
},
"platformSettingEnvironmentVariableOverrides": {
"value": ""
},
"platformSettingHeartbeatInactiveVmOfflineAlertEnabled": {
"value": "false"
},
"platformSettingHeartbeatInterval": {
"value": "10 Minutes"
},
"platformSettingHeartbeatLocalTimeShiftAlertThreshold": {
"value": "Unlimited"
},
"platformSettingHeartbeatMissedAlertThreshold": {
"value": "5"
},
"platformSettingInactiveAgentCleanupOverrideEnabled": {
"value": "false"
},
"platformSettingNotificationsSuppressPopupsEnabled": {
"value": "false"
},
"platformSettingRecommendationOngoingScansInterval": {
"value": "7 Days"
},
"platformSettingRelayState": {
"value": "false"
},
"platformSettingScanCacheConcurrencyMax": {
"value": "1"
},
"platformSettingScanOpenPortListId": {
"value": "1-1024"
},
"platformSettingSmartProtectionAntiMalwareGlobalServerProxyId": {
"value": ""
},
"platformSettingSmartProtectionGlobalServerEnabled": {
"value": "true"
},
"platformSettingSmartProtectionGlobalServerProxyId": {
"value": ""
},
"platformSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"platformSettingTroubleshootingLoggingLevel": {
"value": "Do Not Override"
},
"webReputationSettingAlertingEnabled": {
"value": "false"
},
"webReputationSettingAllowedUrlDomains": {
"value": ""
},
"webReputationSettingAllowedUrls": {
"value": ""
},
"webReputationSettingBlockedUrlDomains": {
"value": ""
},
"webReputationSettingBlockedUrlKeywords": {
"value": ""
},
"webReputationSettingBlockedUrls": {
"value": ""
},
"webReputationSettingBlockingPageLink": {
"value": "http://sitesafety.trendmicro.com/"
},
"webReputationSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"webReputationSettingMonitorPortListId": {
"value": "80,8080"
},
"webReputationSettingSecurityBlockUntestedPagesEnabled": {
"value": "false"
},
"webReputationSettingSecurityLevel": {
"value": "Medium"
},
"webReputationSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerAllowOffDomainGlobal": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerEnabled": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerUrls": {
"value": ""
},
"webReputationSettingSmartProtectionServerConnectionLostWarningEnabled": {
"value": "true"
},
"webReputationSettingSmartProtectionWebReputationGlobalServerProxyId": {
"value": ""
},
"webReputationSettingSyslogConfigId": {
"value": "0"
}
},
"recommendationScanMode": "ongoing",
"webReputation": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off"
},
"state": "off"
}
}
]
}
}
Human Readable Output
Policies list
ID Name Description 1 Base Policy A policy from which all other policies can inherit. Only the most general settings should be applied to this policy as they will apply to all policies that inherit from it, unless overridden. More specific settings and rules should be added to sub-policies that are assigned to computers. 2 Windows An example policy from which all the example Windows policies inherit. Any settings that are common to all Windows policies can be set here. 3 Windows Server 2012 An example policy for Windows Server 2012 servers. 4 Windows Server 2008 An example policy for Windows Server 2008 servers. 5 Windows Server 2003 An example policy for Windows Server 2003 servers. 6 Linux Server An example policy for Linux servers. 7 Demo Demo policy for the demo computer added to all accounts. This policy has all security modules enabled. 8 LAMP Server Sample policy for a server running a Linux/Apache/MySQL/PHP stack. Firewall rules allow SSH access but do not allow remote access to MySQL. 37 test3 68 PoC1 PoC Policy 101 PoC Policy PoC Policy 102 test policy 105 Example Policy Example policy description
trendmicro-search-policies
Search for specific policies by some field name with a certain type. Every field has a specific type. It can be a simple type like a string, a numeric or a boolean. However, it can also be a choice, which is a string with specific options (enumeration). To search, you must provide the field_name & field_type, the operation to perform, and the value to search.
Base Command
trendmicro-search-policies
Input
| Argument Name | Description | Required |
|---|---|---|
| overrides | Show only overrides defined for the current computer. Possible values are: true, false. Default is false. | Optional |
| max_items | Limits the number of objects returned. | Optional |
| field_name | The field name to search for. Possible values are: ID, parentID, name, description, recommendationScanMode, autoRequiresUpdate. | Required |
| field_type | The type of the field. Possible values are: boolean, numeric, choice, id, string. | Required |
| operation | The search conditional to test on the field name. Possible values are: less-than, less-than-or-equal, equal, greater-than-or-equal, greater-than, not-equal. | Required |
| value | The value to compare. | Required |
| sort_by_object_id | If true, forces the response objects to be sorted by ID, overriding the default sort order. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| TrendMicro.Policies.parentID | integer | ID of the parent policy |
| TrendMicro.Policies.name | string | Name of the policy |
| TrendMicro.Policies.description | string | Description of the policy |
| TrendMicro.Policies.recommendationScanMode | string | Enable or disable ongoing recommendation scans for computers assigned this policy |
| TrendMicro.Policies.autoRequiresUpdate | string | Automatically update computers assigned this policy when the configuration changes |
Command Example
!trendmicro-search-policies field_name=name operation=equal field_type=string value="Example Policy"
Context Example
{
"TrendMicro": {
"Policies": {
"ID": 105,
"activityMonitoring": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off"
},
"state": "off"
},
"antiMalware": {
"manualScanConfigurationID": 2,
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off"
},
"realTimeScanConfigurationID": 1,
"realTimeScanScheduleID": 4,
"scheduledScanConfigurationID": 3,
"state": "off"
},
"applicationControl": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off"
},
"state": "off"
},
"autoRequiresUpdate": "on",
"description": "Example policy description",
"firewall": {
"globalStatefulConfigurationID": 1,
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off, 2 rules"
},
"ruleIDs": [
23,
28
],
"state": "off"
},
"integrityMonitoring": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off, no rules"
},
"state": "off"
},
"intrusionPrevention": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off, no rules"
},
"state": "off"
},
"logInspection": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off, no rules"
},
"state": "off"
},
"name": "Example Policy",
"parentID": 2,
"policySettings": {
"activityMonitoringSettingActivityEnabled": {
"value": "Off"
},
"activityMonitoringSettingIndicatorEnabled": {
"value": "Off"
},
"activityMonitoringSettingSyslogConfigId": {
"value": "0"
},
"antiMalwareSettingBehaviorMonitoringScanExclusionList": {
"value": ""
},
"antiMalwareSettingCombinedModeProtectionSource": {
"value": "Appliance preferred"
},
"antiMalwareSettingConnectedThreatDefenseSuspiciousFileDdanSubmissionEnabled": {
"value": "true"
},
"antiMalwareSettingConnectedThreatDefenseUseControlManagerSuspiciousObjectListEnabled": {
"value": "true"
},
"antiMalwareSettingDocumentExploitProtectionRuleExceptions": {
"value": ""
},
"antiMalwareSettingFileHashEnabled": {
"value": "false"
},
"antiMalwareSettingFileHashMd5Enabled": {
"value": "false"
},
"antiMalwareSettingFileHashSha256Enabled": {
"value": "false"
},
"antiMalwareSettingFileHashSizeMaxMbytes": {
"value": "128"
},
"antiMalwareSettingIdentifiedFilesSpaceMaxMbytes": {
"value": "1024"
},
"antiMalwareSettingMalwareScanMultithreadedProcessingEnabled": {
"value": "false"
},
"antiMalwareSettingNsxSecurityTaggingEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingOnRemediationFailureEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingRemoveOnCleanScanEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingValue": {
"value": "ANTI_VIRUS.VirusFound.threat=medium"
},
"antiMalwareSettingPredictiveMachineLearningExceptions": {
"value": ""
},
"antiMalwareSettingScanCacheOnDemandConfigId": {
"value": "1"
},
"antiMalwareSettingScanCacheRealTimeConfigId": {
"value": "2"
},
"antiMalwareSettingScanFileSizeMaxMbytes": {
"value": "0"
},
"antiMalwareSettingSmartProtectionGlobalServerEnabled": {
"value": "true"
},
"antiMalwareSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"antiMalwareSettingSmartProtectionLocalServerAllowOffDomainGlobal": {
"value": "false"
},
"antiMalwareSettingSmartProtectionLocalServerUrls": {
"value": ""
},
"antiMalwareSettingSmartProtectionServerConnectionLostWarningEnabled": {
"value": "true"
},
"antiMalwareSettingSmartScanState": {
"value": "Automatic"
},
"antiMalwareSettingSpywareApprovedList": {
"value": ""
},
"antiMalwareSettingSyslogConfigId": {
"value": "0"
},
"antiMalwareSettingVirtualApplianceOnDemandScanCacheEntriesMax": {
"value": "500000"
},
"antiMalwareSettingVirtualApplianceRealTimeScanCacheEntriesMax": {
"value": "500000"
},
"applicationControlSettingExecutionEnforcementLevel": {
"value": "Allow unrecognized software until it is explicitly blocked"
},
"applicationControlSettingRulesetMode": {
"value": "Use local ruleset"
},
"applicationControlSettingSharedRulesetId": {
"value": "0"
},
"applicationControlSettingSyslogConfigId": {
"value": "0"
},
"firewallSettingAntiEvasionCheckEvasiveRetransmit": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckFinNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckFragmentedPackets": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckOutNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckPaws": {
"value": "Ignore"
},
"firewallSettingAntiEvasionCheckRstNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpChecksum": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpCongestionFlags": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpPawsZero": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpRstFinFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSplitHandshake": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynFinFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynRstFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynWithData": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpUrgentFlags": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpZeroFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionSecurityPosture": {
"value": "Normal"
},
"firewallSettingAntiEvasionTcpPawsWindowPolicy": {
"value": "0"
},
"firewallSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"firewallSettingConfigPackageExceedsAlertMaxEnabled": {
"value": "true"
},
"firewallSettingEngineOptionAckTimeout": {
"value": "1 Second"
},
"firewallSettingEngineOptionAllowNullIpEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBlockIpv6Agent8AndEarlierEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBlockIpv6Agent9AndLaterEnabled": {
"value": "false"
},
"firewallSettingEngineOptionBlockSameSrcDstIpEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBootStartTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionBypassCiscoWaasConnectionsEnabled": {
"value": "false"
},
"firewallSettingEngineOptionCloseTimeout": {
"value": "0 Seconds"
},
"firewallSettingEngineOptionCloseWaitTimeout": {
"value": "2 Minutes"
},
"firewallSettingEngineOptionClosingTimeout": {
"value": "1 Second"
},
"firewallSettingEngineOptionColdStartTimeout": {
"value": "5 Minutes"
},
"firewallSettingEngineOptionConnectionCleanupTimeout": {
"value": "10 Seconds"
},
"firewallSettingEngineOptionConnectionsCleanupMax": {
"value": "1000"
},
"firewallSettingEngineOptionConnectionsNumIcmpMax": {
"value": "10000"
},
"firewallSettingEngineOptionConnectionsNumTcpMax": {
"value": "1000000"
},
"firewallSettingEngineOptionConnectionsNumUdpMax": {
"value": "1000000"
},
"firewallSettingEngineOptionDebugModeEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDebugPacketNumMax": {
"value": "8"
},
"firewallSettingEngineOptionDisconnectTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionDrop6To4BogonsAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropEvasiveRetransmitEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDropIpZeroPayloadEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6BogonsAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6ExtType0Enabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6FragmentsLowerThanMinMtuEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6ReservedAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6SiteLocalAddressesEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDropTeredoAnomaliesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropUnknownSslProtocolEnabled": {
"value": "true"
},
"firewallSettingEngineOptionErrorTimeout": {
"value": "10 Seconds"
},
"firewallSettingEngineOptionEstablishedTimeout": {
"value": "3 Hours"
},
"firewallSettingEngineOptionEventNodesMax": {
"value": "20000"
},
"firewallSettingEngineOptionFilterIpv4Tunnels": {
"value": "Disable Detection of IPv4 Tunnels"
},
"firewallSettingEngineOptionFilterIpv6Tunnels": {
"value": "Disable Detection of IPv6 Tunnels"
},
"firewallSettingEngineOptionFinWait1Timeout": {
"value": "2 Minutes"
},
"firewallSettingEngineOptionForceAllowDhcpDns": {
"value": "Allow DNS Query and DHCP Client"
},
"firewallSettingEngineOptionForceAllowIcmpType3Code4": {
"value": "Add Force Allow rule for ICMP type3 code4"
},
"firewallSettingEngineOptionFragmentOffsetMin": {
"value": "60"
},
"firewallSettingEngineOptionFragmentSizeMin": {
"value": "120"
},
"firewallSettingEngineOptionGenerateConnectionEventsIcmpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionGenerateConnectionEventsTcpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionGenerateConnectionEventsUdpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionIcmpTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionIgnoreStatusCode0": {
"value": "None"
},
"firewallSettingEngineOptionIgnoreStatusCode1": {
"value": "None"
},
"firewallSettingEngineOptionIgnoreStatusCode2": {
"value": "None"
},
"firewallSettingEngineOptionLastAckTimeout": {
"value": "3 Minutes"
},
"firewallSettingEngineOptionLogAllPacketDataEnabled": {
"value": "false"
},
"firewallSettingEngineOptionLogEventsPerSecondMax": {
"value": "100"
},
"firewallSettingEngineOptionLogOnePacketPeriod": {
"value": "5 Minutes"
},
"firewallSettingEngineOptionLogOnePacketWithinPeriodEnabled": {
"value": "false"
},
"firewallSettingEngineOptionLogPacketLengthMax": {
"value": "1500 Bytes"
},
"firewallSettingEngineOptionLoggingPolicy": {
"value": "Default"
},
"firewallSettingEngineOptionSilentTcpConnectionDropEnabled": {
"value": "false"
},
"firewallSettingEngineOptionSslSessionSize": {
"value": "Low - 2500"
},
"firewallSettingEngineOptionSslSessionTime": {
"value": "24 Hours"
},
"firewallSettingEngineOptionStrictTerodoPortCheckEnabled": {
"value": "true"
},
"firewallSettingEngineOptionSynRcvdTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionSynSentTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionTcpMssLimit": {
"value": "128 Bytes"
},
"firewallSettingEngineOptionTunnelDepthMax": {
"value": "1"
},
"firewallSettingEngineOptionTunnelDepthMaxExceededAction": {
"value": "Drop"
},
"firewallSettingEngineOptionUdpTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionVerifyTcpChecksumEnabled": {
"value": "false"
},
"firewallSettingEngineOptionsEnabled": {
"value": "true"
},
"firewallSettingEventLogFileCachedEntriesLifeTime": {
"value": "30 Minutes"
},
"firewallSettingEventLogFileCachedEntriesNum": {
"value": "128"
},
"firewallSettingEventLogFileCachedEntriesStaleTime": {
"value": "15 Minutes"
},
"firewallSettingEventLogFileIgnoreSourceIpListId": {
"value": ""
},
"firewallSettingEventLogFileRetainNum": {
"value": "3"
},
"firewallSettingEventLogFileSizeMax": {
"value": "4 MB"
},
"firewallSettingEventsOutOfAllowedPolicyEnabled": {
"value": "true"
},
"firewallSettingFailureResponseEngineSystem": {
"value": "Fail closed"
},
"firewallSettingFailureResponsePacketSanityCheck": {
"value": "Fail closed"
},
"firewallSettingInterfaceIsolationEnabled": {
"value": "false"
},
"firewallSettingInterfaceLimitOneActiveEnabled": {
"value": "false"
},
"firewallSettingInterfacePatterns": {
"value": ""
},
"firewallSettingNetworkEngineMode": {
"value": "Inline"
},
"firewallSettingReconnaissanceBlockFingerprintProbeDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockNetworkOrPortScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpNullScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpSynFinScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpXmasAttackDuration": {
"value": "No"
},
"firewallSettingReconnaissanceDetectFingerprintProbeEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectNetworkOrPortScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpNullScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpSynFinScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpXmasAttackEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceExcludeIpListId": {
"value": "1"
},
"firewallSettingReconnaissanceIncludeIpListId": {
"value": ""
},
"firewallSettingReconnaissanceNotifyFingerprintProbeEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyNetworkOrPortScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpNullScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpSynFinScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpXmasAttackEnabled": {
"value": "true"
},
"firewallSettingSyslogConfigId": {
"value": "0"
},
"firewallSettingVirtualAndContainerNetworkScanEnabled": {
"value": "false"
},
"integrityMonitoringSettingAutoApplyRecommendationsEnabled": {
"value": "No"
},
"integrityMonitoringSettingCombinedModeProtectionSource": {
"value": "Appliance preferred"
},
"integrityMonitoringSettingContentHashAlgorithm": {
"value": "sha1"
},
"integrityMonitoringSettingCpuUsageLevel": {
"value": "High"
},
"integrityMonitoringSettingRealtimeEnabled": {
"value": "false"
},
"integrityMonitoringSettingScanCacheConfigId": {
"value": "3"
},
"integrityMonitoringSettingSyslogConfigId": {
"value": "0"
},
"integrityMonitoringSettingVirtualApplianceOptimizationScanCacheEntriesMax": {
"value": "500000"
},
"intrusionPreventionSettingAutoApplyRecommendationsEnabled": {
"value": "Yes"
},
"intrusionPreventionSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"intrusionPreventionSettingEngineOptionFragmentedIpKeepMax": {
"value": "1000"
},
"intrusionPreventionSettingEngineOptionFragmentedIpPacketSendIcmpEnabled": {
"value": "true"
},
"intrusionPreventionSettingEngineOptionFragmentedIpTimeout": {
"value": "60 Seconds"
},
"intrusionPreventionSettingEngineOptionFragmentedIpUnconcernedMacAddressBypassEnabled": {
"value": "false"
},
"intrusionPreventionSettingEngineOptionsEnabled": {
"value": "false"
},
"intrusionPreventionSettingLogDataRuleFirstMatchEnabled": {
"value": "true"
},
"intrusionPreventionSettingNsxSecurityTaggingDetectModeLevel": {
"value": "No Tagging"
},
"intrusionPreventionSettingNsxSecurityTaggingPreventModeLevel": {
"value": "No Tagging"
},
"intrusionPreventionSettingVirtualAndContainerNetworkScanEnabled": {
"value": "true"
},
"logInspectionSettingAutoApplyRecommendationsEnabled": {
"value": "No"
},
"logInspectionSettingSeverityClippingAgentEventSendSyslogLevelMin": {
"value": "Medium (6)"
},
"logInspectionSettingSeverityClippingAgentEventStoreLevelMin": {
"value": "Medium (6)"
},
"logInspectionSettingSyslogConfigId": {
"value": "0"
},
"platformSettingAgentCommunicationsDirection": {
"value": "Agent/Appliance Initiated"
},
"platformSettingAgentEventsSendInterval": {
"value": "60 Seconds"
},
"platformSettingAgentSelfProtectionEnabled": {
"value": "false"
},
"platformSettingAgentSelfProtectionPassword": {
"value": ""
},
"platformSettingAgentSelfProtectionPasswordEnabled": {
"value": "false"
},
"platformSettingAutoAssignNewIntrusionPreventionRulesEnabled": {
"value": "true"
},
"platformSettingAutoUpdateAntiMalwareEngineEnabled": {
"value": "false"
},
"platformSettingCombinedModeNetworkGroupProtectionSource": {
"value": "Agent preferred"
},
"platformSettingEnvironmentVariableOverrides": {
"value": ""
},
"platformSettingHeartbeatInactiveVmOfflineAlertEnabled": {
"value": "false"
},
"platformSettingHeartbeatInterval": {
"value": "10 Minutes"
},
"platformSettingHeartbeatLocalTimeShiftAlertThreshold": {
"value": "Unlimited"
},
"platformSettingHeartbeatMissedAlertThreshold": {
"value": "5"
},
"platformSettingInactiveAgentCleanupOverrideEnabled": {
"value": "false"
},
"platformSettingNotificationsSuppressPopupsEnabled": {
"value": "false"
},
"platformSettingRecommendationOngoingScansInterval": {
"value": "7 Days"
},
"platformSettingRelayState": {
"value": "false"
},
"platformSettingScanCacheConcurrencyMax": {
"value": "1"
},
"platformSettingScanOpenPortListId": {
"value": "1-1024"
},
"platformSettingSmartProtectionAntiMalwareGlobalServerProxyId": {
"value": ""
},
"platformSettingSmartProtectionGlobalServerEnabled": {
"value": "true"
},
"platformSettingSmartProtectionGlobalServerProxyId": {
"value": ""
},
"platformSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"platformSettingTroubleshootingLoggingLevel": {
"value": "Do Not Override"
},
"webReputationSettingAlertingEnabled": {
"value": "false"
},
"webReputationSettingAllowedUrlDomains": {
"value": ""
},
"webReputationSettingAllowedUrls": {
"value": ""
},
"webReputationSettingBlockedUrlDomains": {
"value": ""
},
"webReputationSettingBlockedUrlKeywords": {
"value": ""
},
"webReputationSettingBlockedUrls": {
"value": ""
},
"webReputationSettingBlockingPageLink": {
"value": "http://sitesafety.trendmicro.com/"
},
"webReputationSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"webReputationSettingMonitorPortListId": {
"value": "80,8080"
},
"webReputationSettingSecurityBlockUntestedPagesEnabled": {
"value": "false"
},
"webReputationSettingSecurityLevel": {
"value": "Medium"
},
"webReputationSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerAllowOffDomainGlobal": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerEnabled": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerUrls": {
"value": ""
},
"webReputationSettingSmartProtectionServerConnectionLostWarningEnabled": {
"value": "true"
},
"webReputationSettingSmartProtectionWebReputationGlobalServerProxyId": {
"value": ""
},
"webReputationSettingSyslogConfigId": {
"value": "0"
}
},
"recommendationScanMode": "ongoing",
"webReputation": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off"
},
"state": "off"
}
}
}
}
Human Readable Output
Matched Policies
ID Name Description 105 Example Policy Example policy description
trendmicro-create-policy
Create a new policy
Base Command
trendmicro-create-policy
Input
| Argument Name | Description | Required |
|---|---|---|
| overrides | Show only overrides defined for the current policy. Possible values are: true, false. Default is false. | Optional |
| parent_id | ID of the parent policy. | Optional |
| name | Name of the policy. | Required |
| description | Description of the policy. | Optional |
| recommendation_scan_mode | Enable or disable ongoing recommendation scans for computers assigned this policy. Possible values are: off, ongoing. | Optional |
| auto_requires_update | Automatically update computers assigned this policy when the configuration changes. Possible values are: off, on. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| TrendMicro.Policies.parentID | integer | ID of the parent policy |
| TrendMicro.Policies.name | string | Name of the policy |
| TrendMicro.Policies.description | string | Description of the policy |
| TrendMicro.Policies.recommendationScanMode | string | Enable or disable ongoing recommendation scans for computers assigned this policy |
| TrendMicro.Policies.autoRequiresUpdate | string | Automatically update computers assigned this policy when the configuration changes |
Command Example
!trendmicro-create-policy name="Example Policy" parent_id=2 description="Example policy description"
Context Example
{
"TrendMicro": {
"Policies": {
"ID": 106,
"activityMonitoring": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off"
},
"state": "off"
},
"antiMalware": {
"manualScanConfigurationID": 2,
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off"
},
"realTimeScanConfigurationID": 1,
"realTimeScanScheduleID": 4,
"scheduledScanConfigurationID": 3,
"state": "off"
},
"applicationControl": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off"
},
"state": "off"
},
"autoRequiresUpdate": "on",
"description": "Example policy description",
"firewall": {
"globalStatefulConfigurationID": 1,
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off, 2 rules"
},
"ruleIDs": [
23,
28
],
"state": "off"
},
"integrityMonitoring": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off, no rules"
},
"state": "off"
},
"intrusionPrevention": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off, no rules"
},
"state": "off"
},
"logInspection": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off, no rules"
},
"state": "off"
},
"name": "Example Policy",
"parentID": 2,
"policySettings": {
"activityMonitoringSettingActivityEnabled": {
"value": "Off"
},
"activityMonitoringSettingIndicatorEnabled": {
"value": "Off"
},
"activityMonitoringSettingSyslogConfigId": {
"value": "0"
},
"antiMalwareSettingBehaviorMonitoringScanExclusionList": {
"value": ""
},
"antiMalwareSettingCombinedModeProtectionSource": {
"value": "Appliance preferred"
},
"antiMalwareSettingConnectedThreatDefenseSuspiciousFileDdanSubmissionEnabled": {
"value": "true"
},
"antiMalwareSettingConnectedThreatDefenseUseControlManagerSuspiciousObjectListEnabled": {
"value": "true"
},
"antiMalwareSettingDocumentExploitProtectionRuleExceptions": {
"value": ""
},
"antiMalwareSettingFileHashEnabled": {
"value": "false"
},
"antiMalwareSettingFileHashMd5Enabled": {
"value": "false"
},
"antiMalwareSettingFileHashSha256Enabled": {
"value": "false"
},
"antiMalwareSettingFileHashSizeMaxMbytes": {
"value": "128"
},
"antiMalwareSettingIdentifiedFilesSpaceMaxMbytes": {
"value": "1024"
},
"antiMalwareSettingMalwareScanMultithreadedProcessingEnabled": {
"value": "false"
},
"antiMalwareSettingNsxSecurityTaggingEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingOnRemediationFailureEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingRemoveOnCleanScanEnabled": {
"value": "true"
},
"antiMalwareSettingNsxSecurityTaggingValue": {
"value": "ANTI_VIRUS.VirusFound.threat=medium"
},
"antiMalwareSettingPredictiveMachineLearningExceptions": {
"value": ""
},
"antiMalwareSettingScanCacheOnDemandConfigId": {
"value": "1"
},
"antiMalwareSettingScanCacheRealTimeConfigId": {
"value": "2"
},
"antiMalwareSettingScanFileSizeMaxMbytes": {
"value": "0"
},
"antiMalwareSettingSmartProtectionGlobalServerEnabled": {
"value": "true"
},
"antiMalwareSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"antiMalwareSettingSmartProtectionLocalServerAllowOffDomainGlobal": {
"value": "false"
},
"antiMalwareSettingSmartProtectionLocalServerUrls": {
"value": ""
},
"antiMalwareSettingSmartProtectionServerConnectionLostWarningEnabled": {
"value": "true"
},
"antiMalwareSettingSmartScanState": {
"value": "Automatic"
},
"antiMalwareSettingSpywareApprovedList": {
"value": ""
},
"antiMalwareSettingSyslogConfigId": {
"value": "0"
},
"antiMalwareSettingVirtualApplianceOnDemandScanCacheEntriesMax": {
"value": "500000"
},
"antiMalwareSettingVirtualApplianceRealTimeScanCacheEntriesMax": {
"value": "500000"
},
"applicationControlSettingExecutionEnforcementLevel": {
"value": "Allow unrecognized software until it is explicitly blocked"
},
"applicationControlSettingRulesetMode": {
"value": "Use local ruleset"
},
"applicationControlSettingSharedRulesetId": {
"value": "0"
},
"applicationControlSettingSyslogConfigId": {
"value": "0"
},
"firewallSettingAntiEvasionCheckEvasiveRetransmit": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckFinNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckFragmentedPackets": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckOutNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckPaws": {
"value": "Ignore"
},
"firewallSettingAntiEvasionCheckRstNoConnection": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpChecksum": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpCongestionFlags": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpPawsZero": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpRstFinFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSplitHandshake": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynFinFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynRstFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpSynWithData": {
"value": "Deny"
},
"firewallSettingAntiEvasionCheckTcpUrgentFlags": {
"value": "Allow"
},
"firewallSettingAntiEvasionCheckTcpZeroFlags": {
"value": "Deny"
},
"firewallSettingAntiEvasionSecurityPosture": {
"value": "Normal"
},
"firewallSettingAntiEvasionTcpPawsWindowPolicy": {
"value": "0"
},
"firewallSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"firewallSettingConfigPackageExceedsAlertMaxEnabled": {
"value": "true"
},
"firewallSettingEngineOptionAckTimeout": {
"value": "1 Second"
},
"firewallSettingEngineOptionAllowNullIpEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBlockIpv6Agent8AndEarlierEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBlockIpv6Agent9AndLaterEnabled": {
"value": "false"
},
"firewallSettingEngineOptionBlockSameSrcDstIpEnabled": {
"value": "true"
},
"firewallSettingEngineOptionBootStartTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionBypassCiscoWaasConnectionsEnabled": {
"value": "false"
},
"firewallSettingEngineOptionCloseTimeout": {
"value": "0 Seconds"
},
"firewallSettingEngineOptionCloseWaitTimeout": {
"value": "2 Minutes"
},
"firewallSettingEngineOptionClosingTimeout": {
"value": "1 Second"
},
"firewallSettingEngineOptionColdStartTimeout": {
"value": "5 Minutes"
},
"firewallSettingEngineOptionConnectionCleanupTimeout": {
"value": "10 Seconds"
},
"firewallSettingEngineOptionConnectionsCleanupMax": {
"value": "1000"
},
"firewallSettingEngineOptionConnectionsNumIcmpMax": {
"value": "10000"
},
"firewallSettingEngineOptionConnectionsNumTcpMax": {
"value": "1000000"
},
"firewallSettingEngineOptionConnectionsNumUdpMax": {
"value": "1000000"
},
"firewallSettingEngineOptionDebugModeEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDebugPacketNumMax": {
"value": "8"
},
"firewallSettingEngineOptionDisconnectTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionDrop6To4BogonsAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropEvasiveRetransmitEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDropIpZeroPayloadEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6BogonsAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6ExtType0Enabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6FragmentsLowerThanMinMtuEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6ReservedAddressesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropIpv6SiteLocalAddressesEnabled": {
"value": "false"
},
"firewallSettingEngineOptionDropTeredoAnomaliesEnabled": {
"value": "true"
},
"firewallSettingEngineOptionDropUnknownSslProtocolEnabled": {
"value": "true"
},
"firewallSettingEngineOptionErrorTimeout": {
"value": "10 Seconds"
},
"firewallSettingEngineOptionEstablishedTimeout": {
"value": "3 Hours"
},
"firewallSettingEngineOptionEventNodesMax": {
"value": "20000"
},
"firewallSettingEngineOptionFilterIpv4Tunnels": {
"value": "Disable Detection of IPv4 Tunnels"
},
"firewallSettingEngineOptionFilterIpv6Tunnels": {
"value": "Disable Detection of IPv6 Tunnels"
},
"firewallSettingEngineOptionFinWait1Timeout": {
"value": "2 Minutes"
},
"firewallSettingEngineOptionForceAllowDhcpDns": {
"value": "Allow DNS Query and DHCP Client"
},
"firewallSettingEngineOptionForceAllowIcmpType3Code4": {
"value": "Add Force Allow rule for ICMP type3 code4"
},
"firewallSettingEngineOptionFragmentOffsetMin": {
"value": "60"
},
"firewallSettingEngineOptionFragmentSizeMin": {
"value": "120"
},
"firewallSettingEngineOptionGenerateConnectionEventsIcmpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionGenerateConnectionEventsTcpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionGenerateConnectionEventsUdpEnabled": {
"value": "false"
},
"firewallSettingEngineOptionIcmpTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionIgnoreStatusCode0": {
"value": "None"
},
"firewallSettingEngineOptionIgnoreStatusCode1": {
"value": "None"
},
"firewallSettingEngineOptionIgnoreStatusCode2": {
"value": "None"
},
"firewallSettingEngineOptionLastAckTimeout": {
"value": "3 Minutes"
},
"firewallSettingEngineOptionLogAllPacketDataEnabled": {
"value": "false"
},
"firewallSettingEngineOptionLogEventsPerSecondMax": {
"value": "100"
},
"firewallSettingEngineOptionLogOnePacketPeriod": {
"value": "5 Minutes"
},
"firewallSettingEngineOptionLogOnePacketWithinPeriodEnabled": {
"value": "false"
},
"firewallSettingEngineOptionLogPacketLengthMax": {
"value": "1500 Bytes"
},
"firewallSettingEngineOptionLoggingPolicy": {
"value": "Default"
},
"firewallSettingEngineOptionSilentTcpConnectionDropEnabled": {
"value": "false"
},
"firewallSettingEngineOptionSslSessionSize": {
"value": "Low - 2500"
},
"firewallSettingEngineOptionSslSessionTime": {
"value": "24 Hours"
},
"firewallSettingEngineOptionStrictTerodoPortCheckEnabled": {
"value": "true"
},
"firewallSettingEngineOptionSynRcvdTimeout": {
"value": "60 Seconds"
},
"firewallSettingEngineOptionSynSentTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionTcpMssLimit": {
"value": "128 Bytes"
},
"firewallSettingEngineOptionTunnelDepthMax": {
"value": "1"
},
"firewallSettingEngineOptionTunnelDepthMaxExceededAction": {
"value": "Drop"
},
"firewallSettingEngineOptionUdpTimeout": {
"value": "20 Seconds"
},
"firewallSettingEngineOptionVerifyTcpChecksumEnabled": {
"value": "false"
},
"firewallSettingEngineOptionsEnabled": {
"value": "true"
},
"firewallSettingEventLogFileCachedEntriesLifeTime": {
"value": "30 Minutes"
},
"firewallSettingEventLogFileCachedEntriesNum": {
"value": "128"
},
"firewallSettingEventLogFileCachedEntriesStaleTime": {
"value": "15 Minutes"
},
"firewallSettingEventLogFileIgnoreSourceIpListId": {
"value": ""
},
"firewallSettingEventLogFileRetainNum": {
"value": "3"
},
"firewallSettingEventLogFileSizeMax": {
"value": "4 MB"
},
"firewallSettingEventsOutOfAllowedPolicyEnabled": {
"value": "true"
},
"firewallSettingFailureResponseEngineSystem": {
"value": "Fail closed"
},
"firewallSettingFailureResponsePacketSanityCheck": {
"value": "Fail closed"
},
"firewallSettingInterfaceIsolationEnabled": {
"value": "false"
},
"firewallSettingInterfaceLimitOneActiveEnabled": {
"value": "false"
},
"firewallSettingInterfacePatterns": {
"value": ""
},
"firewallSettingNetworkEngineMode": {
"value": "Inline"
},
"firewallSettingReconnaissanceBlockFingerprintProbeDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockNetworkOrPortScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpNullScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpSynFinScanDuration": {
"value": "No"
},
"firewallSettingReconnaissanceBlockTcpXmasAttackDuration": {
"value": "No"
},
"firewallSettingReconnaissanceDetectFingerprintProbeEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectNetworkOrPortScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpNullScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpSynFinScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceDetectTcpXmasAttackEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceExcludeIpListId": {
"value": "1"
},
"firewallSettingReconnaissanceIncludeIpListId": {
"value": ""
},
"firewallSettingReconnaissanceNotifyFingerprintProbeEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyNetworkOrPortScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpNullScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpSynFinScanEnabled": {
"value": "true"
},
"firewallSettingReconnaissanceNotifyTcpXmasAttackEnabled": {
"value": "true"
},
"firewallSettingSyslogConfigId": {
"value": "0"
},
"firewallSettingVirtualAndContainerNetworkScanEnabled": {
"value": "false"
},
"integrityMonitoringSettingAutoApplyRecommendationsEnabled": {
"value": "No"
},
"integrityMonitoringSettingCombinedModeProtectionSource": {
"value": "Appliance preferred"
},
"integrityMonitoringSettingContentHashAlgorithm": {
"value": "sha1"
},
"integrityMonitoringSettingCpuUsageLevel": {
"value": "High"
},
"integrityMonitoringSettingRealtimeEnabled": {
"value": "false"
},
"integrityMonitoringSettingScanCacheConfigId": {
"value": "3"
},
"integrityMonitoringSettingSyslogConfigId": {
"value": "0"
},
"integrityMonitoringSettingVirtualApplianceOptimizationScanCacheEntriesMax": {
"value": "500000"
},
"intrusionPreventionSettingAutoApplyRecommendationsEnabled": {
"value": "Yes"
},
"intrusionPreventionSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"intrusionPreventionSettingEngineOptionFragmentedIpKeepMax": {
"value": "1000"
},
"intrusionPreventionSettingEngineOptionFragmentedIpPacketSendIcmpEnabled": {
"value": "true"
},
"intrusionPreventionSettingEngineOptionFragmentedIpTimeout": {
"value": "60 Seconds"
},
"intrusionPreventionSettingEngineOptionFragmentedIpUnconcernedMacAddressBypassEnabled": {
"value": "false"
},
"intrusionPreventionSettingEngineOptionsEnabled": {
"value": "false"
},
"intrusionPreventionSettingLogDataRuleFirstMatchEnabled": {
"value": "true"
},
"intrusionPreventionSettingNsxSecurityTaggingDetectModeLevel": {
"value": "No Tagging"
},
"intrusionPreventionSettingNsxSecurityTaggingPreventModeLevel": {
"value": "No Tagging"
},
"intrusionPreventionSettingVirtualAndContainerNetworkScanEnabled": {
"value": "true"
},
"logInspectionSettingAutoApplyRecommendationsEnabled": {
"value": "No"
},
"logInspectionSettingSeverityClippingAgentEventSendSyslogLevelMin": {
"value": "Medium (6)"
},
"logInspectionSettingSeverityClippingAgentEventStoreLevelMin": {
"value": "Medium (6)"
},
"logInspectionSettingSyslogConfigId": {
"value": "0"
},
"platformSettingAgentCommunicationsDirection": {
"value": "Agent/Appliance Initiated"
},
"platformSettingAgentEventsSendInterval": {
"value": "60 Seconds"
},
"platformSettingAgentSelfProtectionEnabled": {
"value": "false"
},
"platformSettingAgentSelfProtectionPassword": {
"value": ""
},
"platformSettingAgentSelfProtectionPasswordEnabled": {
"value": "false"
},
"platformSettingAutoAssignNewIntrusionPreventionRulesEnabled": {
"value": "true"
},
"platformSettingAutoUpdateAntiMalwareEngineEnabled": {
"value": "false"
},
"platformSettingCombinedModeNetworkGroupProtectionSource": {
"value": "Agent preferred"
},
"platformSettingEnvironmentVariableOverrides": {
"value": ""
},
"platformSettingHeartbeatInactiveVmOfflineAlertEnabled": {
"value": "false"
},
"platformSettingHeartbeatInterval": {
"value": "10 Minutes"
},
"platformSettingHeartbeatLocalTimeShiftAlertThreshold": {
"value": "Unlimited"
},
"platformSettingHeartbeatMissedAlertThreshold": {
"value": "5"
},
"platformSettingInactiveAgentCleanupOverrideEnabled": {
"value": "false"
},
"platformSettingNotificationsSuppressPopupsEnabled": {
"value": "false"
},
"platformSettingRecommendationOngoingScansInterval": {
"value": "7 Days"
},
"platformSettingRelayState": {
"value": "false"
},
"platformSettingScanCacheConcurrencyMax": {
"value": "1"
},
"platformSettingScanOpenPortListId": {
"value": "1-1024"
},
"platformSettingSmartProtectionAntiMalwareGlobalServerProxyId": {
"value": ""
},
"platformSettingSmartProtectionGlobalServerEnabled": {
"value": "true"
},
"platformSettingSmartProtectionGlobalServerProxyId": {
"value": ""
},
"platformSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"platformSettingTroubleshootingLoggingLevel": {
"value": "Do Not Override"
},
"webReputationSettingAlertingEnabled": {
"value": "false"
},
"webReputationSettingAllowedUrlDomains": {
"value": ""
},
"webReputationSettingAllowedUrls": {
"value": ""
},
"webReputationSettingBlockedUrlDomains": {
"value": ""
},
"webReputationSettingBlockedUrlKeywords": {
"value": ""
},
"webReputationSettingBlockedUrls": {
"value": ""
},
"webReputationSettingBlockingPageLink": {
"value": "http://sitesafety.trendmicro.com/"
},
"webReputationSettingCombinedModeProtectionSource": {
"value": "Agent preferred"
},
"webReputationSettingMonitorPortListId": {
"value": "80,8080"
},
"webReputationSettingSecurityBlockUntestedPagesEnabled": {
"value": "false"
},
"webReputationSettingSecurityLevel": {
"value": "Medium"
},
"webReputationSettingSmartProtectionGlobalServerUseProxyEnabled": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerAllowOffDomainGlobal": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerEnabled": {
"value": "false"
},
"webReputationSettingSmartProtectionLocalServerUrls": {
"value": ""
},
"webReputationSettingSmartProtectionServerConnectionLostWarningEnabled": {
"value": "true"
},
"webReputationSettingSmartProtectionWebReputationGlobalServerProxyId": {
"value": ""
},
"webReputationSettingSyslogConfigId": {
"value": "0"
}
},
"recommendationScanMode": "ongoing",
"webReputation": {
"moduleStatus": {
"status": "inactive",
"statusMessage": "Off"
},
"state": "off"
}
}
}
}
Human Readable Output
The New Policy
ID Name Description 106 Example Policy Example policy description
trendmicro-remove-firewall-rule-id-from-computer
Remove a firewall rule ID from a certain computer
Base Command
trendmicro-remove-firewall-rule-id-from-computer
Input
| Argument Name | Description | Required |
|---|---|---|
| computer_id | The computer ID. | Required |
| firewall_rule_id | The firewall rule ID to remove. | Required |
Context Output
There is no context output for this command.
Command Example
!trendmicro-remove-firewall-rule-id-from-computer computer_id=216 firewall_rule_id=31
Human Readable Output
The firewall rule 31 was successfully deleted from computer 216!
trendmicro-list-default-policy-settings
List default policy settings
Base Command
trendmicro-list-default-policy-settings
Input
| Argument Name | Description | Required |
| — | — | — |
Context Output
| Path | Type | Description |
|---|---|---|
| TrendMicro.DefaultPolicySettings.name | string | The name of the default policy setting |
| TrendMicro.DefaultPolicySettings.value | string | The value of the default policy setting |
Command Example
#### Context Example
```json
{
"TrendMicro": {
"DefaultPolicySettings": [
{
"name": "logInspectionSettingSeverityClippingAgentEventSendSyslogLevelMin",
"value": "Medium (6)"
},
{
"name": "firewallSettingEngineOptionConnectionsCleanupMax",
"value": "1000"
},
{
"name": "firewallSettingEngineOptionVerifyTcpChecksumEnabled",
"value": "false"
},
{
"name": "antiMalwareSettingScanCacheOnDemandConfigId",
"value": ""
},
{
"name": "applicationControlSettingSharedRulesetId",
"value": "0"
},
{
"name": "applicationControlSettingState",
"value": "Off"
},
{
"name": "webReputationSettingSmartProtectionServerConnectionLostWarningEnabled",
"value": "true"
},
{
"name": "applicationControlSettingExecutionEnforcementLevel",
"value": "Allow unrecognized software until it is explicitly blocked"
},
{
"name": "webReputationSettingBlockedUrlDomains",
"value": ""
},
{
"name": "firewallSettingEngineOptionSynSentTimeout",
"value": "20 Seconds"
},
{
"name": "platformSettingAgentSelfProtectionPassword",
"value": ""
},
{
"name": "firewallSettingReconnaissanceBlockTcpXmasAttackDuration",
"value": "No"
},
{
"name": "intrusionPreventionSettingVirtualAndContainerNetworkScanEnabled",
"value": "true"
},
{
"name": "logInspectionSettingSyslogConfigId",
"value": "0"
},
{
"name": "firewallSettingEngineOptionDebugModeEnabled",
"value": "false"
},
{
"name": "firewallSettingVirtualAndContainerNetworkScanEnabled",
"value": "false"
},
{
"name": "antiMalwareSettingFileHashSha256Enabled",
"value": "false"
},
{
"name": "firewallSettingReconnaissanceNotifyFingerprintProbeEnabled",
"value": "true"
},
{
"name": "firewallSettingEventLogFileRetainNum",
"value": "3"
},
{
"name": "firewallSettingAntiEvasionCheckTcpPawsZero",
"value": "Allow"
},
{
"name": "antiMalwareSettingConnectedThreatDefenseUseControlManagerSuspiciousObjectListEnabled",
"value": "true"
},
{
"name": "intrusionPreventionSettingEngineOptionFragmentedIpKeepMax",
"value": "1000"
},
{
"name": "firewallSettingEngineOptionDrop6To4BogonsAddressesEnabled",
"value": "true"
},
{
"name": "logInspectionSettingSeverityClippingAgentEventStoreLevelMin",
"value": "Medium (6)"
},
{
"name": "platformSettingScanCacheConcurrencyMax",
"value": "1"
},
{
"name": "antiMalwareSettingSyslogConfigId",
"value": "0"
},
{
"name": "firewallSettingAntiEvasionTcpPawsWindowPolicy",
"value": "0"
},
{
"name": "firewallSettingReconnaissanceDetectTcpXmasAttackEnabled",
"value": "true"
},
{
"name": "applicationControlSettingRulesetMode",
"value": "Use local ruleset"
},
{
"name": "antiMalwareSettingSmartProtectionGlobalServerUseProxyEnabled",
"value": "false"
},
{
"name": "webReputationSettingSmartProtectionLocalServerAllowOffDomainGlobal",
"value": "false"
},
{
"name": "integrityMonitoringSettingCombinedModeProtectionSource",
"value": "Appliance preferred"
},
{
"name": "firewallSettingEngineOptionCloseWaitTimeout",
"value": "2 Minutes"
},
{
"name": "platformSettingScanOpenPortListId",
"value": "1-1024"
},
{
"name": "platformSettingAgentSelfProtectionPasswordEnabled",
"value": "false"
},
{
"name": "firewallSettingEngineOptionAckTimeout",
"value": "1 Second"
},
{
"name": "firewallSettingEventLogFileCachedEntriesStaleTime",
"value": "15 Minutes"
},
{
"name": "firewallSettingCombinedModeProtectionSource",
"value": "Agent preferred"
},
{
"name": "platformSettingAgentEventsSendInterval",
"value": "60 Seconds"
},
{
"name": "platformSettingInactiveAgentCleanupOverrideEnabled",
"value": "false"
},
{
"name": "firewallSettingFailureResponseEngineSystem",
"value": "Fail closed"
},
{
"name": "platformSettingRelayState",
"value": "false"
},
{
"name": "firewallSettingEngineOptionDropEvasiveRetransmitEnabled",
"value": "false"
},
{
"name": "firewallSettingState",
"value": "Off"
},
{
"name": "activityMonitoringSettingIndicatorEnabled",
"value": "Off"
},
{
"name": "intrusionPreventionSettingEngineOptionFragmentedIpTimeout",
"value": "60 Seconds"
},
{
"name": "firewallSettingAntiEvasionCheckTcpZeroFlags",
"value": "Deny"
},
{
"name": "webReputationSettingSmartProtectionGlobalServerUseProxyEnabled",
"value": "false"
},
{
"name": "intrusionPreventionSettingNsxSecurityTaggingPreventModeLevel",
"value": "No Tagging"
},
{
"name": "firewallSettingReconnaissanceNotifyTcpXmasAttackEnabled",
"value": "true"
},
{
"name": "firewallSettingEngineOptionUdpTimeout",
"value": "20 Seconds"
},
{
"name": "webReputationSettingSmartProtectionLocalServerEnabled",
"value": "false"
},
{
"name": "firewallSettingEngineOptionTcpMssLimit",
"value": "128 Bytes"
},
{
"name": "firewallSettingEngineOptionColdStartTimeout",
"value": "5 Minutes"
},
{
"name": "firewallSettingEngineOptionEstablishedTimeout",
"value": "3 Hours"
},
{
"name": "antiMalwareSettingIdentifiedFilesSpaceMaxMbytes",
"value": "1024"
},
{
"name": "webReputationSettingState",
"value": "Off"
},
{
"name": "firewallSettingEngineOptionAllowNullIpEnabled",
"value": "true"
},
{
"name": "platformSettingNotificationsSuppressPopupsEnabled",
"value": "false"
},
{
"name": "firewallSettingAntiEvasionCheckTcpRstFinFlags",
"value": "Deny"
},
{
"name": "firewallSettingEngineOptionDisconnectTimeout",
"value": "60 Seconds"
},
{
"name": "firewallSettingEngineOptionCloseTimeout",
"value": "0 Seconds"
},
{
"name": "firewallSettingEngineOptionTunnelDepthMaxExceededAction",
"value": "Drop"
},
{
"name": "firewallSettingReconnaissanceDetectTcpNullScanEnabled",
"value": "true"
},
{
"name": "platformSettingSmartProtectionAntiMalwareGlobalServerProxyId",
"value": ""
},
{
"name": "firewallSettingEngineOptionFilterIpv4Tunnels",
"value": "Disable Detection of IPv4 Tunnels"
},
{
"name": "webReputationSettingSmartProtectionLocalServerUrls",
"value": ""
},
{
"name": "firewallSettingEngineOptionLogOnePacketPeriod",
"value": "5 Minutes"
},
{
"name": "firewallSettingEngineOptionFilterIpv6Tunnels",
"value": "Disable Detection of IPv6 Tunnels"
},
{
"name": "firewallSettingAntiEvasionCheckTcpCongestionFlags",
"value": "Allow"
},
{
"name": "platformSettingHeartbeatMissedAlertThreshold",
"value": "2"
},
{
"name": "intrusionPreventionSettingEngineOptionsEnabled",
"value": "false"
},
{
"name": "firewallSettingEngineOptionConnectionsNumUdpMax",
"value": "1000000"
},
{
"name": "integrityMonitoringSettingAutoApplyRecommendationsEnabled",
"value": "No"
},
{
"name": "firewallSettingEngineOptionTunnelDepthMax",
"value": "1"
},
{
"name": "firewallSettingEngineOptionDropUnknownSslProtocolEnabled",
"value": "true"
},
{
"name": "antiMalwareSettingNsxSecurityTaggingValue",
"value": "ANTI_VIRUS.VirusFound.threat=medium"
},
{
"name": "intrusionPreventionSettingLogDataRuleFirstMatchEnabled",
"value": "true"
},
{
"name": "firewallSettingEngineOptionLoggingPolicy",
"value": "Default"
},
{
"name": "platformSettingTroubleshootingLoggingLevel",
"value": "Do Not Override"
},
{
"name": "antiMalwareSettingVirtualApplianceOnDemandScanCacheEntriesMax",
"value": "500000"
},
{
"name": "webReputationSettingCombinedModeProtectionSource",
"value": "Agent preferred"
},
{
"name": "firewallSettingEngineOptionClosingTimeout",
"value": "1 Second"
},
{
"name": "antiMalwareSettingState",
"value": "Off"
},
{
"name": "firewallSettingAntiEvasionCheckPaws",
"value": "Ignore"
},
{
"name": "intrusionPreventionSettingAutoApplyRecommendationsEnabled",
"value": "No"
},
{
"name": "firewallSettingReconnaissanceDetectFingerprintProbeEnabled",
"value": "true"
},
{
"name": "antiMalwareSettingNsxSecurityTaggingRemoveOnCleanScanEnabled",
"value": "true"
},
{
"name": "firewallSettingEngineOptionLogPacketLengthMax",
"value": "1500 Bytes"
},
{
"name": "firewallSettingEngineOptionDropTeredoAnomaliesEnabled",
"value": "true"
},
{
"name": "webReputationSettingSecurityLevel",
"value": "Medium"
},
{
"name": "firewallSettingEngineOptionDropIpv6SiteLocalAddressesEnabled",
"value": "false"
},
{
"name": "logInspectionSettingState",
"value": "Off"
},
{
"name": "activityMonitoringSettingActivityEnabled",
"value": "Off"
},
{
"name": "firewallSettingEngineOptionStrictTerodoPortCheckEnabled",
"value": "true"
},
{
"name": "webReputationSettingBlockedUrlKeywords",
"value": ""
},
{
"name": "webReputationSettingSyslogConfigId",
"value": "0"
},
{
"name": "firewallSettingFailureResponsePacketSanityCheck",
"value": "Fail closed"
},
{
"name": "firewallSettingNetworkEngineMode",
"value": "Inline"
},
{
"name": "firewallSettingEventLogFileSizeMax",
"value": "4 MB"
},
{
"name": "antiMalwareSettingMalwareScanMultithreadedProcessingEnabled",
"value": "false"
},
{
"name": "firewallSettingReconnaissanceDetectTcpSynFinScanEnabled",
"value": "true"
},
{
"name": "firewallSettingEngineOptionDropIpZeroPayloadEnabled",
"value": "true"
},
{
"name": "firewallSettingEngineOptionBlockIpv6Agent8AndEarlierEnabled",
"value": "true"
},
{
"name": "intrusionPreventionSettingEngineOptionFragmentedIpPacketSendIcmpEnabled",
"value": "true"
},
{
"name": "antiMalwareSettingPredictiveMachineLearningExceptions",
"value": ""
},
{
"name": "firewallSettingEngineOptionLogEventsPerSecondMax",
"value": "100"
},
{
"name": "firewallSettingEngineOptionSslSessionTime",
"value": "24 Hours"
},
{
"name": "antiMalwareSettingBehaviorMonitoringScanExclusionList",
"value": ""
},
{
"name": "antiMalwareSettingSmartProtectionGlobalServerEnabled",
"value": "true"
},
{
"name": "firewallSettingEngineOptionLogOnePacketWithinPeriodEnabled",
"value": "false"
},
{
"name": "firewallSettingEngineOptionGenerateConnectionEventsIcmpEnabled",
"value": "false"
},
{
"name": "platformSettingHeartbeatInactiveVmOfflineAlertEnabled",
"value": "false"
},
{
"name": "webReputationSettingSmartProtectionWebReputationGlobalServerProxyId",
"value": ""
},
{
"name": "antiMalwareSettingNsxSecurityTaggingEnabled",
"value": "true"
},
{
"name": "firewallSettingAntiEvasionCheckFragmentedPackets",
"value": "Allow"
},
{
"name": "firewallSettingEngineOptionConnectionsNumIcmpMax",
"value": "10000"
},
{
"name": "firewallSettingAntiEvasionCheckTcpSplitHandshake",
"value": "Deny"
},
{
"name": "antiMalwareSettingCombinedModeProtectionSource",
"value": "Appliance preferred"
},
{
"name": "firewallSettingEngineOptionEventNodesMax",
"value": "20000"
},
{
"name": "webReputationSettingMonitorPortListId",
"value": "80,8080"
},
{
"name": "applicationControlSettingSyslogConfigId",
"value": "0"
},
{
"name": "firewallSettingAntiEvasionCheckOutNoConnection",
"value": "Allow"
},
{
"name": "firewallSettingEngineOptionBlockIpv6Agent9AndLaterEnabled",
"value": "false"
},
{
"name": "integrityMonitoringSettingVirtualApplianceOptimizationScanCacheEntriesMax",
"value": "500000"
},
{
"name": "firewallSettingReconnaissanceNotifyTcpNullScanEnabled",
"value": "true"
},
{
"name": "firewallSettingEngineOptionIgnoreStatusCode1",
"value": "None"
},
{
"name": "firewallSettingEngineOptionIgnoreStatusCode0",
"value": "None"
},
{
"name": "firewallSettingEngineOptionIgnoreStatusCode2",
"value": "None"
},
{
"name": "firewallSettingEngineOptionSslSessionSize",
"value": "Low - 2500"
},
{
"name": "antiMalwareSettingScanCacheRealTimeConfigId",
"value": ""
},
{
"name": "platformSettingRecommendationOngoingScansInterval",
"value": "7 Days"
},
{
"name": "platformSettingSmartProtectionGlobalServerUseProxyEnabled",
"value": "false"
},
{
"name": "firewallSettingInterfaceLimitOneActiveEnabled",
"value": "false"
},
{
"name": "firewallSettingAntiEvasionCheckTcpChecksum",
"value": "Allow"
},
{
"name": "firewallSettingEngineOptionDropIpv6ExtType0Enabled",
"value": "true"
},
{
"name": "antiMalwareSettingScanFileSizeMaxMbytes",
"value": "0"
},
{
"name": "firewallSettingEngineOptionGenerateConnectionEventsTcpEnabled",
"value": "false"
},
{
"name": "antiMalwareSettingFileHashSizeMaxMbytes",
"value": "128"
},
{
"name": "firewallSettingEventLogFileCachedEntriesLifeTime",
"value": "30 Minutes"
},
{
"name": "platformSettingSmartProtectionGlobalServerProxyId",
"value": ""
},
{
"name": "logInspectionSettingAutoApplyRecommendationsEnabled",
"value": "No"
},
{
"name": "antiMalwareSettingConnectedThreatDefenseSuspiciousFileDdanSubmissionEnabled",
"value": "true"
},
{
"name": "webReputationSettingBlockingPageLink",
"value": "http://sitesafety.trendmicro.com/"
},
{
"name": "firewallSettingSyslogConfigId",
"value": "0"
},
{
"name": "platformSettingAgentCommunicationsDirection",
"value": "Agent/Appliance Initiated"
},
{
"name": "integrityMonitoringSettingScanCacheConfigId",
"value": ""
},
{
"name": "antiMalwareSettingDocumentExploitProtectionRuleExceptions",
"value": ""
},
{
"name": "firewallSettingAntiEvasionCheckTcpSynWithData",
"value": "Deny"
},
{
"name": "antiMalwareSettingFileHashEnabled",
"value": "false"
},
{
"name": "firewallSettingReconnaissanceBlockFingerprintProbeDuration",
"value": "No"
},
{
"name": "firewallSettingEngineOptionDropIpv6BogonsAddressesEnabled",
"value": "true"
},
{
"name": "firewallSettingEngineOptionBootStartTimeout",
"value": "20 Seconds"
},
{
"name": "firewallSettingEngineOptionConnectionsNumTcpMax",
"value": "1000000"
},
{
"name": "firewallSettingAntiEvasionSecurityPosture",
"value": "Normal"
},
{
"name": "firewallSettingInterfacePatterns",
"value": ""
},
{
"name": "firewallSettingInterfaceIsolationEnabled",
"value": "false"
},
{
"name": "antiMalwareSettingVirtualApplianceRealTimeScanCacheEntriesMax",
"value": "500000"
},
{
"name": "firewallSettingEventsOutOfAllowedPolicyEnabled",
"value": "true"
},
{
"name": "firewallSettingAntiEvasionCheckEvasiveRetransmit",
"value": "Allow"
},
{
"name": "firewallSettingEngineOptionIcmpTimeout",
"value": "60 Seconds"
},
{
"name": "integrityMonitoringSettingSyslogConfigId",
"value": "0"
},
{
"name": "firewallSettingEngineOptionConnectionCleanupTimeout",
"value": "10 Seconds"
},
{
"name": "antiMalwareSettingSmartProtectionLocalServerAllowOffDomainGlobal",
"value": "false"
},
{
"name": "firewallSettingReconnaissanceNotifyTcpSynFinScanEnabled",
"value": "true"
},
{
"name": "firewallSettingEngineOptionErrorTimeout",
"value": "10 Seconds"
},
{
"name": "integrityMonitoringSettingState",
"value": "Off"
},
{
"name": "webReputationSettingAllowedUrls",
"value": ""
},
{
"name": "firewallSettingReconnaissanceNotifyNetworkOrPortScanEnabled",
"value": "true"
},
{
"name": "firewallSettingEngineOptionFinWait1Timeout",
"value": "2 Minutes"
},
{
"name": "firewallSettingEngineOptionGenerateConnectionEventsUdpEnabled",
"value": "false"
},
{
"name": "activityMonitoringSettingSyslogConfigId",
"value": "0"
},
{
"name": "firewallSettingAntiEvasionCheckTcpSynRstFlags",
"value": "Deny"
},
{
"name": "antiMalwareSettingSpywareApprovedList",
"value": ""
},
{
"name": "activityMonitoringSettingState",
"value": "Off"
},
{
"name": "firewallSettingAntiEvasionCheckTcpUrgentFlags",
"value": "Allow"
},
{
"name": "intrusionPreventionSettingNsxSecurityTaggingDetectModeLevel",
"value": "No Tagging"
},
{
"name": "intrusionPreventionSettingEngineOptionFragmentedIpUnconcernedMacAddressBypassEnabled",
"value": "false"
},
{
"name": "firewallSettingEngineOptionLogAllPacketDataEnabled",
"value": "false"
},
{
"name": "firewallSettingAntiEvasionCheckTcpSynFinFlags",
"value": "Deny"
},
{
"name": "platformSettingHeartbeatInterval",
"value": "10 Minutes"
},
{
"name": "firewallSettingEngineOptionFragmentSizeMin",
"value": "120"
},
{
"name": "antiMalwareSettingSmartProtectionServerConnectionLostWarningEnabled",
"value": "true"
},
{
"name": "firewallSettingReconnaissanceBlockNetworkOrPortScanDuration",
"value": "No"
},
{
"name": "integrityMonitoringSettingContentHashAlgorithm",
"value": "sha1"
},
{
"name": "antiMalwareSettingSmartScanState",
"value": "Automatic"
},
{
"name": "firewallSettingConfigPackageExceedsAlertMaxEnabled",
"value": "true"
},
{
"name": "platformSettingEnvironmentVariableOverrides",
"value": ""
},
{
"name": "firewallSettingEngineOptionFragmentOffsetMin",
"value": "60"
},
{
"name": "antiMalwareSettingSmartProtectionLocalServerUrls",
"value": ""
},
{
"name": "firewallSettingEngineOptionSynRcvdTimeout",
"value": "60 Seconds"
},
{
"name": "firewallSettingEventLogFileCachedEntriesNum",
"value": "128"
},
{
"name": "firewallSettingEngineOptionForceAllowIcmpType3Code4",
"value": "Add Force Allow rule for ICMP type3 code4"
},
{
"name": "firewallSettingReconnaissanceBlockTcpNullScanDuration",
"value": "No"
},
{
"name": "platformSettingSmartProtectionGlobalServerEnabled",
"value": "true"
},
{
"name": "integrityMonitoringSettingRealtimeEnabled",
"value": "false"
},
{
"name": "firewallSettingEngineOptionLastAckTimeout",
"value": "30 Seconds"
},
{
"name": "firewallSettingReconnaissanceExcludeIpListId",
"value": ""
},
{
"name": "platformSettingAgentSelfProtectionEnabled",
"value": "false"
},
{
"name": "firewallSettingEngineOptionDropIpv6ReservedAddressesEnabled",
"value": "true"
},
{
"name": "firewallSettingAntiEvasionCheckFinNoConnection",
"value": "Allow"
},
{
"name": "firewallSettingEngineOptionDebugPacketNumMax",
"value": "8"
},
{
"name": "intrusionPreventionSettingState",
"value": "Off"
},
{
"name": "firewallSettingEngineOptionBypassCiscoWaasConnectionsEnabled",
"value": "false"
},
{
"name": "firewallSettingReconnaissanceEnabled",
"value": "true"
},
{
"name": "platformSettingHeartbeatLocalTimeShiftAlertThreshold",
"value": "Unlimited"
},
{
"name": "antiMalwareSettingFileHashMd5Enabled",
"value": "false"
},
{
"name": "firewallSettingReconnaissanceDetectNetworkOrPortScanEnabled",
"value": "true"
},
{
"name": "firewallSettingEngineOptionSilentTcpConnectionDropEnabled",
"value": "false"
},
{
"name": "firewallSettingEngineOptionBlockSameSrcDstIpEnabled",
"value": "true"
},
{
"name": "firewallSettingEngineOptionForceAllowDhcpDns",
"value": "Allow DNS Query and DHCP Client"
},
{
"name": "firewallSettingReconnaissanceIncludeIpListId",
"value": ""
},
{
"name": "firewallSettingEngineOptionsEnabled",
"value": "false"
},
{
"name": "firewallSettingReconnaissanceBlockTcpSynFinScanDuration",
"value": "No"
},
{
"name": "webReputationSettingSecurityBlockUntestedPagesEnabled",
"value": "false"
},
{
"name": "webReputationSettingAllowedUrlDomains",
"value": ""
},
{
"name": "firewallSettingEventLogFileIgnoreSourceIpListId",
"value": ""
},
{
"name": "firewallSettingEngineOptionDropIpv6FragmentsLowerThanMinMtuEnabled",
"value": "true"
},
{
"name": "platformSettingAutoAssignNewIntrusionPreventionRulesEnabled",
"value": "true"
},
{
"name": "firewallSettingAntiEvasionCheckRstNoConnection",
"value": "Allow"
},
{
"name": "webReputationSettingBlockedUrls",
"value": ""
},
{
"name": "platformSettingCombinedModeNetworkGroupProtectionSource",
"value": "Agent preferred"
},
{
"name": "webReputationSettingAlertingEnabled",
"value": "false"
},
{
"name": "antiMalwareSettingNsxSecurityTaggingOnRemediationFailureEnabled",
"value": "true"
},
{
"name": "integrityMonitoringSettingCpuUsageLevel",
"value": "High"
},
{
"name": "platformSettingAutoUpdateAntiMalwareEngineEnabled",
"value": "false"
},
{
"name": "intrusionPreventionSettingCombinedModeProtectionSource",
"value": "Agent preferred"
}
]
}
}
Human Readable Output
The Default Policy Settings
Activity Monitoring Setting Activity Enabled Activity Monitoring Setting Indicator Enabled Activity Monitoring Setting State Activity Monitoring Setting Syslog Config Id Anti Malware Setting Combined Mode Protection Source Anti Malware Setting Connected Threat Defense Suspicious File Ddan Submission Enabled Anti Malware Setting Connected Threat Defense Use Control Manager Suspicious Object List Enabled Anti Malware Setting File Hash Enabled Anti Malware Setting File Hash Md 5 Enabled Anti Malware Setting File Hash Sha 256 Enabled Anti Malware Setting File Hash Size Max Mbytes Anti Malware Setting Identified Files Space Max Mbytes Anti Malware Setting Malware Scan Multithreaded Processing Enabled Anti Malware Setting Nsx Security Tagging Enabled Anti Malware Setting Nsx Security Tagging On Remediation Failure Enabled Anti Malware Setting Nsx Security Tagging Remove On Clean Scan Enabled Anti Malware Setting Nsx Security Tagging Value Anti Malware Setting Scan File Size Max Mbytes Anti Malware Setting Smart Protection Global Server Enabled Anti Malware Setting Smart Protection Global Server Use Proxy Enabled Anti Malware Setting Smart Protection Local Server Allow Off Domain Global Anti Malware Setting Smart Protection Server Connection Lost Warning Enabled Anti Malware Setting Smart Scan State Anti Malware Setting State Anti Malware Setting Syslog Config Id Anti Malware Setting Virtual Appliance On Demand Scan Cache Entries Max Anti Malware Setting Virtual Appliance Real Time Scan Cache Entries Max Application Control Setting Execution Enforcement Level Application Control Setting Ruleset Mode Application Control Setting Shared Ruleset Id Application Control Setting State Application Control Setting Syslog Config Id Firewall Setting Anti Evasion Check Evasive Retransmit Firewall Setting Anti Evasion Check Fin No Connection Firewall Setting Anti Evasion Check Fragmented Packets Firewall Setting Anti Evasion Check Out No Connection Firewall Setting Anti Evasion Check Paws Firewall Setting Anti Evasion Check Rst No Connection Firewall Setting Anti Evasion Check Tcp Check sum Firewall Setting Anti Evasion Check Tcp Congestion Flags Firewall Setting Anti Evasion Check Tcp Paws Zero Firewall Setting Anti Evasion Check Tcp Rst Fin Flags Firewall Setting Anti Evasion Check Tcp Split Handshake Firewall Setting Anti Evasion Check Tcp Syn Fin Flags Firewall Setting Anti Evasion Check Tcp Syn Rst Flags Firewall Setting Anti Evasion Check Tcp Syn With Data Firewall Setting Anti Evasion Check Tcp Urgent Flags Firewall Setting Anti Evasion Check Tcp Zero Flags Firewall Setting Anti Evasion Security Posture Firewall Setting Anti Evasion Tcp Paws Window Policy Firewall Setting Combined Mode Protection Source Firewall Setting Config Package Exceeds Alert Max Enabled Firewall Setting Engine Option Ack Timeout Firewall Setting Engine Option Allow Null Ip Enabled Firewall Setting Engine Option Block Ipv 6 Agent 8 And Earlier Enabled Firewall Setting Engine Option Block Ipv 6 Agent 9 And Later Enabled Firewall Setting Engine Option Block Same Src Dst Ip Enabled Firewall Setting Engine Option Boot Start Timeout Firewall Setting Engine Option Bypass Cisco Waas Connections Enabled Firewall Setting Engine Option Close Timeout Firewall Setting Engine Option Close Wait Timeout Firewall Setting Engine Option Closing Timeout Firewall Setting Engine Option Cold Start Timeout Firewall Setting Engine Option Connection Cleanup Timeout Firewall Setting Engine Option Connections Cleanup Max Firewall Setting Engine Option Connections Num Icmp Max Firewall Setting Engine Option Connections Num Tcp Max Firewall Setting Engine Option Connections Num Udp Max Firewall Setting Engine Option Debug Mode Enabled Firewall Setting Engine Option Debug Packet Num Max Firewall Setting Engine Option Disconnect Timeout Firewall Setting Engine Option Drop 6 To 4 Bogons Addresses Enabled Firewall Setting Engine Option Drop Evasive Retransmit Enabled Firewall Setting Engine Option Drop Ip Zero Payload Enabled Firewall Setting Engine Option Drop Ipv 6 Bogons Addresses Enabled Firewall Setting Engine Option Drop Ipv 6 Ext Type 0 Enabled Firewall Setting Engine Option Drop Ipv 6 Fragments Lower Than Min Mtu Enabled Firewall Setting Engine Option Drop Ipv 6 Reserved Addresses Enabled Firewall Setting Engine Option Drop Ipv 6 Site Local Addresses Enabled Firewall Setting Engine Option Drop Teredo Anomalies Enabled Firewall Setting Engine Option Drop Unknown Ssl Protocol Enabled Firewall Setting Engine Option Error Timeout Firewall Setting Engine Option Established Timeout Firewall Setting Engine Option Event Nodes Max Firewall Setting Engine Option Filter Ipv 4 Tunnels Firewall Setting Engine Option Filter Ipv 6 Tunnels Firewall Setting Engine Option Fin Wait 1 Timeout Firewall Setting Engine Option Force Allow Dhcp Dns Firewall Setting Engine Option Force Allow Icmp Type 3 Code 4 Firewall Setting Engine Option Fragment Offset Min Firewall Setting Engine Option Fragment Size Min Firewall Setting Engine Option Generate Connection Events Icmp Enabled Firewall Setting Engine Option Generate Connection Events Tcp Enabled Firewall Setting Engine Option Generate Connection Events Udp Enabled Firewall Setting Engine Option Icmp Timeout Firewall Setting Engine Option Ignore Status Code 0 Firewall Setting Engine Option Ignore Status Code 1 Firewall Setting Engine Option Ignore Status Code 2 Firewall Setting Engine Option Last Ack Timeout Firewall Setting Engine Option Log All Packet Data Enabled Firewall Setting Engine Option Log Events Per Second Max Firewall Setting Engine Option Log One Packet Period Firewall Setting Engine Option Log One Packet Within Period Enabled Firewall Setting Engine Option Log Packet Length Max Firewall Setting Engine Option Logging Policy Firewall Setting Engine Option Silent Tcp Connection Drop Enabled Firewall Setting Engine Option Ssl Session Size Firewall Setting Engine Option Ssl Session Time Firewall Setting Engine Option Strict Terodo Port Check Enabled Firewall Setting Engine Option Syn Rcvd Timeout Firewall Setting Engine Option Syn Sent Timeout Firewall Setting Engine Option Tcp Mss Limit Firewall Setting Engine Option Tunnel Depth Max Firewall Setting Engine Option Tunnel Depth Max Exceeded Action Firewall Setting Engine Option Udp Timeout Firewall Setting Engine Option Verify Tcp Checksum Enabled Firewall Setting Engine Options Enabled Firewall Setting Event Log File Cached Entries Life Time Firewall Setting Event Log File Cached Entries Num Firewall Setting Event Log File Cached Entries Stale Time Firewall Setting Event Log File Retain Num Firewall Setting Event Log File Size Max Firewall Setting Events Out Of Allowed Policy Enabled Firewall Setting Failure Response Engine System Firewall Setting Failure Response Packet Sanity Check Firewall Setting Interface Isolation Enabled Firewall Setting Interface Limit One Active Enabled Firewall Setting Network Engine Mode Firewall Setting Reconnaissance Block Fingerprint Probe Duration Firewall Setting Reconnaissance Block Network Or Port Scan Duration Firewall Setting Reconnaissance Block Tcp Null Scan Duration Firewall Setting Reconnaissance Block Tcp Syn Fin Scan Duration Firewall Setting Reconnaissance Block Tcp Xmas Attack Duration Firewall Setting Reconnaissance Detect Fingerprint Probe Enabled Firewall Setting Reconnaissance Detect Network Or Port Scan Enabled Firewall Setting Reconnaissance Detect Tcp Null Scan Enabled Firewall Setting Reconnaissance Detect Tcp Syn Fin Scan Enabled Firewall Setting Reconnaissance Detect Tcp Xmas Attack Enabled Firewall Setting Reconnaissance Enabled Firewall Setting Reconnaissance Notify Fingerprint Probe Enabled Firewall Setting Reconnaissance Notify Network Or Port Scan Enabled Firewall Setting Reconnaissance Notify Tcp Null Scan Enabled Firewall Setting Reconnaissance Notify Tcp Syn Fin Scan Enabled Firewall Setting Reconnaissance Notify Tcp Xmas Attack Enabled Firewall Setting State Firewall Setting Syslog Config Id Firewall Setting Virtual And Container Network Scan Enabled Integrity Monitoring Setting Auto Apply Recommendations Enabled Integrity Monitoring Setting Combined Mode Protection Source Integrity Monitoring Setting Content Hash Algorithm Integrity Monitoring Setting Cpu Usage Level Integrity Monitoring Setting Realtime Enabled Integrity Monitoring Setting State Integrity Monitoring Setting Syslog Config Id Integrity Monitoring Setting Virtual Appliance Optimization Scan Cache Entries Max Intrusion Prevention Setting Auto Apply Recommendations Enabled Intrusion Prevention Setting Combined Mode Protection Source Intrusion Prevention Setting Engine Option Fragmented Ip Keep Max Intrusion Prevention Setting Engine Option Fragmented Ip Packet Send Icmp Enabled Intrusion Prevention Setting Engine Option Fragmented Ip Timeout Intrusion Prevention Setting Engine Option Fragmented Ip Unconcerned Mac Address Bypass Enabled Intrusion Prevention Setting Engine Options Enabled Intrusion Prevention Setting Log Data Rule First Match Enabled Intrusion Prevention Setting Nsx Security Tagging Detect Mode Level Intrusion Prevent ion Setting Nsx Security Tagging Prevent Mode Level Intrusion Prevention Setting State Intrusion Prevention Setting Virtual And Container Network Scan Enabled Log Inspection Setting Auto Apply Recommendations Enabled Log Inspection Setting Severity Clipping Agent Event Send Sys Log Level Min Log Inspection Setting Severity Clipping Agent Event Store Level Min Log Inspection Setting State Log Inspection Setting Sys Log Config Id Platform Setting Agent Communications Direction Platform Setting Agent Events Send Interval Platform Setting Agent Self Protection Enabled Platform Setting Agent Self Protection Password Enabled Platform Setting Auto Assign New Intrusion Prevention Rules Enabled Platform Setting Auto Update Anti Malware Engine Enabled Platform Setting Combined Mode Network Group Protection Source Platform Setting Heartbeat Inactive Vm Offline Alert Enabled Platform Setting Heartbeat Interval Platform Setting Heartbeat Local Time Shift Alert Threshold Platform Setting Heartbeat Missed Alert Threshold Platform Setting Inactive Agent Cleanup Override Enabled Platform Setting Notifications Suppress Popups Enabled Platform Setting Recommendation Ongoing Scans Interval Platform Setting Relay State Platform Setting Scan Cache Concurrency Max Platform Setting Scan Open Port List Id Platform Setting Smart Protection Global Server Enabled Platform Setting Smart Protection Global Server Use Proxy Enabled Platform Setting Troubleshooting Logging Level Web Reputation Setting Alerting Enabled Web Reputation Setting Blocking Page Link Web Reputation Setting Combined Mode Protection Source Web Reputation Setting Monitor Port List Id Web Reputation Setting Security Block Untested Pages Enabled Web Reputation Setting Security Level Web Reputation Setting Smart Protection Global Server Use Proxy Enabled Web Reputation Setting Smart Protection Local Server Allow Off Domain Global Web Reputation Setting Smart Protection Local Server Enabled Web Reputation Setting Smart Protection Server Connection Lost Warning Enabled Web Reputation Setting State Web Reputation Setting Syslog Config Id Off Off Off 0 Appliance preferred true true false false false 128 1024 false true true true ANTI_VIRUS.VirusFound.threat=medium 0 true false false true Automatic Off 0 500000 500000 Allow unrecognized software until it is explicitly blocked Use local ruleset 0 Off 0 Allow Allow Allow Allow Ignore Allow Allow Allow Allow Deny Deny Deny Deny Deny Allow Deny Normal 0 Agent preferred true 1 Second true true false true 20 Seconds false 0 Seconds 2 Minutes 1 Second 5 Minutes 10 Seconds 1000 10000 1000000 1000000 false 8 60 Seconds true false true true true true true false true true 10 Seconds 3 Hours 20000 Disable Detection of IPv4 Tunnels Disable Detection of IPv6 Tunnels 2 Minutes Allow DNS Query and DHCP Client Add Force Allow rule for ICMP type3 code4 60 120 false false false 60 Seconds None None None 30 Seconds false 100 5 Minutes false 1500 Bytes Default false Low - 2500 24 Hours true 60 Seconds 20 Seconds 128 Bytes 1 Drop 20 Seconds false false 30 Minutes 128 15 Minutes 3 4 MB true Fail closed Fail closed false false Inline No No No No No true true true true true true true true true true true Off 0 false No Appliance preferred sha1 High false Off 0 500000 No Agent preferred 1000 true 60 Seconds false false true No Tagging No Tagging Off true No Medium (6) Medium (6) Off 0 Agent/Appliance Initiated 60 Seconds false false true false Agent preferred false 10 Minutes Unlimited 2 false false 7 Days false 1 1-1024 true false Do Not Override false http://sitesafety.trendmicro.com/ Agent preferred 80,8080 false Medium false false false true Off 0
trendmicro-get-default-policy-setting
Get information about a certain default policy setting
Base Command
trendmicro-get-default-policy-setting
Input
| Argument Name | Description | Required |
|---|---|---|
| name | The name of the default setting. Possible values are: logInspectionSettingSeverityClippingAgentEventSendSyslogLevelMin, firewallSettingEngineOptionConnectionsCleanupMax, firewallSettingEngineOptionVerifyTcpChecksumEnabled, antiMalwareSettingScanCacheOnDemandConfigId, applicationControlSettingSharedRulesetId, webReputationSettingSmartProtectionServerConnectionLostWarningEnabled, applicationControlSettingExecutionEnforcementLevel, webReputationSettingBlockedUrlDomains, firewallSettingEngineOptionSynSentTimeout, platformSettingAgentSelfProtectionPassword, firewallSettingReconnaissanceBlockTcpXmasAttackDuration, intrusionPreventionSettingVirtualAndContainerNetworkScanEnabled, logInspectionSettingSyslogConfigId, firewallSettingEngineOptionDebugModeEnabled, firewallSettingVirtualAndContainerNetworkScanEnabled, antiMalwareSettingFileHashSha256Enabled, firewallSettingReconnaissanceNotifyFingerprintProbeEnabled, firewallSettingEventLogFileRetainNum, firewallSettingAntiEvasionCheckTcpPawsZero, antiMalwareSettingConnectedThreatDefenseUseControlManagerSuspiciousObjectListEnabled, intrusionPreventionSettingEngineOptionFragmentedIpKeepMax, firewallSettingEngineOptionDrop6To4BogonsAddressesEnabled, logInspectionSettingSeverityClippingAgentEventStoreLevelMin, platformSettingScanCacheConcurrencyMax, antiMalwareSettingSyslogConfigId, firewallSettingAntiEvasionTcpPawsWindowPolicy, firewallSettingReconnaissanceDetectTcpXmasAttackEnabled, applicationControlSettingRulesetMode, antiMalwareSettingSmartProtectionGlobalServerUseProxyEnabled, webReputationSettingSmartProtectionLocalServerAllowOffDomainGlobal, integrityMonitoringSettingCombinedModeProtectionSource, firewallSettingEngineOptionCloseWaitTimeout, platformSettingScanOpenPortListId, platformSettingAgentSelfProtectionPasswordEnabled, firewallSettingEngineOptionAckTimeout, firewallSettingEventLogFileCachedEntriesStaleTime, firewallSettingCombinedModeProtectionSource, platformSettingAgentEventsSendInterval, platformSettingInactiveAgentCleanupOverrideEnabled, firewallSettingFailureResponseEngineSystem, platformSettingRelayState, firewallSettingEngineOptionDropEvasiveRetransmitEnabled, activityMonitoringSettingIndicatorEnabled, intrusionPreventionSettingEngineOptionFragmentedIpTimeout, firewallSettingAntiEvasionCheckTcpZeroFlags, webReputationSettingSmartProtectionGlobalServerUseProxyEnabled, intrusionPreventionSettingNsxSecurityTaggingPreventModeLevel, firewallSettingReconnaissanceNotifyTcpXmasAttackEnabled, firewallSettingEngineOptionUdpTimeout, webReputationSettingSmartProtectionLocalServerEnabled, firewallSettingEngineOptionTcpMssLimit, firewallSettingEngineOptionColdStartTimeout, firewallSettingEngineOptionEstablishedTimeout, antiMalwareSettingIdentifiedFilesSpaceMaxMbytes, firewallSettingEngineOptionAllowNullIpEnabled, platformSettingNotificationsSuppressPopupsEnabled, firewallSettingAntiEvasionCheckTcpRstFinFlags, firewallSettingEngineOptionDisconnectTimeout, firewallSettingEngineOptionCloseTimeout, firewallSettingEngineOptionTunnelDepthMaxExceededAction, firewallSettingReconnaissanceDetectTcpNullScanEnabled, platformSettingSmartProtectionAntiMalwareGlobalServerProxyId, firewallSettingEngineOptionFilterIpv4Tunnels, webReputationSettingSmartProtectionLocalServerUrls, firewallSettingEngineOptionLogOnePacketPeriod, firewallSettingEngineOptionFilterIpv6Tunnels, firewallSettingAntiEvasionCheckTcpCongestionFlags, platformSettingHeartbeatMissedAlertThreshold, intrusionPreventionSettingEngineOptionsEnabled, firewallSettingEngineOptionConnectionsNumUdpMax, integrityMonitoringSettingAutoApplyRecommendationsEnabled, firewallSettingEngineOptionTunnelDepthMax, firewallSettingEngineOptionDropUnknownSslProtocolEnabled, antiMalwareSettingNsxSecurityTaggingValue, intrusionPreventionSettingLogDataRuleFirstMatchEnabled, firewallSettingEngineOptionLoggingPolicy, platformSettingTroubleshootingLoggingLevel, antiMalwareSettingVirtualApplianceOnDemandScanCacheEntriesMax, webReputationSettingCombinedModeProtectionSource, firewallSettingEngineOptionClosingTimeout, firewallSettingAntiEvasionCheckPaws, intrusionPreventionSettingAutoApplyRecommendationsEnabled, firewallSettingReconnaissanceDetectFingerprintProbeEnabled, antiMalwareSettingNsxSecurityTaggingRemoveOnCleanScanEnabled, firewallSettingEngineOptionLogPacketLengthMax, firewallSettingEngineOptionDropTeredoAnomaliesEnabled, webReputationSettingSecurityLevel, firewallSettingEngineOptionDropIpv6SiteLocalAddressesEnabled, activityMonitoringSettingActivityEnabled, firewallSettingEngineOptionStrictTerodoPortCheckEnabled, webReputationSettingBlockedUrlKeywords, webReputationSettingSyslogConfigId, firewallSettingFailureResponsePacketSanityCheck, firewallSettingNetworkEngineMode, firewallSettingEventLogFileSizeMax, antiMalwareSettingMalwareScanMultithreadedProcessingEnabled, firewallSettingReconnaissanceDetectTcpSynFinScanEnabled, firewallSettingEngineOptionDropIpZeroPayloadEnabled, firewallSettingEngineOptionBlockIpv6Agent8AndEarlierEnabled, intrusionPreventionSettingEngineOptionFragmentedIpPacketSendIcmpEnabled, antiMalwareSettingPredictiveMachineLearningExceptions, firewallSettingEngineOptionLogEventsPerSecondMax, firewallSettingEngineOptionSslSessionTime, antiMalwareSettingBehaviorMonitoringScanExclusionList, antiMalwareSettingSmartProtectionGlobalServerEnabled, firewallSettingEngineOptionLogOnePacketWithinPeriodEnabled, firewallSettingEngineOptionGenerateConnectionEventsIcmpEnabled, platformSettingHeartbeatInactiveVmOfflineAlertEnabled, webReputationSettingSmartProtectionWebReputationGlobalServerProxyId, antiMalwareSettingNsxSecurityTaggingEnabled, firewallSettingAntiEvasionCheckFragmentedPackets, firewallSettingEngineOptionConnectionsNumIcmpMax, firewallSettingAntiEvasionCheckTcpSplitHandshake, antiMalwareSettingCombinedModeProtectionSource, firewallSettingEngineOptionEventNodesMax, webReputationSettingMonitorPortListId, applicationControlSettingSyslogConfigId, firewallSettingAntiEvasionCheckOutNoConnection, firewallSettingEngineOptionBlockIpv6Agent9AndLaterEnabled, integrityMonitoringSettingVirtualApplianceOptimizationScanCacheEntriesMax, firewallSettingReconnaissanceNotifyTcpNullScanEnabled, firewallSettingEngineOptionIgnoreStatusCode1, firewallSettingEngineOptionIgnoreStatusCode0, firewallSettingEngineOptionIgnoreStatusCode2, firewallSettingEngineOptionSslSessionSize, antiMalwareSettingScanCacheRealTimeConfigId, platformSettingRecommendationOngoingScansInterval, platformSettingSmartProtectionGlobalServerUseProxyEnabled, firewallSettingInterfaceLimitOneActiveEnabled, firewallSettingAntiEvasionCheckTcpChecksum, firewallSettingEngineOptionDropIpv6ExtType0Enabled, antiMalwareSettingScanFileSizeMaxMbytes, firewallSettingEngineOptionGenerateConnectionEventsTcpEnabled, antiMalwareSettingFileHashSizeMaxMbytes, firewallSettingEventLogFileCachedEntriesLifeTime, platformSettingSmartProtectionGlobalServerProxyId, logInspectionSettingAutoApplyRecommendationsEnabled, antiMalwareSettingConnectedThreatDefenseSuspiciousFileDdanSubmissionEnabled, webReputationSettingBlockingPageLink, firewallSettingSyslogConfigId, platformSettingAgentCommunicationsDirection, integrityMonitoringSettingScanCacheConfigId, antiMalwareSettingDocumentExploitProtectionRuleExceptions, firewallSettingAntiEvasionCheckTcpSynWithData, antiMalwareSettingFileHashEnabled, firewallSettingReconnaissanceBlockFingerprintProbeDuration, firewallSettingEngineOptionDropIpv6BogonsAddressesEnabled, firewallSettingEngineOptionBootStartTimeout, firewallSettingEngineOptionConnectionsNumTcpMax, firewallSettingAntiEvasionSecurityPosture, firewallSettingInterfacePatterns, firewallSettingInterfaceIsolationEnabled, antiMalwareSettingVirtualApplianceRealTimeScanCacheEntriesMax, firewallSettingEventsOutOfAllowedPolicyEnabled, firewallSettingAntiEvasionCheckEvasiveRetransmit, firewallSettingEngineOptionIcmpTimeout, integrityMonitoringSettingSyslogConfigId, firewallSettingEngineOptionConnectionCleanupTimeout, antiMalwareSettingSmartProtectionLocalServerAllowOffDomainGlobal, firewallSettingReconnaissanceNotifyTcpSynFinScanEnabled, firewallSettingEngineOptionErrorTimeout, webReputationSettingAllowedUrls, firewallSettingReconnaissanceNotifyNetworkOrPortScanEnabled, firewallSettingEngineOptionFinWait1Timeout, firewallSettingEngineOptionGenerateConnectionEventsUdpEnabled, activityMonitoringSettingSyslogConfigId, firewallSettingAntiEvasionCheckTcpSynRstFlags, antiMalwareSettingSpywareApprovedList, firewallSettingAntiEvasionCheckTcpUrgentFlags, intrusionPreventionSettingNsxSecurityTaggingDetectModeLevel, intrusionPreventionSettingEngineOptionFragmentedIpUnconcernedMacAddressBypassEnabled, firewallSettingEngineOptionLogAllPacketDataEnabled, firewallSettingAntiEvasionCheckTcpSynFinFlags, platformSettingHeartbeatInterval, firewallSettingEngineOptionFragmentSizeMin, antiMalwareSettingSmartProtectionServerConnectionLostWarningEnabled, firewallSettingReconnaissanceBlockNetworkOrPortScanDuration, integrityMonitoringSettingContentHashAlgorithm, antiMalwareSettingSmartScanState, firewallSettingConfigPackageExceedsAlertMaxEnabled, platformSettingEnvironmentVariableOverrides, firewallSettingEngineOptionFragmentOffsetMin, antiMalwareSettingSmartProtectionLocalServerUrls, firewallSettingEngineOptionSynRcvdTimeout, firewallSettingEventLogFileCachedEntriesNum, firewallSettingEngineOptionForceAllowIcmpType3Code4, firewallSettingReconnaissanceBlockTcpNullScanDuration, platformSettingSmartProtectionGlobalServerEnabled, integrityMonitoringSettingRealtimeEnabled, firewallSettingEngineOptionLastAckTimeout, firewallSettingReconnaissanceExcludeIpListId, platformSettingAgentSelfProtectionEnabled, firewallSettingEngineOptionDropIpv6ReservedAddressesEnabled, firewallSettingAntiEvasionCheckFinNoConnection, firewallSettingEngineOptionDebugPacketNumMax, firewallSettingEngineOptionBypassCiscoWaasConnectionsEnabled, firewallSettingReconnaissanceEnabled, platformSettingHeartbeatLocalTimeShiftAlertThreshold, antiMalwareSettingFileHashMd5Enabled, firewallSettingReconnaissanceDetectNetworkOrPortScanEnabled, firewallSettingEngineOptionSilentTcpConnectionDropEnabled, firewallSettingEngineOptionBlockSameSrcDstIpEnabled, firewallSettingEngineOptionForceAllowDhcpDns, firewallSettingReconnaissanceIncludeIpListId, firewallSettingEngineOptionsEnabled, firewallSettingReconnaissanceBlockTcpSynFinScanDuration, webReputationSettingSecurityBlockUntestedPagesEnabled, webReputationSettingAllowedUrlDomains, firewallSettingEventLogFileIgnoreSourceIpListId, firewallSettingEngineOptionDropIpv6FragmentsLowerThanMinMtuEnabled, platformSettingAutoAssignNewIntrusionPreventionRulesEnabled, firewallSettingAntiEvasionCheckRstNoConnection, webReputationSettingBlockedUrls, platformSettingCombinedModeNetworkGroupProtectionSource, webReputationSettingAlertingEnabled, antiMalwareSettingNsxSecurityTaggingOnRemediationFailureEnabled, integrityMonitoringSettingCpuUsageLevel, platformSettingAutoUpdateAntiMalwareEngineEnabled, intrusionPreventionSettingCombinedModeProtectionSource. | Required |
Context Output
| Path | Type | Description |
|---|---|---|
| TrendMicro.DefaultPolicySettings.name | string | The name of the default policy setting |
| TrendMicro.DefaultPolicySettings.value | string | The value of the default policy setting |
Command Example
!trendmicro-get-default-policy-setting name=antiMalwareSettingConnectedThreatDefenseSuspiciousFileDdanSubmissionEnabled
Context Example
{
"TrendMicro": {
"DefaultPolicySettings": {
"name": "antiMalwareSettingConnectedThreatDefenseSuspiciousFileDdanSubmissionEnabled",
"value": "true"
}
}
}
Human Readable Output
Default Policy Setting
Name Value antiMalwareSettingConnectedThreatDefenseSuspiciousFileDdanSubmissionEnabled true
trendmicro-modify-default-policy-setting
Modify the value of a certain default policy setting
Base Command
trendmicro-modify-default-policy-setting
Input
| Argument Name | Description | Required |
|---|---|---|
| name | The name of the default setting. | Required |
| value | The new value of the default setting. | Required |
Context Output
| Path | Type | Description |
|---|---|---|
| TrendMicro.DefaultPolicySettings.name | string | The name of the default policy setting |
| TrendMicro.DefaultPolicySettings.value | unknown | The value of the default policy setting |
Command Example
!trendmicro-modify-default-policy-setting name=antiMalwareSettingConnectedThreatDefenseSuspiciousFileDdanSubmissionEnabled value=false
Context Example
{
"TrendMicro": {
"DefaultPolicySettings": {
"name": "antiMalwareSettingConnectedThreatDefenseSuspiciousFileDdanSubmissionEnabled",
"value": "false"
}
}
}
Human Readable Output
Default Policy Setting
Name Value antiMalwareSettingConnectedThreatDefenseSuspiciousFileDdanSubmissionEnabled false
trendmicro-reset-default-policy-setting
Reset the value of a certain default policy setting
Base Command
trendmicro-reset-default-policy-setting
Input
| Argument Name | Description | Required |
|---|---|---|
| name | The name of the default setting. | Required |
Context Output
| Path | Type | Description |
|---|---|---|
| TrendMicro.DefaultPolicySettings.name | unknown | The name of the default policy setting |
| TrendMicro.DefaultPolicySettings.value | unknown | The value of the default policy setting |
Command Example
!trendmicro-reset-default-policy-setting name=antiMalwareSettingConnectedThreatDefenseSuspiciousFileDdanSubmissionEnabled
Context Example
{
"TrendMicro": {
"DefaultPolicySettings": {
"name": "antiMalwareSettingConnectedThreatDefenseSuspiciousFileDdanSubmissionEnabled",
"value": "true"
}
}
}
Human Readable Output
Default Policy Setting
Name Value antiMalwareSettingConnectedThreatDefenseSuspiciousFileDdanSubmissionEnabled true
trendmicro-list-scheduled-task
Get information on all scheduled tasks.
Base Command
trendmicro-list-scheduled-task
Input
| Argument Name | Description | Required |
|---|---|---|
| task_id | The ID of the task to retrieve. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| TrendMicro.ScheduledTask.name | String | The name of the scheduled task. |
| TrendMicro.ScheduledTask.type | String | The type of the scheduled task. |
| TrendMicro.ScheduledTask.scheduleDetails.timeZone | String | The timezone of the scheduled task. |
| TrendMicro.ScheduledTask.scheduleDetails.recurrenceType | String | The recurrence type of the scheduled task. |
| TrendMicro.ScheduledTask.scheduleDetails.onceOnlyScheduleParameters.startTime | Number | The start time of the scheduled task. |
| TrendMicro.ScheduledTask.enabled | Boolean | Whether the scheduled task is enabled. |
| TrendMicro.ScheduledTask.nextRunTime | Date | The next run time of the scheduled task. |
| TrendMicro.ScheduledTask.scanForMalwareTaskParameters.computerFilter.type | String | The type of the computer filter of the scheduled task. |
| TrendMicro.ScheduledTask.scanForMalwareTaskParameters.computerFilter.computerID | Number | The computer ID of the scheduled task. |
| TrendMicro.ScheduledTask.scanForMalwareTaskParameters.timeout | String | The timeout for the scheduled task. |
| TrendMicro.ScheduledTask.ID | Number | The ID of the scheduled task. |
Command example
!trendmicro-list-scheduled-task task_id=1
Context Example
{
"TrendMicro": {
"ScheduledTask": {
"ID": 1,
"checkForSecurityUpdatesTaskParameters": {
"computerFilter": {
"type": "type"
},
"timeout": "never"
},
"enabled": true,
"lastRunTime": 1687185043521,
"name": "Daily check for Security Updates",
"nextRunTime": 1687271400000,
"scheduleDetails": {
"dailyScheduleParameters": {
"frequencyType": "everyday",
"startTime": 1676993400000
},
"recurrenceType": "daily",
"timeZone": "some time zone"
},
"type": "check-for-security-updates"
}
}
}
Human Readable Output
Scheduled Tasks
ID Name Type Enabled Last Run Time 1 Daily check for Security Updates check-for-security-updates true 2023-06-19 14:30:43
trendmicro-create-onceonly-scheduled-task
Creates a once-only scheduled task with a specific computer ID and runs it.
Base Command
trendmicro-create-onceonly-scan-scheduled-task
Input
| Argument Name | Description | Required |
|---|---|---|
| name | The name of the scheduled task. | Required |
| type | The type of the scheduled task. Possible values are: scan-for-open-ports, send-alert-summary, discover-computers, run-script, send-policy, generate-report, synchronize-directory, synchronize-users, scan-for-recommendations, synchronize-vcenter, scan-for-integrity-changes, scan-for-malware, check-for-security-updates, synchronize-cloud-account, check-for-software-updates, update-suspicious-objects-list. | Required |
| computer_id | The computer ID to create the task on. Can be retrieved from the trendmicro-list-computers command. | Required |
Context Output
| Path | Type | Description |
|---|---|---|
| TrendMicro.ScheduledTask.name | String | The name of the scheduled task. |
| TrendMicro.ScheduledTask.type | String | The type of the scheduled task. |
| TrendMicro.ScheduledTask.scheduleDetails.timeZone | String | The timezone of the scheduled task. |
| TrendMicro.ScheduledTask.scheduleDetails.recurrenceType | String | The recurrence type of the scheduled task. |
| TrendMicro.ScheduledTask.scheduleDetails.onceOnlyScheduleParameters.startTime | Number | The start time of the scheduled task. |
| TrendMicro.ScheduledTask.enabled | Boolean | Whether the scheduled task is enabled. |
| TrendMicro.ScheduledTask.nextRunTime | Date | The next run time of the scheduled task. |
| TrendMicro.ScheduledTask.scanForMalwareTaskParameters.computerFilter.type | String | The type of the computer filter of the scheduled task. |
| TrendMicro.ScheduledTask.scanForMalwareTaskParameters.computerFilter.computerID | Number | The computer ID of the scheduled task. |
| TrendMicro.ScheduledTask.scanForMalwareTaskParameters.timeout | String | The timeout for the scheduled task. |
| TrendMicro.ScheduledTask.ID | Number | The ID of the scheduled task. |
Command example
!trendmicro-create-onceonly-scheduled-task name=test computer_id=1 type="scan-for-malware"
Context Example
{
"TrendMicro": {
"ScheduledTask": {
"ID": 26,
"enabled": true,
"name": "test",
"nextRunTime": 1708620132041,
"scanForMalwareTaskParameters": {
"computerFilter": {
"computerID": 1,
"type": "some type"
},
"timeout": "never"
},
"scheduleDetails": {
"onceOnlyScheduleParameters": {
"startTime": 0
},
"recurrenceType": "none",
"timeZone": "some time zone"
},
"type": "scan-for-malware"
}
}
}
Human Readable Output
Once-only scheduled task, named test for the computer ID 1 has been successfully created and run.
trendmicro-delete-scheduled-task
Deletes a scheduled task.
Base Command
trendmicro-delete-scheduled-task
Input
| Argument Name | Description | Required |
|---|---|---|
| task_ids | A comma seperated of task-IDs to delete. | Required |
Context Output
There is no context output for this command.
Command example
!trendmicro-delete-scheduled-task task_id=1
Human Readable Output
Scheduled task with ID 1 has been successfully deleted.
Configuration parameters
server_url— Server URL (required)api_secret— API Secretcredentials_api_secret—insecure— Trust any certificate (not secure)proxy— Use system proxy settings
Commands (41)
-
trendmicro-add-firewall-rule-ids-to-computerAdd firewall rule IDs to a certain computer.
-
trendmicro-create-computerCreate a new computer.
-
trendmicro-create-computer-groupCreate a new computer group.
-
trendmicro-create-firewall-ruleCreate a new firewall rule.
-
trendmicro-create-onceonly-scan-scheduled-taskCreates a once-only scheduled task with a specific computer ID and runs it.
-
trendmicro-create-policyCreate a new policy.
-
trendmicro-delete-computerDelete a certain computer.
-
trendmicro-delete-computer-groupDelete a certain computer group.
-
trendmicro-delete-firewall-ruleDelete a certain firewall rule.
-
trendmicro-delete-policyDelete a certain policy.
-
trendmicro-delete-scheduled-taskDeletes a scheduled task.
-
trendmicro-get-computerGet information about a certain computer.
-
trendmicro-get-computer-groupGet information of a certain computer group.
-
trendmicro-get-computer-settingGet information about a setting of a certain computer.
-
trendmicro-get-default-policy-settingGet information about a certain default policy setting.
-
trendmicro-get-firewall-ruleGet information about a certain firewall rule.
-
trendmicro-get-policyGet information about a certain policy.
-
trendmicro-get-policy-settingGet information about a setting of a certain policy.
-
trendmicro-list-computer-groupsGet information about all existing computer groups.
-
trendmicro-list-computersGet information for all existing computers.
-
trendmicro-list-default-policy-settingsList default policy settings.
-
trendmicro-list-firewall-rule-ids-of-computerList all IDs of the firewall rules that are assigned to a certain computer.
-
trendmicro-list-firewall-rulesList all existing firewall rules.
-
trendmicro-list-policiesList all existing policies.
-
trendmicro-list-scheduled-taskGet information on all scheduled tasks.
-
trendmicro-modify-computerModify properties of a certain computer.
-
trendmicro-modify-computer-groupModify the properties of a certain computer group.
-
trendmicro-modify-computer-settingModify a setting of a certain computer.
-
trendmicro-modify-default-policy-settingModify the value of a certain default policy setting.
-
trendmicro-modify-firewall-ruleModify the properties of a certain firewall rule.
-
trendmicro-modify-policyModify a certain policy.
-
trendmicro-modify-policy-settingModify the value of a setting of a certain policy.
-
trendmicro-remove-firewall-rule-id-from-computerRemove a firewall rule ID from a certain computer.
-
trendmicro-reset-computer-settingReset a setting of certain computer to its default value.
-
trendmicro-reset-default-policy-settingReset the value of a certain default policy setting.
-
trendmicro-reset-policy-settingReset the value of a setting of a certain policy.
-
trendmicro-search-computer-groupsSearch for specific computer groups by some field name with a certain type. Every field has a specific type. It can be a simple type like a string, a numeric, or a boolean. However, it can also be a choice, which is a string with specific options (enumeration). To search, you must provide the field_name and field_type, the operation to perform, and the value to search.
-
trendmicro-search-computersSearch for specific computers by a field name with a certain type. Every field has a specific type. It can be a simple type like a string, a numeric, or a boolean. However, it can also be a choice, which is a string with specific options (enumeration). To search, you must provide the field_name and field_type, the operation to perform, and the value to search.
-
trendmicro-search-firewall-rulesSearch for specific firewall rules by some field name with a certain type. Every field has a specific type. It can be a simple type like a string, a numeric, or a boolean. However, it can also be a choice, which is a string with specific options (enumeration). To search, you must provide the field_name and field_type, the operation to perform, and the value to search.
-
trendmicro-search-policiesSearch for specific policies by some field name with a certain type. Every field has a specific type. It can be a simple type like a string, a numeric or a boolean. However, it can also be a choice, which is a string with specific options (enumeration). To search, you must provide the field_name and field_type, the operation to perform, and the value to search.
-
trendmicro-set-firewall-rule-ids-to-computerAssign firewall rule IDs to a certain computer.
category: Endpoint provider: TrendAI™ sectionorder: - Connect - Collect commonfields: id: Trend Micro Deep Security version: -1 configuration: - additionalinfo: 'Server URL for TrendMicro console. e.g.: https://ip:port/' defaultvalue: https://app.deepsecurity.trendmicro.com display: Server URL name: server_url required: true type: 0 section: Connect - additionalinfo: The API secret key display: API Secret name: api_secret type: 4 hidden: true required: false section: Connect - displaypassword: API Secret name: credentials_api_secret additionalinfo: The API secret key hiddenusername: true type: 9 required: false section: Connect - defaultvalue: 'false' display: Trust any certificate (not secure) name: insecure type: 8 required: false section: Connect advanced: true - display: Use system proxy settings name: proxy type: 8 required: false section: Connect advanced: true description: Cloud Security Protection. display: TrendAI™ Deep Security™ name: Trend Micro Deep Security script: script: "-" commands: - arguments: - auto: PREDEFINED defaultValue: none description: The computer information to include in the response. Note that the information is appended to the context data only. isArray: true name: expand predefined: - none - all - computerStatus - tasks - securityUpdates - computerSettings - allSecurityModules - antiMalware - webReputation - activityMonitoring - firewall - intrusionPrevention - integrityMonitoring - logInspection - applicationControl - SAP - interfaces - ESXSummary - allVirtualMachineSummaries - azureARMVirtualMachineSummary - azureVMVirtualMachineSummary - ec2VirtualMachineSummary - noConnectorVirtualMachineSummary - vmwareVMVirtualMachineSummary - vcloudVMVirtualMachineSummary - workspaceVirtualMachineSummary - gcpVirtualMachineSummary - auto: PREDEFINED defaultValue: 'false' description: 'Whether to display only overrides defined for the current computer. Possible values: "true" and "false".' name: overrides predefined: - 'true' - 'false' - description: Hostname of the computer. required: true name: host_name - description: Display name of the computer. required: true name: display_name - description: Description of the computer. name: description - description: ID of the computer group to which the computer belongs. name: group_id - description: ID of the policy assigned to the computer. The ID can be obtained from the trendmicro-list-policies and trendmicro-search-policies commands. name: policy_id - description: ID of the asset importance assigned to the computer. name: asset_importance_id - description: ID of the relay list that is assigned to the computer. name: relay_list_id description: Create a new computer. name: trendmicro-create-computer outputs: - contextPath: TrendMicro.Computers.hostName description: Hostname of the computer. type: string - contextPath: TrendMicro.Computers.displayName description: Display name of the computer. type: string - contextPath: TrendMicro.Computers.description description: Description of the computer. type: string - contextPath: TrendMicro.Computers.groupID description: ID of the computer group to which the computer belongs. type: integer - contextPath: TrendMicro.Computers.policyID description: ID of the policy assigned to the computer. type: integer - contextPath: TrendMicro.Computers.assetImportanceID description: ID of the asset importance assigned to the computer. type: integer - contextPath: TrendMicro.Computers.relayListID description: ID of the relay list that is assigned to the computer. type: integer - arguments: - description: The maximum number of objects to return. name: max_items - description: The field name to search for. isArray: true name: field_name required: true auto: PREDEFINED predefined: - hostName - displayName - description - groupID - policyID - assetImportanceID - relayListID - lastIPUsed - platform - agentFingerPrint - applianceFingerPrint - lastAgentCommunication - lastApplianceCommunication - lastSendPolicyRequest - lastSendPolicySuccess - agentVersion - biosUUID - hostGUID - ID - auto: PREDEFINED description: 'The type of the field. Possible values: "boolean", "numeric", "choice", "id", and "string".' required: true name: field_type predefined: - boolean - numeric - choice - id - string - auto: PREDEFINED description: 'The comparison operation to use. Possible values: "less-than", "less-than-or-equal", "equal", "greater-than-or-equal", "greater-than", and "not-equal".' name: operation predefined: - less-than - less-than-or-equal - equal - greater-than-or-equal - greater-than - not-equal required: true - description: The value to compare against the field name. name: value required: true - description: If true, forces the response objects to be sorted by ID, overriding the default sort order. name: sort_by_object_id description: Search for specific computers by a field name with a certain type. Every field has a specific type. It can be a simple type like a string, a numeric, or a boolean. However, it can also be a choice, which is a string with specific options (enumeration). To search, you must provide the field_name and field_type, the operation to perform, and the value to search. name: trendmicro-search-computers outputs: - contextPath: TrendMicro.Computers.hostName description: Hostname of the computer. type: string - contextPath: TrendMicro.Computers.displayName description: Display name of the computer. type: string - contextPath: TrendMicro.Computers.description description: Description of the computer. type: string - contextPath: TrendMicro.Computers.groupID description: ID of the computer group to which the computer belongs. type: integer - contextPath: TrendMicro.Computers.policyID description: ID of the policy assigned to the computer. type: integer - contextPath: TrendMicro.Computers.assetImportanceID description: ID of the asset importance assigned to the computer. type: integer - contextPath: TrendMicro.Computers.relayListID description: ID of the relay list that is assigned to the computer. type: integer - arguments: - description: The ID number of the computer to get. The ID can be obtained from the trendmicro-list-computers and trendmicro-search-computers commands. name: computer_id required: true - auto: PREDEFINED defaultValue: none description: The computer information to include in the response. Note that the information is appended to the context data only. isArray: true name: expand predefined: - none - all - computerStatus - tasks - securityUpdates - computerSettings - allSecurityModules - antiMalware - webReputation - activityMonitoring - firewall - intrusionPrevention - integrityMonitoring - logInspection - applicationControl - SAP - interfaces - ESXSummary - allVirtualMachineSummaries - azureARMVirtualMachineSummary - azureVMVirtualMachineSummary - ec2VirtualMachineSummary - noConnectorVirtualMachineSummary - vmwareVMVirtualMachineSummary - vcloudVMVirtualMachineSummary - workspaceVirtualMachineSummary - gcpVirtualMachineSummary - auto: PREDEFINED defaultValue: 'false' description: 'Whether to display only overrides defined for the current computer. Possible values: "true" and "false".' name: overrides predefined: - 'true' - 'false' description: Get information about a certain computer. name: trendmicro-get-computer outputs: - contextPath: TrendMicro.Computers.hostName description: Hostname of the computer. type: string - contextPath: TrendMicro.Computers.displayName description: Display name of the computer. type: string - contextPath: TrendMicro.Computers.description description: Description of the computer. type: string - contextPath: TrendMicro.Computers.groupID description: ID of the computer group to which the computer belongs. type: integer - contextPath: TrendMicro.Computers.policyID description: ID of the policy assigned to the computer. type: integer - contextPath: TrendMicro.Computers.assetImportanceID description: ID of the asset importance assigned to the computer. type: integer - contextPath: TrendMicro.Computers.relayListID description: ID of the relay list that is assigned to the computer. type: integer - arguments: - auto: PREDEFINED defaultValue: none description: The computer information to include in the response. Note that the information is appended to the context data only. isArray: true name: expand predefined: - none - all - computerStatus - tasks - securityUpdates - computerSettings - allSecurityModules - antiMalware - webReputation - activityMonitoring - firewall - intrusionPrevention - integrityMonitoring - logInspection - applicationControl - SAP - interfaces - ESXSummary - allVirtualMachineSummaries - azureARMVirtualMachineSummary - azureVMVirtualMachineSummary - ec2VirtualMachineSummary - noConnectorVirtualMachineSummary - vmwareVMVirtualMachineSummary - vcloudVMVirtualMachineSummary - workspaceVirtualMachineSummary - gcpVirtualMachineSummary - auto: PREDEFINED defaultValue: 'false' description: 'Whether to display only overrides defined for the current computer. Possible values: "true" and "false".' name: overrides predefined: - 'true' - 'false' description: Get information for all existing computers. name: trendmicro-list-computers outputs: - contextPath: TrendMicro.Computers.hostName description: Hostname of the computer. type: string - contextPath: TrendMicro.Computers.displayName description: Display name of the computer. type: string - contextPath: TrendMicro.Computers.description description: Description of the computer. type: string - contextPath: TrendMicro.Computers.groupID description: ID of the computer group to which the computer belongs. type: integer - contextPath: TrendMicro.Computers.policyID description: ID of the policy assigned to the computer. type: integer - contextPath: TrendMicro.Computers.assetImportanceID description: ID of the asset importance assigned to the computer. type: integer - contextPath: TrendMicro.Computers.relayListID description: ID of the relay list that is assigned to the computer. type: integer - arguments: - description: The ID number of the computer to modify. The ID can be obtained from the trendmicro-list-computers and trendmicro-search-computers commands. name: computer_id required: true - auto: PREDEFINED defaultValue: none description: Determines the computer information to include in the response. Note that the information is appended to the context data only. isArray: true name: expand predefined: - none - all - computerStatus - tasks - securityUpdates - computerSettings - allSecurityModules - antiMalware - webReputation - activityMonitoring - firewall - intrusionPrevention - integrityMonitoring - logInspection - applicationControl - SAP - interfaces - ESXSummary - allVirtualMachineSummaries - azureARMVirtualMachineSummary - azureVMVirtualMachineSummary - ec2VirtualMachineSummary - noConnectorVirtualMachineSummary - vmwareVMVirtualMachineSummary - vcloudVMVirtualMachineSummary - workspaceVirtualMachineSummary - gcpVirtualMachineSummary - description: Hostname of the computer. name: host_name - description: Display name of the computer. name: display_name - description: Description of the computer. name: description - description: ID of the computer group to which the computer belongs. name: group_id - description: ID of the policy assigned to the computer. The ID can be obtained from the trendmicro-list-policies and trendmicro-search-policies commands. name: policy_id - description: ID of the asset importance assigned to the computer. name: asset_importance_id - description: ID of the relay list that is assigned to the computer. name: relay_list_id - auto: PREDEFINED defaultValue: 'false' description: 'Whether to display only overrides defined for the current computer. Possible values: "true" and "false".' name: overrides predefined: - 'true' - 'false' description: Modify properties of a certain computer. name: trendmicro-modify-computer outputs: - contextPath: TrendMicro.Computers.hostName description: Hostname of the computer. type: string - contextPath: TrendMicro.Computers.displayName description: Display name of the computer. type: string - contextPath: TrendMicro.Computers.description description: Description of the computer. type: string - contextPath: TrendMicro.Computers.groupID description: ID of the computer group to which the computer belongs. type: integer - contextPath: TrendMicro.Computers.policyID description: ID of the policy assigned to the computer. type: integer - contextPath: TrendMicro.Computers.assetImportanceID description: ID of the asset importance assigned to the computer. type: integer - contextPath: TrendMicro.Computers.relayListID description: ID of the relay list that is assigned to the computer. type: integer - arguments: - description: The ID number of the computer to delete. The ID can be obtained from the trendmicro-list-computers and trendmicro-search-computers commands. name: computer_id required: true description: Delete a certain computer. name: trendmicro-delete-computer - arguments: - description: The ID number of the computer. The ID can be obtained from the trendmicro-list-computers and trendmicro-search-computers commands. name: computer_id required: true - auto: PREDEFINED description: The name of the setting. name: name predefined: - logInspectionSettingSeverityClippingAgentEventSendSyslogLevelMin - firewallSettingEngineOptionConnectionsCleanupMax - firewallSettingEngineOptionVerifyTcpChecksumEnabled - antiMalwareSettingScanCacheOnDemandConfigId - applicationControlSettingSharedRulesetId - webReputationSettingSmartProtectionServerConnectionLostWarningEnabled - applicationControlSettingExecutionEnforcementLevel - webReputationSettingBlockedUrlDomains - firewallSettingEngineOptionSynSentTimeout - platformSettingAgentSelfProtectionPassword - firewallSettingReconnaissanceBlockTcpXmasAttackDuration - intrusionPreventionSettingVirtualAndContainerNetworkScanEnabled - logInspectionSettingSyslogConfigId - firewallSettingEngineOptionDebugModeEnabled - firewallSettingVirtualAndContainerNetworkScanEnabled - antiMalwareSettingFileHashSha256Enabled - firewallSettingReconnaissanceNotifyFingerprintProbeEnabled - firewallSettingEventLogFileRetainNum - firewallSettingAntiEvasionCheckTcpPawsZero - antiMalwareSettingConnectedThreatDefenseUseControlManagerSuspiciousObjectListEnabled - intrusionPreventionSettingEngineOptionFragmentedIpKeepMax - firewallSettingEngineOptionDrop6To4BogonsAddressesEnabled - logInspectionSettingSeverityClippingAgentEventStoreLevelMin - platformSettingScanCacheConcurrencyMax - antiMalwareSettingSyslogConfigId - firewallSettingAntiEvasionTcpPawsWindowPolicy - firewallSettingReconnaissanceDetectTcpXmasAttackEnabled - applicationControlSettingRulesetMode - antiMalwareSettingSmartProtectionGlobalServerUseProxyEnabled - webReputationSettingSmartProtectionLocalServerAllowOffDomainGlobal - integrityMonitoringSettingCombinedModeProtectionSource - firewallSettingEngineOptionCloseWaitTimeout - platformSettingScanOpenPortListId - platformSettingAgentSelfProtectionPasswordEnabled - firewallSettingEngineOptionAckTimeout - firewallSettingEventLogFileCachedEntriesStaleTime - firewallSettingCombinedModeProtectionSource - platformSettingAgentEventsSendInterval - platformSettingInactiveAgentCleanupOverrideEnabled - firewallSettingFailureResponseEngineSystem - platformSettingRelayState - firewallSettingEngineOptionDropEvasiveRetransmitEnabled - activityMonitoringSettingIndicatorEnabled - intrusionPreventionSettingEngineOptionFragmentedIpTimeout - firewallSettingAntiEvasionCheckTcpZeroFlags - webReputationSettingSmartProtectionGlobalServerUseProxyEnabled - intrusionPreventionSettingNsxSecurityTaggingPreventModeLevel - firewallSettingReconnaissanceNotifyTcpXmasAttackEnabled - firewallSettingEngineOptionUdpTimeout - webReputationSettingSmartProtectionLocalServerEnabled - firewallSettingEngineOptionTcpMssLimit - firewallSettingEngineOptionColdStartTimeout - firewallSettingEngineOptionEstablishedTimeout - antiMalwareSettingIdentifiedFilesSpaceMaxMbytes - firewallSettingEngineOptionAllowNullIpEnabled - platformSettingNotificationsSuppressPopupsEnabled - firewallSettingAntiEvasionCheckTcpRstFinFlags - firewallSettingEngineOptionDisconnectTimeout - firewallSettingEngineOptionCloseTimeout - firewallSettingEngineOptionTunnelDepthMaxExceededAction - firewallSettingReconnaissanceDetectTcpNullScanEnabled - platformSettingSmartProtectionAntiMalwareGlobalServerProxyId - firewallSettingEngineOptionFilterIpv4Tunnels - webReputationSettingSmartProtectionLocalServerUrls - firewallSettingEngineOptionLogOnePacketPeriod - firewallSettingEngineOptionFilterIpv6Tunnels - firewallSettingAntiEvasionCheckTcpCongestionFlags - platformSettingHeartbeatMissedAlertThreshold - intrusionPreventionSettingEngineOptionsEnabled - firewallSettingEngineOptionConnectionsNumUdpMax - integrityMonitoringSettingAutoApplyRecommendationsEnabled - firewallSettingEngineOptionTunnelDepthMax - firewallSettingEngineOptionDropUnknownSslProtocolEnabled - antiMalwareSettingNsxSecurityTaggingValue - intrusionPreventionSettingLogDataRuleFirstMatchEnabled - firewallSettingEngineOptionLoggingPolicy - platformSettingTroubleshootingLoggingLevel - antiMalwareSettingVirtualApplianceOnDemandScanCacheEntriesMax - webReputationSettingCombinedModeProtectionSource - firewallSettingEngineOptionClosingTimeout - firewallSettingAntiEvasionCheckPaws - intrusionPreventionSettingAutoApplyRecommendationsEnabled - firewallSettingReconnaissanceDetectFingerprintProbeEnabled - antiMalwareSettingNsxSecurityTaggingRemoveOnCleanScanEnabled - firewallSettingEngineOptionLogPacketLengthMax - firewallSettingEngineOptionDropTeredoAnomaliesEnabled - webReputationSettingSecurityLevel - firewallSettingEngineOptionDropIpv6SiteLocalAddressesEnabled - activityMonitoringSettingActivityEnabled - firewallSettingEngineOptionStrictTerodoPortCheckEnabled - webReputationSettingBlockedUrlKeywords - webReputationSettingSyslogConfigId - firewallSettingFailureResponsePacketSanityCheck - firewallSettingNetworkEngineMode - firewallSettingEventLogFileSizeMax - antiMalwareSettingMalwareScanMultithreadedProcessingEnabled - firewallSettingReconnaissanceDetectTcpSynFinScanEnabled - firewallSettingEngineOptionDropIpZeroPayloadEnabled - firewallSettingEngineOptionBlockIpv6Agent8AndEarlierEnabled - intrusionPreventionSettingEngineOptionFragmentedIpPacketSendIcmpEnabled - antiMalwareSettingPredictiveMachineLearningExceptions - firewallSettingEngineOptionLogEventsPerSecondMax - firewallSettingEngineOptionSslSessionTime - antiMalwareSettingBehaviorMonitoringScanExclusionList - antiMalwareSettingSmartProtectionGlobalServerEnabled - firewallSettingEngineOptionLogOnePacketWithinPeriodEnabled - firewallSettingEngineOptionGenerateConnectionEventsIcmpEnabled - platformSettingHeartbeatInactiveVmOfflineAlertEnabled - webReputationSettingSmartProtectionWebReputationGlobalServerProxyId - antiMalwareSettingNsxSecurityTaggingEnabled - firewallSettingAntiEvasionCheckFragmentedPackets - firewallSettingEngineOptionConnectionsNumIcmpMax - firewallSettingAntiEvasionCheckTcpSplitHandshake - antiMalwareSettingCombinedModeProtectionSource - firewallSettingEngineOptionEventNodesMax - webReputationSettingMonitorPortListId - applicationControlSettingSyslogConfigId - firewallSettingAntiEvasionCheckOutNoConnection - firewallSettingEngineOptionBlockIpv6Agent9AndLaterEnabled - integrityMonitoringSettingVirtualApplianceOptimizationScanCacheEntriesMax - firewallSettingReconnaissanceNotifyTcpNullScanEnabled - firewallSettingEngineOptionIgnoreStatusCode1 - firewallSettingEngineOptionIgnoreStatusCode0 - firewallSettingEngineOptionIgnoreStatusCode2 - firewallSettingEngineOptionSslSessionSize - antiMalwareSettingScanCacheRealTimeConfigId - platformSettingRecommendationOngoingScansInterval - platformSettingSmartProtectionGlobalServerUseProxyEnabled - firewallSettingInterfaceLimitOneActiveEnabled - firewallSettingAntiEvasionCheckTcpChecksum - firewallSettingEngineOptionDropIpv6ExtType0Enabled - antiMalwareSettingScanFileSizeMaxMbytes - firewallSettingEngineOptionGenerateConnectionEventsTcpEnabled - antiMalwareSettingFileHashSizeMaxMbytes - firewallSettingEventLogFileCachedEntriesLifeTime - platformSettingSmartProtectionGlobalServerProxyId - logInspectionSettingAutoApplyRecommendationsEnabled - antiMalwareSettingConnectedThreatDefenseSuspiciousFileDdanSubmissionEnabled - webReputationSettingBlockingPageLink - firewallSettingSyslogConfigId - platformSettingAgentCommunicationsDirection - integrityMonitoringSettingScanCacheConfigId - antiMalwareSettingDocumentExploitProtectionRuleExceptions - firewallSettingAntiEvasionCheckTcpSynWithData - antiMalwareSettingFileHashEnabled - firewallSettingReconnaissanceBlockFingerprintProbeDuration - firewallSettingEngineOptionDropIpv6BogonsAddressesEnabled - firewallSettingEngineOptionBootStartTimeout - firewallSettingEngineOptionConnectionsNumTcpMax - firewallSettingAntiEvasionSecurityPosture - firewallSettingInterfacePatterns - firewallSettingInterfaceIsolationEnabled - antiMalwareSettingVirtualApplianceRealTimeScanCacheEntriesMax - firewallSettingEventsOutOfAllowedPolicyEnabled - firewallSettingAntiEvasionCheckEvasiveRetransmit - firewallSettingEngineOptionIcmpTimeout - integrityMonitoringSettingSyslogConfigId - firewallSettingEngineOptionConnectionCleanupTimeout - antiMalwareSettingSmartProtectionLocalServerAllowOffDomainGlobal - firewallSettingReconnaissanceNotifyTcpSynFinScanEnabled - firewallSettingEngineOptionErrorTimeout - webReputationSettingAllowedUrls - firewallSettingReconnaissanceNotifyNetworkOrPortScanEnabled - firewallSettingEngineOptionFinWait1Timeout - firewallSettingEngineOptionGenerateConnectionEventsUdpEnabled - activityMonitoringSettingSyslogConfigId - firewallSettingAntiEvasionCheckTcpSynRstFlags - antiMalwareSettingSpywareApprovedList - firewallSettingAntiEvasionCheckTcpUrgentFlags - intrusionPreventionSettingNsxSecurityTaggingDetectModeLevel - intrusionPreventionSettingEngineOptionFragmentedIpUnconcernedMacAddressBypassEnabled - firewallSettingEngineOptionLogAllPacketDataEnabled - firewallSettingAntiEvasionCheckTcpSynFinFlags - platformSettingHeartbeatInterval - firewallSettingEngineOptionFragmentSizeMin - antiMalwareSettingSmartProtectionServerConnectionLostWarningEnabled - firewallSettingReconnaissanceBlockNetworkOrPortScanDuration - integrityMonitoringSettingContentHashAlgorithm - antiMalwareSettingSmartScanState - firewallSettingConfigPackageExceedsAlertMaxEnabled - platformSettingEnvironmentVariableOverrides - firewallSettingEngineOptionFragmentOffsetMin - antiMalwareSettingSmartProtectionLocalServerUrls - firewallSettingEngineOptionSynRcvdTimeout - firewallSettingEventLogFileCachedEntriesNum - firewallSettingEngineOptionForceAllowIcmpType3Code4 - firewallSettingReconnaissanceBlockTcpNullScanDuration - platformSettingSmartProtectionGlobalServerEnabled - integrityMonitoringSettingRealtimeEnabled - firewallSettingEngineOptionLastAckTimeout - firewallSettingReconnaissanceExcludeIpListId - platformSettingAgentSelfProtectionEnabled - firewallSettingEngineOptionDropIpv6ReservedAddressesEnabled - firewallSettingAntiEvasionCheckFinNoConnection - firewallSettingEngineOptionDebugPacketNumMax - firewallSettingEngineOptionBypassCiscoWaasConnectionsEnabled - firewallSettingReconnaissanceEnabled - platformSettingHeartbeatLocalTimeShiftAlertThreshold - antiMalwareSettingFileHashMd5Enabled - firewallSettingReconnaissanceDetectNetworkOrPortScanEnabled - firewallSettingEngineOptionSilentTcpConnectionDropEnabled - firewallSettingEngineOptionBlockSameSrcDstIpEnabled - firewallSettingEngineOptionForceAllowDhcpDns - firewallSettingReconnaissanceIncludeIpListId - firewallSettingEngineOptionsEnabled - firewallSettingReconnaissanceBlockTcpSynFinScanDuration - webReputationSettingSecurityBlockUntestedPagesEnabled - webReputationSettingAllowedUrlDomains - firewallSettingEventLogFileIgnoreSourceIpListId - firewallSettingEngineOptionDropIpv6FragmentsLowerThanMinMtuEnabled - platformSettingAutoAssignNewIntrusionPreventionRulesEnabled - firewallSettingAntiEvasionCheckRstNoConnection - webReputationSettingBlockedUrls - platformSettingCombinedModeNetworkGroupProtectionSource - webReputationSettingAlertingEnabled - antiMalwareSettingNsxSecurityTaggingOnRemediationFailureEnabled - integrityMonitoringSettingCpuUsageLevel - platformSettingAutoUpdateAntiMalwareEngineEnabled - intrusionPreventionSettingCombinedModeProtectionSource required: true - auto: PREDEFINED defaultValue: 'false' description: 'Whether to display only overrides defined for the current computer. Possible values: "true" and "false".' name: overrides predefined: - 'true' - 'false' description: Get information about a setting of a certain computer. name: trendmicro-get-computer-setting outputs: - contextPath: TrendMicro.ComputersSettings.computerId description: The computer ID that owns the computer. type: integer - contextPath: TrendMicro.ComputersSettings.name description: The name of the setting. type: string - contextPath: TrendMicro.ComputersSettings.value description: The value of a setting. type: string - arguments: - description: The ID number of the computer. The ID can be obtained from the trendmicro-list-computers and trendmicro-search-computers commands. name: computer_id required: true - auto: PREDEFINED description: The name of the setting. name: name predefined: - logInspectionSettingSeverityClippingAgentEventSendSyslogLevelMin - firewallSettingEngineOptionConnectionsCleanupMax - firewallSettingEngineOptionVerifyTcpChecksumEnabled - antiMalwareSettingScanCacheOnDemandConfigId - applicationControlSettingSharedRulesetId - webReputationSettingSmartProtectionServerConnectionLostWarningEnabled - applicationControlSettingExecutionEnforcementLevel - webReputationSettingBlockedUrlDomains - firewallSettingEngineOptionSynSentTimeout - platformSettingAgentSelfProtectionPassword - firewallSettingReconnaissanceBlockTcpXmasAttackDuration - intrusionPreventionSettingVirtualAndContainerNetworkScanEnabled - logInspectionSettingSyslogConfigId - firewallSettingEngineOptionDebugModeEnabled - firewallSettingVirtualAndContainerNetworkScanEnabled - antiMalwareSettingFileHashSha256Enabled - firewallSettingReconnaissanceNotifyFingerprintProbeEnabled - firewallSettingEventLogFileRetainNum - firewallSettingAntiEvasionCheckTcpPawsZero - antiMalwareSettingConnectedThreatDefenseUseControlManagerSuspiciousObjectListEnabled - intrusionPreventionSettingEngineOptionFragmentedIpKeepMax - firewallSettingEngineOptionDrop6To4BogonsAddressesEnabled - logInspectionSettingSeverityClippingAgentEventStoreLevelMin - platformSettingScanCacheConcurrencyMax - antiMalwareSettingSyslogConfigId - firewallSettingAntiEvasionTcpPawsWindowPolicy - firewallSettingReconnaissanceDetectTcpXmasAttackEnabled - applicationControlSettingRulesetMode - antiMalwareSettingSmartProtectionGlobalServerUseProxyEnabled - webReputationSettingSmartProtectionLocalServerAllowOffDomainGlobal - integrityMonitoringSettingCombinedModeProtectionSource - firewallSettingEngineOptionCloseWaitTimeout - platformSettingScanOpenPortListId - platformSettingAgentSelfProtectionPasswordEnabled - firewallSettingEngineOptionAckTimeout - firewallSettingEventLogFileCachedEntriesStaleTime - firewallSettingCombinedModeProtectionSource - platformSettingAgentEventsSendInterval - platformSettingInactiveAgentCleanupOverrideEnabled - firewallSettingFailureResponseEngineSystem - platformSettingRelayState - firewallSettingEngineOptionDropEvasiveRetransmitEnabled - activityMonitoringSettingIndicatorEnabled - intrusionPreventionSettingEngineOptionFragmentedIpTimeout - firewallSettingAntiEvasionCheckTcpZeroFlags - webReputationSettingSmartProtectionGlobalServerUseProxyEnabled - intrusionPreventionSettingNsxSecurityTaggingPreventModeLevel - firewallSettingReconnaissanceNotifyTcpXmasAttackEnabled - firewallSettingEngineOptionUdpTimeout - webReputationSettingSmartProtectionLocalServerEnabled - firewallSettingEngineOptionTcpMssLimit - firewallSettingEngineOptionColdStartTimeout - firewallSettingEngineOptionEstablishedTimeout - antiMalwareSettingIdentifiedFilesSpaceMaxMbytes - firewallSettingEngineOptionAllowNullIpEnabled - platformSettingNotificationsSuppressPopupsEnabled - firewallSettingAntiEvasionCheckTcpRstFinFlags - firewallSettingEngineOptionDisconnectTimeout - firewallSettingEngineOptionCloseTimeout - firewallSettingEngineOptionTunnelDepthMaxExceededAction - firewallSettingReconnaissanceDetectTcpNullScanEnabled - platformSettingSmartProtectionAntiMalwareGlobalServerProxyId - firewallSettingEngineOptionFilterIpv4Tunnels - webReputationSettingSmartProtectionLocalServerUrls - firewallSettingEngineOptionLogOnePacketPeriod - firewallSettingEngineOptionFilterIpv6Tunnels - firewallSettingAntiEvasionCheckTcpCongestionFlags - platformSettingHeartbeatMissedAlertThreshold - intrusionPreventionSettingEngineOptionsEnabled - firewallSettingEngineOptionConnectionsNumUdpMax - integrityMonitoringSettingAutoApplyRecommendationsEnabled - firewallSettingEngineOptionTunnelDepthMax - firewallSettingEngineOptionDropUnknownSslProtocolEnabled - antiMalwareSettingNsxSecurityTaggingValue - intrusionPreventionSettingLogDataRuleFirstMatchEnabled - firewallSettingEngineOptionLoggingPolicy - platformSettingTroubleshootingLoggingLevel - antiMalwareSettingVirtualApplianceOnDemandScanCacheEntriesMax - webReputationSettingCombinedModeProtectionSource - firewallSettingEngineOptionClosingTimeout - firewallSettingAntiEvasionCheckPaws - intrusionPreventionSettingAutoApplyRecommendationsEnabled - firewallSettingReconnaissanceDetectFingerprintProbeEnabled - antiMalwareSettingNsxSecurityTaggingRemoveOnCleanScanEnabled - firewallSettingEngineOptionLogPacketLengthMax - firewallSettingEngineOptionDropTeredoAnomaliesEnabled - webReputationSettingSecurityLevel - firewallSettingEngineOptionDropIpv6SiteLocalAddressesEnabled - activityMonitoringSettingActivityEnabled - firewallSettingEngineOptionStrictTerodoPortCheckEnabled - webReputationSettingBlockedUrlKeywords - webReputationSettingSyslogConfigId - firewallSettingFailureResponsePacketSanityCheck - firewallSettingNetworkEngineMode - firewallSettingEventLogFileSizeMax - antiMalwareSettingMalwareScanMultithreadedProcessingEnabled - firewallSettingReconnaissanceDetectTcpSynFinScanEnabled - firewallSettingEngineOptionDropIpZeroPayloadEnabled - firewallSettingEngineOptionBlockIpv6Agent8AndEarlierEnabled - intrusionPreventionSettingEngineOptionFragmentedIpPacketSendIcmpEnabled - antiMalwareSettingPredictiveMachineLearningExceptions - firewallSettingEngineOptionLogEventsPerSecondMax - firewallSettingEngineOptionSslSessionTime - antiMalwareSettingBehaviorMonitoringScanExclusionList - antiMalwareSettingSmartProtectionGlobalServerEnabled - firewallSettingEngineOptionLogOnePacketWithinPeriodEnabled - firewallSettingEngineOptionGenerateConnectionEventsIcmpEnabled - platformSettingHeartbeatInactiveVmOfflineAlertEnabled - webReputationSettingSmartProtectionWebReputationGlobalServerProxyId - antiMalwareSettingNsxSecurityTaggingEnabled - firewallSettingAntiEvasionCheckFragmentedPackets - firewallSettingEngineOptionConnectionsNumIcmpMax - firewallSettingAntiEvasionCheckTcpSplitHandshake - antiMalwareSettingCombinedModeProtectionSource - firewallSettingEngineOptionEventNodesMax - webReputationSettingMonitorPortListId - applicationControlSettingSyslogConfigId - firewallSettingAntiEvasionCheckOutNoConnection - firewallSettingEngineOptionBlockIpv6Agent9AndLaterEnabled - integrityMonitoringSettingVirtualApplianceOptimizationScanCacheEntriesMax - firewallSettingReconnaissanceNotifyTcpNullScanEnabled - firewallSettingEngineOptionIgnoreStatusCode1 - firewallSettingEngineOptionIgnoreStatusCode0 - firewallSettingEngineOptionIgnoreStatusCode2 - firewallSettingEngineOptionSslSessionSize - antiMalwareSettingScanCacheRealTimeConfigId - platformSettingRecommendationOngoingScansInterval - platformSettingSmartProtectionGlobalServerUseProxyEnabled - firewallSettingInterfaceLimitOneActiveEnabled - firewallSettingAntiEvasionCheckTcpChecksum - firewallSettingEngineOptionDropIpv6ExtType0Enabled - antiMalwareSettingScanFileSizeMaxMbytes - firewallSettingEngineOptionGenerateConnectionEventsTcpEnabled - antiMalwareSettingFileHashSizeMaxMbytes - firewallSettingEventLogFileCachedEntriesLifeTime - platformSettingSmartProtectionGlobalServerProxyId - logInspectionSettingAutoApplyRecommendationsEnabled - antiMalwareSettingConnectedThreatDefenseSuspiciousFileDdanSubmissionEnabled - webReputationSettingBlockingPageLink - firewallSettingSyslogConfigId - platformSettingAgentCommunicationsDirection - integrityMonitoringSettingScanCacheConfigId - antiMalwareSettingDocumentExploitProtectionRuleExceptions - firewallSettingAntiEvasionCheckTcpSynWithData - antiMalwareSettingFileHashEnabled - firewallSettingReconnaissanceBlockFingerprintProbeDuration - firewallSettingEngineOptionDropIpv6BogonsAddressesEnabled - firewallSettingEngineOptionBootStartTimeout - firewallSettingEngineOptionConnectionsNumTcpMax - firewallSettingAntiEvasionSecurityPosture - firewallSettingInterfacePatterns - firewallSettingInterfaceIsolationEnabled - antiMalwareSettingVirtualApplianceRealTimeScanCacheEntriesMax - firewallSettingEventsOutOfAllowedPolicyEnabled - firewallSettingAntiEvasionCheckEvasiveRetransmit - firewallSettingEngineOptionIcmpTimeout - integrityMonitoringSettingSyslogConfigId - firewallSettingEngineOptionConnectionCleanupTimeout - antiMalwareSettingSmartProtectionLocalServerAllowOffDomainGlobal - firewallSettingReconnaissanceNotifyTcpSynFinScanEnabled - firewallSettingEngineOptionErrorTimeout - webReputationSettingAllowedUrls - firewallSettingReconnaissanceNotifyNetworkOrPortScanEnabled - firewallSettingEngineOptionFinWait1Timeout - firewallSettingEngineOptionGenerateConnectionEventsUdpEnabled - activityMonitoringSettingSyslogConfigId - firewallSettingAntiEvasionCheckTcpSynRstFlags - antiMalwareSettingSpywareApprovedList - firewallSettingAntiEvasionCheckTcpUrgentFlags - intrusionPreventionSettingNsxSecurityTaggingDetectModeLevel - intrusionPreventionSettingEngineOptionFragmentedIpUnconcernedMacAddressBypassEnabled - firewallSettingEngineOptionLogAllPacketDataEnabled - firewallSettingAntiEvasionCheckTcpSynFinFlags - platformSettingHeartbeatInterval - firewallSettingEngineOptionFragmentSizeMin - antiMalwareSettingSmartProtectionServerConnectionLostWarningEnabled - firewallSettingReconnaissanceBlockNetworkOrPortScanDuration - integrityMonitoringSettingContentHashAlgorithm - antiMalwareSettingSmartScanState - firewallSettingConfigPackageExceedsAlertMaxEnabled - platformSettingEnvironmentVariableOverrides - firewallSettingEngineOptionFragmentOffsetMin - antiMalwareSettingSmartProtectionLocalServerUrls - firewallSettingEngineOptionSynRcvdTimeout - firewallSettingEventLogFileCachedEntriesNum - firewallSettingEngineOptionForceAllowIcmpType3Code4 - firewallSettingReconnaissanceBlockTcpNullScanDuration - platformSettingSmartProtectionGlobalServerEnabled - integrityMonitoringSettingRealtimeEnabled - firewallSettingEngineOptionLastAckTimeout - firewallSettingReconnaissanceExcludeIpListId - platformSettingAgentSelfProtectionEnabled - firewallSettingEngineOptionDropIpv6ReservedAddressesEnabled - firewallSettingAntiEvasionCheckFinNoConnection - firewallSettingEngineOptionDebugPacketNumMax - firewallSettingEngineOptionBypassCiscoWaasConnectionsEnabled - firewallSettingReconnaissanceEnabled - platformSettingHeartbeatLocalTimeShiftAlertThreshold - antiMalwareSettingFileHashMd5Enabled - firewallSettingReconnaissanceDetectNetworkOrPortScanEnabled - firewallSettingEngineOptionSilentTcpConnectionDropEnabled - firewallSettingEngineOptionBlockSameSrcDstIpEnabled - firewallSettingEngineOptionForceAllowDhcpDns - firewallSettingReconnaissanceIncludeIpListId - firewallSettingEngineOptionsEnabled - firewallSettingReconnaissanceBlockTcpSynFinScanDuration - webReputationSettingSecurityBlockUntestedPagesEnabled - webReputationSettingAllowedUrlDomains - firewallSettingEventLogFileIgnoreSourceIpListId - firewallSettingEngineOptionDropIpv6FragmentsLowerThanMinMtuEnabled - platformSettingAutoAssignNewIntrusionPreventionRulesEnabled - firewallSettingAntiEvasionCheckRstNoConnection - webReputationSettingBlockedUrls - platformSettingCombinedModeNetworkGroupProtectionSource - webReputationSettingAlertingEnabled - antiMalwareSettingNsxSecurityTaggingOnRemediationFailureEnabled - integrityMonitoringSettingCpuUsageLevel - platformSettingAutoUpdateAntiMalwareEngineEnabled - intrusionPreventionSettingCombinedModeProtectionSource required: true - auto: PREDEFINED defaultValue: 'false' description: 'Whether to display only overrides defined for the current computer. Possible values: "true" and "false".' name: overrides predefined: - 'true' - 'false' - description: The value of a setting. name: value required: true description: Modify a setting of a certain computer. name: trendmicro-modify-computer-setting outputs: - contextPath: TrendMicro.ComputersSettings.computerId description: The ID of the computer that owns the setting. type: integer - contextPath: TrendMicro.ComputersSettings.name description: The name of the setting. type: string - contextPath: TrendMicro.ComputersSettings.value description: The value of a setting. type: string - arguments: - description: The ID number of the computer. The ID can be obtained from the trendmicro-list-computers and trendmicro-search-computers commands. name: computer_id required: true - auto: PREDEFINED description: The name of the setting. name: name predefined: - logInspectionSettingSeverityClippingAgentEventSendSyslogLevelMin - firewallSettingEngineOptionConnectionsCleanupMax - firewallSettingEngineOptionVerifyTcpChecksumEnabled - antiMalwareSettingScanCacheOnDemandConfigId - applicationControlSettingSharedRulesetId - webReputationSettingSmartProtectionServerConnectionLostWarningEnabled - applicationControlSettingExecutionEnforcementLevel - webReputationSettingBlockedUrlDomains - firewallSettingEngineOptionSynSentTimeout - platformSettingAgentSelfProtectionPassword - firewallSettingReconnaissanceBlockTcpXmasAttackDuration - intrusionPreventionSettingVirtualAndContainerNetworkScanEnabled - logInspectionSettingSyslogConfigId - firewallSettingEngineOptionDebugModeEnabled - firewallSettingVirtualAndContainerNetworkScanEnabled - antiMalwareSettingFileHashSha256Enabled - firewallSettingReconnaissanceNotifyFingerprintProbeEnabled - firewallSettingEventLogFileRetainNum - firewallSettingAntiEvasionCheckTcpPawsZero - antiMalwareSettingConnectedThreatDefenseUseControlManagerSuspiciousObjectListEnabled - intrusionPreventionSettingEngineOptionFragmentedIpKeepMax - firewallSettingEngineOptionDrop6To4BogonsAddressesEnabled - logInspectionSettingSeverityClippingAgentEventStoreLevelMin - platformSettingScanCacheConcurrencyMax - antiMalwareSettingSyslogConfigId - firewallSettingAntiEvasionTcpPawsWindowPolicy - firewallSettingReconnaissanceDetectTcpXmasAttackEnabled - applicationControlSettingRulesetMode - antiMalwareSettingSmartProtectionGlobalServerUseProxyEnabled - webReputationSettingSmartProtectionLocalServerAllowOffDomainGlobal - integrityMonitoringSettingCombinedModeProtectionSource - firewallSettingEngineOptionCloseWaitTimeout - platformSettingScanOpenPortListId - platformSettingAgentSelfProtectionPasswordEnabled - firewallSettingEngineOptionAckTimeout - firewallSettingEventLogFileCachedEntriesStaleTime - firewallSettingCombinedModeProtectionSource - platformSettingAgentEventsSendInterval - platformSettingInactiveAgentCleanupOverrideEnabled - firewallSettingFailureResponseEngineSystem - platformSettingRelayState - firewallSettingEngineOptionDropEvasiveRetransmitEnabled - activityMonitoringSettingIndicatorEnabled - intrusionPreventionSettingEngineOptionFragmentedIpTimeout - firewallSettingAntiEvasionCheckTcpZeroFlags - webReputationSettingSmartProtectionGlobalServerUseProxyEnabled - intrusionPreventionSettingNsxSecurityTaggingPreventModeLevel - firewallSettingReconnaissanceNotifyTcpXmasAttackEnabled - firewallSettingEngineOptionUdpTimeout - webReputationSettingSmartProtectionLocalServerEnabled - firewallSettingEngineOptionTcpMssLimit - firewallSettingEngineOptionColdStartTimeout - firewallSettingEngineOptionEstablishedTimeout - antiMalwareSettingIdentifiedFilesSpaceMaxMbytes - firewallSettingEngineOptionAllowNullIpEnabled - platformSettingNotificationsSuppressPopupsEnabled - firewallSettingAntiEvasionCheckTcpRstFinFlags - firewallSettingEngineOptionDisconnectTimeout - firewallSettingEngineOptionCloseTimeout - firewallSettingEngineOptionTunnelDepthMaxExceededAction - firewallSettingReconnaissanceDetectTcpNullScanEnabled - platformSettingSmartProtectionAntiMalwareGlobalServerProxyId - firewallSettingEngineOptionFilterIpv4Tunnels - webReputationSettingSmartProtectionLocalServerUrls - firewallSettingEngineOptionLogOnePacketPeriod - firewallSettingEngineOptionFilterIpv6Tunnels - firewallSettingAntiEvasionCheckTcpCongestionFlags - platformSettingHeartbeatMissedAlertThreshold - intrusionPreventionSettingEngineOptionsEnabled - firewallSettingEngineOptionConnectionsNumUdpMax - integrityMonitoringSettingAutoApplyRecommendationsEnabled - firewallSettingEngineOptionTunnelDepthMax - firewallSettingEngineOptionDropUnknownSslProtocolEnabled - antiMalwareSettingNsxSecurityTaggingValue - intrusionPreventionSettingLogDataRuleFirstMatchEnabled - firewallSettingEngineOptionLoggingPolicy - platformSettingTroubleshootingLoggingLevel - antiMalwareSettingVirtualApplianceOnDemandScanCacheEntriesMax - webReputationSettingCombinedModeProtectionSource - firewallSettingEngineOptionClosingTimeout - firewallSettingAntiEvasionCheckPaws - intrusionPreventionSettingAutoApplyRecommendationsEnabled - firewallSettingReconnaissanceDetectFingerprintProbeEnabled - antiMalwareSettingNsxSecurityTaggingRemoveOnCleanScanEnabled - firewallSettingEngineOptionLogPacketLengthMax - firewallSettingEngineOptionDropTeredoAnomaliesEnabled - webReputationSettingSecurityLevel - firewallSettingEngineOptionDropIpv6SiteLocalAddressesEnabled - activityMonitoringSettingActivityEnabled - firewallSettingEngineOptionStrictTerodoPortCheckEnabled - webReputationSettingBlockedUrlKeywords - webReputationSettingSyslogConfigId - firewallSettingFailureResponsePacketSanityCheck - firewallSettingNetworkEngineMode - firewallSettingEventLogFileSizeMax - antiMalwareSettingMalwareScanMultithreadedProcessingEnabled - firewallSettingReconnaissanceDetectTcpSynFinScanEnabled - firewallSettingEngineOptionDropIpZeroPayloadEnabled - firewallSettingEngineOptionBlockIpv6Agent8AndEarlierEnabled - intrusionPreventionSettingEngineOptionFragmentedIpPacketSendIcmpEnabled - antiMalwareSettingPredictiveMachineLearningExceptions - firewallSettingEngineOptionLogEventsPerSecondMax - firewallSettingEngineOptionSslSessionTime - antiMalwareSettingBehaviorMonitoringScanExclusionList - antiMalwareSettingSmartProtectionGlobalServerEnabled - firewallSettingEngineOptionLogOnePacketWithinPeriodEnabled - firewallSettingEngineOptionGenerateConnectionEventsIcmpEnabled - platformSettingHeartbeatInactiveVmOfflineAlertEnabled - webReputationSettingSmartProtectionWebReputationGlobalServerProxyId - antiMalwareSettingNsxSecurityTaggingEnabled - firewallSettingAntiEvasionCheckFragmentedPackets - firewallSettingEngineOptionConnectionsNumIcmpMax - firewallSettingAntiEvasionCheckTcpSplitHandshake - antiMalwareSettingCombinedModeProtectionSource - firewallSettingEngineOptionEventNodesMax - webReputationSettingMonitorPortListId - applicationControlSettingSyslogConfigId - firewallSettingAntiEvasionCheckOutNoConnection - firewallSettingEngineOptionBlockIpv6Agent9AndLaterEnabled - integrityMonitoringSettingVirtualApplianceOptimizationScanCacheEntriesMax - firewallSettingReconnaissanceNotifyTcpNullScanEnabled - firewallSettingEngineOptionIgnoreStatusCode1 - firewallSettingEngineOptionIgnoreStatusCode0 - firewallSettingEngineOptionIgnoreStatusCode2 - firewallSettingEngineOptionSslSessionSize - antiMalwareSettingScanCacheRealTimeConfigId - platformSettingRecommendationOngoingScansInterval - platformSettingSmartProtectionGlobalServerUseProxyEnabled - firewallSettingInterfaceLimitOneActiveEnabled - firewallSettingAntiEvasionCheckTcpChecksum - firewallSettingEngineOptionDropIpv6ExtType0Enabled - antiMalwareSettingScanFileSizeMaxMbytes - firewallSettingEngineOptionGenerateConnectionEventsTcpEnabled - antiMalwareSettingFileHashSizeMaxMbytes - firewallSettingEventLogFileCachedEntriesLifeTime - platformSettingSmartProtectionGlobalServerProxyId - logInspectionSettingAutoApplyRecommendationsEnabled - antiMalwareSettingConnectedThreatDefenseSuspiciousFileDdanSubmissionEnabled - webReputationSettingBlockingPageLink - firewallSettingSyslogConfigId - platformSettingAgentCommunicationsDirection - integrityMonitoringSettingScanCacheConfigId - antiMalwareSettingDocumentExploitProtectionRuleExceptions - firewallSettingAntiEvasionCheckTcpSynWithData - antiMalwareSettingFileHashEnabled - firewallSettingReconnaissanceBlockFingerprintProbeDuration - firewallSettingEngineOptionDropIpv6BogonsAddressesEnabled - firewallSettingEngineOptionBootStartTimeout - firewallSettingEngineOptionConnectionsNumTcpMax - firewallSettingAntiEvasionSecurityPosture - firewallSettingInterfacePatterns - firewallSettingInterfaceIsolationEnabled - antiMalwareSettingVirtualApplianceRealTimeScanCacheEntriesMax - firewallSettingEventsOutOfAllowedPolicyEnabled - firewallSettingAntiEvasionCheckEvasiveRetransmit - firewallSettingEngineOptionIcmpTimeout - integrityMonitoringSettingSyslogConfigId - firewallSettingEngineOptionConnectionCleanupTimeout - antiMalwareSettingSmartProtectionLocalServerAllowOffDomainGlobal - firewallSettingReconnaissanceNotifyTcpSynFinScanEnabled - firewallSettingEngineOptionErrorTimeout - webReputationSettingAllowedUrls - firewallSettingReconnaissanceNotifyNetworkOrPortScanEnabled - firewallSettingEngineOptionFinWait1Timeout - firewallSettingEngineOptionGenerateConnectionEventsUdpEnabled - activityMonitoringSettingSyslogConfigId - firewallSettingAntiEvasionCheckTcpSynRstFlags - antiMalwareSettingSpywareApprovedList - firewallSettingAntiEvasionCheckTcpUrgentFlags - intrusionPreventionSettingNsxSecurityTaggingDetectModeLevel - intrusionPreventionSettingEngineOptionFragmentedIpUnconcernedMacAddressBypassEnabled - firewallSettingEngineOptionLogAllPacketDataEnabled - firewallSettingAntiEvasionCheckTcpSynFinFlags - platformSettingHeartbeatInterval - firewallSettingEngineOptionFragmentSizeMin - antiMalwareSettingSmartProtectionServerConnectionLostWarningEnabled - firewallSettingReconnaissanceBlockNetworkOrPortScanDuration - integrityMonitoringSettingContentHashAlgorithm - antiMalwareSettingSmartScanState - firewallSettingConfigPackageExceedsAlertMaxEnabled - platformSettingEnvironmentVariableOverrides - firewallSettingEngineOptionFragmentOffsetMin - antiMalwareSettingSmartProtectionLocalServerUrls - firewallSettingEngineOptionSynRcvdTimeout - firewallSettingEventLogFileCachedEntriesNum - firewallSettingEngineOptionForceAllowIcmpType3Code4 - firewallSettingReconnaissanceBlockTcpNullScanDuration - platformSettingSmartProtectionGlobalServerEnabled - integrityMonitoringSettingRealtimeEnabled - firewallSettingEngineOptionLastAckTimeout - firewallSettingReconnaissanceExcludeIpListId - platformSettingAgentSelfProtectionEnabled - firewallSettingEngineOptionDropIpv6ReservedAddressesEnabled - firewallSettingAntiEvasionCheckFinNoConnection - firewallSettingEngineOptionDebugPacketNumMax - firewallSettingEngineOptionBypassCiscoWaasConnectionsEnabled - firewallSettingReconnaissanceEnabled - platformSettingHeartbeatLocalTimeShiftAlertThreshold - antiMalwareSettingFileHashMd5Enabled - firewallSettingReconnaissanceDetectNetworkOrPortScanEnabled - firewallSettingEngineOptionSilentTcpConnectionDropEnabled - firewallSettingEngineOptionBlockSameSrcDstIpEnabled - firewallSettingEngineOptionForceAllowDhcpDns - firewallSettingReconnaissanceIncludeIpListId - firewallSettingEngineOptionsEnabled - firewallSettingReconnaissanceBlockTcpSynFinScanDuration - webReputationSettingSecurityBlockUntestedPagesEnabled - webReputationSettingAllowedUrlDomains - firewallSettingEventLogFileIgnoreSourceIpListId - firewallSettingEngineOptionDropIpv6FragmentsLowerThanMinMtuEnabled - platformSettingAutoAssignNewIntrusionPreventionRulesEnabled - firewallSettingAntiEvasionCheckRstNoConnection - webReputationSettingBlockedUrls - platformSettingCombinedModeNetworkGroupProtectionSource - webReputationSettingAlertingEnabled - antiMalwareSettingNsxSecurityTaggingOnRemediationFailureEnabled - integrityMonitoringSettingCpuUsageLevel - platformSettingAutoUpdateAntiMalwareEngineEnabled - intrusionPreventionSettingCombinedModeProtectionSource required: true - auto: PREDEFINED defaultValue: 'false' description: 'Whether to display only overrides defined for the current computer. Possible values: "true" and "false".' name: overrides predefined: - 'true' - 'false' description: Reset a setting of certain computer to its default value. name: trendmicro-reset-computer-setting outputs: - contextPath: TrendMicro.ComputersSettings.computerId description: The ID of the computer that owns the setting. type: integer - contextPath: TrendMicro.ComputersSettings.name description: The name of the setting. type: string - contextPath: TrendMicro.ComputersSettings.value description: The value of the setting. type: string - description: Get information about all existing computer groups. name: trendmicro-list-computer-groups outputs: - contextPath: TrendMicro.ComputerGroups.name description: Name of the computer group. type: string - contextPath: TrendMicro.ComputerGroups.description description: Description of the computer group. type: string - contextPath: TrendMicro.ComputerGroups.parentGroupID description: ID of the computer group's parent group. type: integer - arguments: - description: Name of the computer group. name: name required: true - description: Description of the computer group. name: description - description: ID of the computer group's parent group. name: parent_group_id description: Create a new computer group. name: trendmicro-create-computer-group outputs: - contextPath: TrendMicro.ComputerGroups.name description: Name of the computer group. type: string - contextPath: TrendMicro.ComputerGroups.description description: Description of the computer group. type: string - contextPath: TrendMicro.ComputerGroups.parentGroupID description: ID of the computer group's parent group. type: integer - arguments: - description: The maximum number of objects to return. name: max_items - description: The name of the field. The possible values are ID, type, name, description, parentGroupID, directoryID, externalID, virtualID, virtualType, virtualName, cloudType, cloudResourceType, and cloudID. name: field_name required: true auto: PREDEFINED predefined: - ID - type - name - description - parentGroupID - directoryID - externalID - virtualID - virtualType - virtualName - cloudType - cloudResourceType - cloudID - auto: PREDEFINED description: 'The type of the field. Possible values: "boolean", "numeric", "choice", "id", and "string".' required: true name: field_type predefined: - boolean - numeric - choice - id - string - auto: PREDEFINED description: 'The comparison operation to use. Possible values: "less-than", "less-than-or-equal", "equal", "greater-than-or-equal", "greater-than", and "not-equal".' name: operation predefined: - less-than - less-than-or-equal - equal - greater-than-or-equal - greater-than - not-equal required: true - description: The value to compare against the field name. name: value required: true - description: If true, forces the response objects to be sorted by ID, overriding the default sort order. name: sort_by_object_id description: Search for specific computer groups by some field name with a certain type. Every field has a specific type. It can be a simple type like a string, a numeric, or a boolean. However, it can also be a choice, which is a string with specific options (enumeration). To search, you must provide the field_name and field_type, the operation to perform, and the value to search. name: trendmicro-search-computer-groups outputs: - contextPath: TrendMicro.ComputerGroups.name description: Name of the computer group. type: string - contextPath: TrendMicro.ComputerGroups.description description: Description of the computer group. type: string - contextPath: TrendMicro.ComputerGroups.parentGroupID description: ID of the computer group's parent group. type: integer - arguments: - description: The ID number of the computer group to get. The ID can be obtained from the trendmicro-list-computer-groups and trendmicro-search-computer-groups commands. name: computer_group_id required: true description: Get information of a certain computer group. name: trendmicro-get-computer-group outputs: - contextPath: TrendMicro.ComputerGroups.name description: Name of the computer group. type: string - contextPath: TrendMicro.ComputerGroups.description description: Description of the computer group. type: string - contextPath: TrendMicro.ComputerGroups.parentGroupID description: ID of the computer group's parent group. type: integer - arguments: - description: The ID number of the computer group to modify. The ID can be obtained from the trendmicro-list-computer-groups and trendmicro-search-computer-groups commands. name: computer_group_id required: true - description: Name of the computer group. name: name - description: Description of the computer group. name: description - description: ID of the computer group's parent group. name: parent_group_id description: Modify the properties of a certain computer group. name: trendmicro-modify-computer-group outputs: - contextPath: TrendMicro.ComputerGroups.name description: Name of the computer group. type: string - contextPath: TrendMicro.ComputerGroups.description description: Description of the computer group. type: string - contextPath: TrendMicro.ComputerGroups.parentGroupID description: ID of the computer group's parent group. type: integer - arguments: - description: The ID number of the computer group to delete. The ID can be obtained from the trendmicro-list-computer-groups and trendmicro-search-computer-groups commands. name: computer_group_id required: true description: Delete a certain computer group. name: trendmicro-delete-computer-group - arguments: - description: The maximum number of objects to return. name: max_items - required: true description: The field name to search. name: field_name auto: PREDEFINED predefined: - ID - name - description - action - priority - direction - frameType - frameNumber - frameNot - protocol - protocolNumber - protocolNot - sourceIPType - sourceIPValue - sourceIPMask - sourceIPRangeFrom - sourceIPRangeTo - sourceIPMultiple - sourceIPListID - sourceIPNot - sourceMACType - sourceMACValue - sourceMACMultiple - sourceMACListID - sourceMACNot - sourcePortType - sourcePortMultiple - sourcePortListID - sourcePortNot - destinationIPType - destinationIPValue - destinationIPMask - destinationIPRangeFrom - destinationIPRangeTo - destinationIPMultiple - destinationIPListID - destinationIPNot - destinationMACType - destinationMACValue - destinationMACMultiple - destinationMACListID - destinationMACNot - destinationPortType - destinationPortMultiple - destinationPortListID - destinationPortNot - anyFlags - logDisabled - includePacketData - alertEnabled - scheduleID - contextID - auto: PREDEFINED defaultValue: string description: 'The type of the field. Possible values: "boolean", "numeric", "choice", "id", and "string".' name: field_type predefined: - boolean - numeric - choice - id - string - auto: PREDEFINED required: true description: 'The comparison operation to use. Possible values: "less-than", "less-than-or-equal", "equal", "greater-than-or-equal", "greater-than", and "not-equal".' name: operation predefined: - less-than - less-than-or-equal - equal - greater-than-or-equal - greater-than - not-equal - required: true description: The value to compare against the field. name: value - description: If true, forces the response objects to be sorted by ID, overriding the default sort order. name: sort_by_object_id description: Search for specific firewall rules by some field name with a certain type. Every field has a specific type. It can be a simple type like a string, a numeric, or a boolean. However, it can also be a choice, which is a string with specific options (enumeration). To search, you must provide the field_name and field_type, the operation to perform, and the value to search. name: trendmicro-search-firewall-rules outputs: - contextPath: TrendMicro.FirewallRules.name description: Name of the firewall rule. type: string - contextPath: TrendMicro.FirewallRules.description description: Description of the firewall rule. type: string - contextPath: TrendMicro.FirewallRules.action description: Action of the packet filter. type: string - contextPath: TrendMicro.FirewallRules.priority description: Priority of the packet filter. type: string - contextPath: TrendMicro.FirewallRules.direction description: Packet direction. type: string - contextPath: TrendMicro.FirewallRules.frameType description: Supported frame types. type: string - contextPath: TrendMicro.FirewallRules.frameNumber description: Ethernet frame number. type: integer - contextPath: TrendMicro.FirewallRules.frameNot description: Whether the frame setting should be inverted. type: boolean - contextPath: TrendMicro.FirewallRules.protocol description: Protocol. type: string - contextPath: TrendMicro.FirewallRules.protocolNumber description: Two-byte protocol number. type: integer - contextPath: TrendMicro.FirewallRules.protocolNot description: Whether the protocol setting should be inverted. type: boolean - contextPath: TrendMicro.FirewallRules.sourceIPType description: Source IP type. type: string - contextPath: TrendMicro.FirewallRules.sourceIPValue description: Source IP. type: string - contextPath: TrendMicro.FirewallRules.sourceIPMask description: Source IP mask. type: string - contextPath: TrendMicro.FirewallRules.sourceIPRangeFrom description: The first value for a range of source IP addresses. type: string - contextPath: TrendMicro.FirewallRules.sourceIPRangeTo description: The last value for a range of source IP addresses. type: string - contextPath: TrendMicro.FirewallRules.sourceIPMultiple description: List of source IP addresses. type: array - contextPath: TrendMicro.FirewallRules.sourceIPListID description: ID of source IP list. type: integer - contextPath: TrendMicro.FirewallRules.sourceIPNot description: Whether the source IP setting should be inverted. type: boolean - contextPath: TrendMicro.FirewallRules.sourceMACType description: Source MAC type. type: string - contextPath: TrendMicro.FirewallRules.sourceMACValue description: Source MAC address. type: string - contextPath: TrendMicro.FirewallRules.sourceMACMultiple description: List of MAC addresses. type: array - contextPath: TrendMicro.FirewallRules.sourceMACListID description: ID of MAC address list. type: integer - contextPath: TrendMicro.FirewallRules.sourceMACNot description: Whether the source MAC setting should be inverted. type: boolean - contextPath: TrendMicro.FirewallRules.sourcePortType description: The type of source port. type: string - contextPath: TrendMicro.FirewallRules.sourcePortMultiple description: Comma-delimited list of the source ports. type: array - contextPath: TrendMicro.FirewallRules.sourcePortListID description: ID of the source port list. type: integer - contextPath: TrendMicro.FirewallRules.sourcePortNot description: Whether the source port setting should be inverted. type: boolean - contextPath: TrendMicro.FirewallRules.destinationIPType description: Destination IP type. type: string - contextPath: TrendMicro.FirewallRules.destinationIPValue description: Destination IP. type: string - contextPath: TrendMicro.FirewallRules.destinationIPMask description: Destination IP mask. type: string - contextPath: TrendMicro.FirewallRules.destinationIPRangeFrom description: The first value for a range of destination IP addresses. type: string - contextPath: TrendMicro.FirewallRules.destinationIPRangeTo description: The last value for a range of destination IP addresses. type: string - contextPath: TrendMicro.FirewallRules.destinationIPMultiple description: Comma-delimited list of the destination IP addresses. type: array - contextPath: TrendMicro.FirewallRules.destinationIPListID description: ID of the destination IP list. type: integer - contextPath: TrendMicro.FirewallRules.destinationIPNot description: Whether the destination IP setting should be inverted. type: boolean - contextPath: TrendMicro.FirewallRules.destinationMACType description: Destination MAC type. type: string - contextPath: TrendMicro.FirewallRules.destinationMACValue description: Destination MAC address. type: string - contextPath: TrendMicro.FirewallRules.destinationMACMultiple description: Comma-delimited list of the MAC addresses. type: array - contextPath: TrendMicro.FirewallRules.destinationMACListID description: ID of the MAC address list. type: integer - contextPath: TrendMicro.FirewallRules.destinationMACNot description: Whether the destination MAC setting should be inverted. type: boolean - contextPath: TrendMicro.FirewallRules.destinationPortType description: The type of destination port. type: string - contextPath: TrendMicro.FirewallRules.destinationPortMultiple description: Comma-delimited list of the destination ports. type: array - contextPath: TrendMicro.FirewallRules.destinationPortListID description: ID of the destination port list. type: integer - contextPath: TrendMicro.FirewallRules.destinationPortNot description: Whether the destination port setting should be inverted. type: boolean - contextPath: TrendMicro.FirewallRules.anyFlags description: True if any flags are used. type: boolean - contextPath: TrendMicro.FirewallRules.logDisabled description: Whether logging for this filter is disabled. type: boolean - contextPath: TrendMicro.FirewallRules.includePacketData description: Whether this filter should capture data for every log. type: boolean - contextPath: TrendMicro.FirewallRules.alertEnabled description: Whether this filter should be alerted on. type: boolean - contextPath: TrendMicro.FirewallRules.scheduleID description: ID of the schedule to control when this filter is "on". type: integer - contextPath: TrendMicro.FirewallRules.contextID description: RuleContext that is applied to this filter. type: integer - contextPath: TrendMicro.FirewallRules.tcpflags description: TCP flags. type: array - contextPath: TrendMicro.FirewallRules.TCPNot description: Whether the TCP settings are inverted. type: boolean - contextPath: TrendMicro.FirewallRules.ICMPType description: ICMP type. type: integer - contextPath: TrendMicro.FirewallRules.ICMPCode description: ICMP code. type: integer - contextPath: TrendMicro.FirewallRules.ICMPNot description: Whether the ICMP settings are inverted. type: boolean - description: List all existing firewall rules. name: trendmicro-list-firewall-rules outputs: - contextPath: TrendMicro.FirewallRules.name description: Name of the firewall rule. type: string - contextPath: TrendMicro.FirewallRules.description description: Description of the firewall rule. type: string - contextPath: TrendMicro.FirewallRules.action description: Action of the packet filter. type: string - contextPath: TrendMicro.FirewallRules.priority description: Priority of the packet filter. type: string - contextPath: TrendMicro.FirewallRules.direction description: Packet direction. type: string - contextPath: TrendMicro.FirewallRules.frameType description: Supported frame types. type: string - contextPath: TrendMicro.FirewallRules.frameNumber description: Ethernet frame number. type: integer - contextPath: TrendMicro.FirewallRules.frameNot description: Whether the frame setting should be inverted. type: boolean - contextPath: TrendMicro.FirewallRules.protocol description: The protocol. type: string - contextPath: TrendMicro.FirewallRules.protocolNumber description: Two-byte protocol number. type: integer - contextPath: TrendMicro.FirewallRules.protocolNot description: Whether the protocol setting should be inverted. type: boolean - contextPath: TrendMicro.FirewallRules.sourceIPType description: Source IP type. type: string - contextPath: TrendMicro.FirewallRules.sourceIPValue description: Source IP. type: string - contextPath: TrendMicro.FirewallRules.sourceIPMask description: Source IP mask. type: string - contextPath: TrendMicro.FirewallRules.sourceIPRangeFrom description: The first value for a range of source IP addresses. type: string - contextPath: TrendMicro.FirewallRules.sourceIPRangeTo description: The last value for a range of source IP addresses. type: string - contextPath: TrendMicro.FirewallRules.sourceIPMultiple description: List of source IP addresses. type: array - contextPath: TrendMicro.FirewallRules.sourceIPListID description: ID of the source IP list. type: integer - contextPath: TrendMicro.FirewallRules.sourceIPNot description: Whether the source IP setting should be inverted. type: boolean - contextPath: TrendMicro.FirewallRules.sourceMACType description: Source MAC type. type: string - contextPath: TrendMicro.FirewallRules.sourceMACValue description: Source MAC address. type: string - contextPath: TrendMicro.FirewallRules.sourceMACMultiple description: List of MAC addresses. type: array - contextPath: TrendMicro.FirewallRules.sourceMACListID description: ID of the MAC address list. type: integer - contextPath: TrendMicro.FirewallRules.sourceMACNot description: Whether the source MAC setting should be inverted. type: boolean - contextPath: TrendMicro.FirewallRules.sourcePortType description: The type of source port. type: string - contextPath: TrendMicro.FirewallRules.sourcePortMultiple description: Comma-delimited list of the source ports. type: array - contextPath: TrendMicro.FirewallRules.sourcePortListID description: ID of the source port list. type: integer - contextPath: TrendMicro.FirewallRules.sourcePortNot description: Whether the source port setting should be inverted. type: boolean - contextPath: TrendMicro.FirewallRules.destinationIPType description: Destination IP type. type: string - contextPath: TrendMicro.FirewallRules.destinationIPValue description: Destination IP. type: string - contextPath: TrendMicro.FirewallRules.destinationIPMask description: Destination IP mask. type: string - contextPath: TrendMicro.FirewallRules.destinationIPRangeFrom description: The first value for a range of destination IP addresses. type: string - contextPath: TrendMicro.FirewallRules.destinationIPRangeTo description: The last value for a range of destination IP addresses. type: string - contextPath: TrendMicro.FirewallRules.destinationIPMultiple description: Comma-delimited list of the destination IP addresses. type: array - contextPath: TrendMicro.FirewallRules.destinationIPListID description: ID of the destination IP list. type: integer - contextPath: TrendMicro.FirewallRules.destinationIPNot description: Whether the destination IP setting should be inverted. type: boolean - contextPath: TrendMicro.FirewallRules.destinationMACType description: Destination MAC type. type: string - contextPath: TrendMicro.FirewallRules.destinationMACValue description: Destination MAC address. type: string - contextPath: TrendMicro.FirewallRules.destinationMACMultiple description: Comma-delimited list of the MAC addresses. type: array - contextPath: TrendMicro.FirewallRules.destinationMACListID description: ID of the MAC address list. type: integer - contextPath: TrendMicro.FirewallRules.destinationMACNot description: Whether the destination MAC setting should be inverted. type: boolean - contextPath: TrendMicro.FirewallRules.destinationPortType description: The type of destination port. type: string - contextPath: TrendMicro.FirewallRules.destinationPortMultiple description: Comma-delimited list of the destination ports. type: array - contextPath: TrendMicro.FirewallRules.destinationPortListID description: ID of the destination port list. type: integer - contextPath: TrendMicro.FirewallRules.destinationPortNot description: Whether the destination port setting should be inverted. type: boolean - contextPath: TrendMicro.FirewallRules.anyFlags description: True if any flags are used. type: boolean - contextPath: TrendMicro.FirewallRules.logDisabled description: Whether logging for this filter is disabled. type: boolean - contextPath: TrendMicro.FirewallRules.includePacketData description: Whether this filter should capture data for every log. type: boolean - contextPath: TrendMicro.FirewallRules.alertEnabled description: Whether this filter should be alerted on. type: boolean - contextPath: TrendMicro.FirewallRules.scheduleID description: ID of the schedule to control when this filter is "on". type: integer - contextPath: TrendMicro.FirewallRules.contextID description: RuleContext that is applied to this filter. type: integer - contextPath: TrendMicro.FirewallRules.tcpflags description: TCP flags. type: array - contextPath: TrendMicro.FirewallRules.TCPNot description: Whether the TCP settings are inverted. type: boolean - contextPath: TrendMicro.FirewallRules.ICMPType description: ICMP type. type: integer - contextPath: TrendMicro.FirewallRules.ICMPCode description: ICMP code. type: integer - contextPath: TrendMicro.FirewallRules.ICMPNot description: Whether the ICMP settings are inverted. type: boolean - arguments: - description: Name of the firewall rule. name: name required: true - description: Description of the firewall rule. name: description - description: 'Action of the packet filter. Possible values: "log-only", "allow", "deny", "force-allow", "bypass".' name: action required: true auto: PREDEFINED predefined: - log-only - allow - deny - force-allow - bypass - description: 'Priority of the packet filter. Possible values: "0", "1", "2", "3", "4".' name: priority auto: PREDEFINED predefined: - "0" - "1" - "2" - "3" - "4" - description: 'Packet direction. Possible values: "incoming" and "outgoing".' name: direction required: true auto: PREDEFINED predefined: - incoming - outgoing - description: 'Supported frame types. Possible values: "any", "ip", "arp", "revarp", "ipv4", "ipv6", and "other".' name: frame_type auto: PREDEFINED predefined: - any - ip - arp - revarp - ipv4 - ipv6 - other - description: Ethernet frame number. name: frame_number - description: Whether the frame setting should be inverted. name: frame_not - description: 'Protocol. Possible values: "any", "icmp", "igmp", "ggp", "udp", pu"p, "idp", "nd", "raw", "tcp-dudp", "icmpv6", and "other".' name: protocol auto: PREDEFINED predefined: - any - icmp - igmp - ggp - tcp - udp - pup - idp - nd - raw - tcp-udp - icmpv6 - other - description: Two-byte protocol number. name: protocol_number - description: Whether the protocol setting should be inverted. name: protocol_not - description: 'Source IP type. Possible values: "any", "single", "multiple", "masked-ip", "range", and "ip-list".' name: source_ip_type auto: PREDEFINED predefined: - any - single - multiple - masked-ip - range - ip-list - description: Source IP. name: source_ip_value - description: Source IP mask. name: source_ip_mask - description: The first value for a range of source IP addresses. name: source_ip_range_from - description: The last value for a range of source IP addresses. name: source_ip_range_to - description: List of source IP addresses. isArray: true name: source_ip_multiple - description: ID of the source IP list. name: source_ip_list_id - description: Whether the source IP setting should be inverted. name: source_ip_not - description: 'Source MAC type. Possible values: "any", "single", "multiple", and "mac-list".' name: source_mac_type auto: PREDEFINED predefined: - any - single - multiple - mac-list - description: Source MAC address. name: source_mac_value - description: List of MAC addresses. isArray: true name: source_mac_multiple - description: ID of the MAC address list. name: source_mac_list_id - description: Whether the source MAC setting should be inverted. name: source_mac_not - description: 'The type of source port. Possible values: "any", "multiple", and "port-list".' name: source_port_type auto: PREDEFINED predefined: - any - multiple - port-list - description: Comma-delimited list of the source ports. isArray: true name: source_port_multiple - description: ID of the source port list. name: source_port_list_id - description: Whether the source port setting should be inverted. name: source_port_not - description: 'Destination IP type. Possible values: "any", "single", "multiple", "range", "masked-ip", and "ip-list".' name: destination_ip_type auto: PREDEFINED predefined: - any - single - multiple - range - masked-ip - ip-list - description: Destination IP. name: destination_ip_value - description: Destination IP mask. name: destination_ip_mask - description: The first value for a range of destination IP addresses. name: destination_ip_range_from - description: The last value for a range of destination IP addresses. name: destination_ip_range_to - description: Comma-delimited list of the destination IP addresses. isArray: true name: destination_ip_multiple - description: ID of the destination IP list. name: destination_ip_list_id - description: Whether the destination IP setting should be inverted. name: destination_ip_not - description: 'Destination MAC type. Possible values: "any", "single", "multiple", and "mac-list".' name: destination_mac_type auto: PREDEFINED predefined: - any - single - multiple - mac-list - description: Destination MAC address. name: destination_mac_value - description: Comma-delimited list of the MAC addresses. isArray: true name: destination_mac_multiple - description: ID of the MAC address list. name: destination_mac_list_id - description: Whether the destination MAC setting should be inverted. name: destination_mac_not - description: 'The type of destination port. Possible values: "any", "multiple", and "port-list".' name: destination_port_type auto: PREDEFINED predefined: - any - multiple - port-list - description: Comma-delimited list of the destination ports. isArray: true name: destination_port_multiple - description: ID of the destination port list. name: destination_port_list_id - description: Whether the destination port setting should be inverted. name: destination_port_not - description: True if any flags are used. name: any_flags - description: Whether logging for this filter is disabled. name: log_disabled - description: Whether this filter should capture data for every log. name: include_packet_data - description: Whether this filter should be alerted on. name: alert_enabled - description: ID of the schedule to control when this filter is "on". name: schedule_id - description: RuleContext that is applied to this filter. name: context_id - isArray: true name: tcpflags description: 'The TCP flags the rule should filter by. Possible values: "syn", "ack", "psh", "urg", "fin", and "rst".' auto: PREDEFINED predefined: - syn - ack - psh - urg - fin - rst - name: tcp_not description: Whether the TCP settings should be inverted. - name: icmp_type description: The ICMP type the rule should filter by. - name: icmp_code description: The ICMP code the rule should filter by. - name: icmp_not description: Whether the ICMP settings should be inverted. description: Create a new firewall rule. name: trendmicro-create-firewall-rule outputs: - contextPath: TrendMicro.FirewallRules.name description: Name of the firewall rule. type: string - contextPath: TrendMicro.FirewallRules.description description: Description of the firewall rule. type: string - contextPath: TrendMicro.FirewallRules.action description: Action of the packet filter. type: string - contextPath: TrendMicro.FirewallRules.priority description: Priority of the packet filter. type: string - contextPath: TrendMicro.FirewallRules.direction description: Packet direction. type: string - contextPath: TrendMicro.FirewallRules.frameType description: Supported frame types. type: string - contextPath: TrendMicro.FirewallRules.frameNumber description: Ethernet frame number. type: integer - contextPath: TrendMicro.FirewallRules.frameNot description: Whether the frame setting should be inverted. type: boolean - contextPath: TrendMicro.FirewallRules.protocol description: Protocol. type: string - contextPath: TrendMicro.FirewallRules.protocolNumber description: Two-byte protocol number. type: integer - contextPath: TrendMicro.FirewallRules.protocolNot description: Whether the protocol setting should be inverted. type: boolean - contextPath: TrendMicro.FirewallRules.sourceIPType description: Source IP type. type: string - contextPath: TrendMicro.FirewallRules.sourceIPValue description: Source IP. type: string - contextPath: TrendMicro.FirewallRules.sourceIPMask description: Source IP mask. type: string - contextPath: TrendMicro.FirewallRules.sourceIPRangeFrom description: The first value for a range of source IP addresses. type: string - contextPath: TrendMicro.FirewallRules.sourceIPRangeTo description: The last value for a range of source IP addresses. type: string - contextPath: TrendMicro.FirewallRules.sourceIPMultiple description: List of source IP addresses. type: array - contextPath: TrendMicro.FirewallRules.sourceIPListID description: ID of the source IP list. type: integer - contextPath: TrendMicro.FirewallRules.sourceIPNot description: Whether the source IP setting should be inverted. type: boolean - contextPath: TrendMicro.FirewallRules.sourceMACType description: Source MAC type. type: string - contextPath: TrendMicro.FirewallRules.sourceMACValue description: Source MAC address. type: string - contextPath: TrendMicro.FirewallRules.sourceMACMultiple description: List of MAC addresses. type: array - contextPath: TrendMicro.FirewallRules.sourceMACListID description: ID of the MAC address list. type: integer - contextPath: TrendMicro.FirewallRules.sourceMACNot description: Whether the source MAC setting should be inverted. type: boolean - contextPath: TrendMicro.FirewallRules.sourcePortType description: The type of source port. type: string - contextPath: TrendMicro.FirewallRules.sourcePortMultiple description: Comma-delimited list of the source ports. type: array - contextPath: TrendMicro.FirewallRules.sourcePortListID description: ID of the source port list. type: integer - contextPath: TrendMicro.FirewallRules.sourcePortNot description: Whether the source port setting should be inverted. type: boolean - contextPath: TrendMicro.FirewallRules.destinationIPType description: Destination IP type. type: string - contextPath: TrendMicro.FirewallRules.destinationIPValue description: Destination IP. type: string - contextPath: TrendMicro.FirewallRules.destinationIPMask description: Destination IP mask. type: string - contextPath: TrendMicro.FirewallRules.destinationIPRangeFrom description: The first value for a range of destination IP addresses. type: string - contextPath: TrendMicro.FirewallRules.destinationIPRangeTo description: The last value for a range of destination IP addresses. type: string - contextPath: TrendMicro.FirewallRules.destinationIPMultiple description: Comma-delimited list of the destination IP addresses. type: array - contextPath: TrendMicro.FirewallRules.destinationIPListID description: ID of the destination IP list. type: integer - contextPath: TrendMicro.FirewallRules.destinationIPNot description: Whether the destination IP setting should be inverted. type: boolean - contextPath: TrendMicro.FirewallRules.destinationMACType description: Destination MAC type. type: string - contextPath: TrendMicro.FirewallRules.destinationMACValue description: Destination MAC address. type: string - contextPath: TrendMicro.FirewallRules.destinationMACMultiple description: Comma-delimited list of the MAC addresses. type: array - contextPath: TrendMicro.FirewallRules.destinationMACListID description: ID of MAC address list. type: integer - contextPath: TrendMicro.FirewallRules.destinationMACNot description: Whether the destination MAC setting should be inverted. type: boolean - contextPath: TrendMicro.FirewallRules.destinationPortType description: The type of destination port. type: string - contextPath: TrendMicro.FirewallRules.destinationPortMultiple description: Comma-delimited list of the destination ports. type: array - contextPath: TrendMicro.FirewallRules.destinationPortListID description: ID of the destination port list. type: integer - contextPath: TrendMicro.FirewallRules.destinationPortNot description: Whether the destination port setting should be inverted. type: boolean - contextPath: TrendMicro.FirewallRules.anyFlags description: True if any flags are used. type: boolean - contextPath: TrendMicro.FirewallRules.logDisabled description: Whether logging for this filter is disabled. type: boolean - contextPath: TrendMicro.FirewallRules.includePacketData description: Whether this filter should capture data for every log. type: boolean - contextPath: TrendMicro.FirewallRules.alertEnabled description: Whether this filter should be alerted on. type: boolean - contextPath: TrendMicro.FirewallRules.scheduleID description: ID of the schedule to control when this filter is "on". type: integer - contextPath: TrendMicro.FirewallRules.contextID description: RuleContext that is applied to this filter. type: integer - contextPath: TrendMicro.FirewallRules.tcpflags type: array description: TCP flags. - contextPath: TrendMicro.FirewallRules.TCPNot type: boolean description: Whether the TCP settings are inverted. - contextPath: TrendMicro.FirewallRules.ICMPType description: ICMP type. type: integer - contextPath: TrendMicro.FirewallRules.ICMPCode description: ICMP code. type: integer - contextPath: TrendMicro.FirewallRules.ICMPNot description: Whether the ICMP settings are inverted. type: boolean - arguments: - description: The ID number of the firewall rule to get. The ID can be obtained from the trendmicro-list-firewall-rules and trendmicro-search-firewall-rules commands.. name: firewall_rule_id required: true description: Get information about a certain firewall rule. name: trendmicro-get-firewall-rule outputs: - contextPath: TrendMicro.FirewallRules.name description: Name of the firewall rule. type: string - contextPath: TrendMicro.FirewallRules.description description: Description of the firewall. rule. type: string - contextPath: TrendMicro.FirewallRules.action description: Action of the packet filter. type: string - contextPath: TrendMicro.FirewallRules.priority description: Priority of the packet filter. type: string - contextPath: TrendMicro.FirewallRules.direction description: Packet direction. type: string - contextPath: TrendMicro.FirewallRules.frameType description: Supported frame types. type: string - contextPath: TrendMicro.FirewallRules.frameNumber description: Ethernet frame number. type: integer - contextPath: TrendMicro.FirewallRules.frameNot description: Whether the frame setting should be inverted. type: boolean - contextPath: TrendMicro.FirewallRules.protocol description: Protocol. type: string - contextPath: TrendMicro.FirewallRules.protocolNumber description: Two-byte protocol number. type: integer - contextPath: TrendMicro.FirewallRules.protocolNot description: Whether the protocol setting should be inverted. type: boolean - contextPath: TrendMicro.FirewallRules.sourceIPType description: Source IP type. type: string - contextPath: TrendMicro.FirewallRules.sourceIPValue description: Source IP. type: string - contextPath: TrendMicro.FirewallRules.sourceIPMask description: Source IP mask. type: string - contextPath: TrendMicro.FirewallRules.sourceIPRangeFrom description: The first value for a range of source IP addresses. type: string - contextPath: TrendMicro.FirewallRules.sourceIPRangeTo description: The last value for a range of source IP addresses. type: string - contextPath: TrendMicro.FirewallRules.sourceIPMultiple description: List of source IP addresses. type: array - contextPath: TrendMicro.FirewallRules.sourceIPListID description: ID of the source IP list. type: integer - contextPath: TrendMicro.FirewallRules.sourceIPNot description: Whether the source IP setting should be inverted. type: boolean - contextPath: TrendMicro.FirewallRules.sourceMACType description: Source MAC type. type: string - contextPath: TrendMicro.FirewallRules.sourceMACValue description: Source MAC address. type: string - contextPath: TrendMicro.FirewallRules.sourceMACMultiple description: List of MAC addresses. type: array - contextPath: TrendMicro.FirewallRules.sourceMACListID description: ID of the MAC address list. type: integer - contextPath: TrendMicro.FirewallRules.sourceMACNot description: Whether the source MAC setting should be inverted. type: boolean - contextPath: TrendMicro.FirewallRules.sourcePortType description: The type of source port. type: string - contextPath: TrendMicro.FirewallRules.sourcePortMultiple description: Comma-delimited list of the source ports. type: array - contextPath: TrendMicro.FirewallRules.sourcePortListID description: ID of the source port list. type: integer - contextPath: TrendMicro.FirewallRules.sourcePortNot description: Whether the source port setting should be inverted. type: boolean - contextPath: TrendMicro.FirewallRules.destinationIPType description: Destination IP type. type: string - contextPath: TrendMicro.FirewallRules.destinationIPValue description: Destination IP. type: string - contextPath: TrendMicro.FirewallRules.destinationIPMask description: Destination IP mask. type: string - contextPath: TrendMicro.FirewallRules.destinationIPRangeFrom description: The first value for a range of destination IP addresses. type: string - contextPath: TrendMicro.FirewallRules.destinationIPRangeTo description: The last value for a range of destination IP addresses. type: string - contextPath: TrendMicro.FirewallRules.destinationIPMultiple description: Comma-delimited list of the destination IP addresses. type: array - contextPath: TrendMicro.FirewallRules.destinationIPListID description: ID of the destination IP list. type: integer - contextPath: TrendMicro.FirewallRules.destinationIPNot description: Whether the destination IP setting should be inverted. type: boolean - contextPath: TrendMicro.FirewallRules.destinationMACType description: Destination MAC type. type: string - contextPath: TrendMicro.FirewallRules.destinationMACValue description: Destination MAC address. type: string - contextPath: TrendMicro.FirewallRules.destinationMACMultiple description: Comma-delimited list of the addresses. type: array - contextPath: TrendMicro.FirewallRules.destinationMACListID description: ID of the MAC address list. type: integer - contextPath: TrendMicro.FirewallRules.destinationMACNot description: Whether the destination MAC setting should be inverted. type: boolean - contextPath: TrendMicro.FirewallRules.destinationPortType description: The type of destination port. type: string - contextPath: TrendMicro.FirewallRules.destinationPortMultiple description: Comma-delimited list of the destination ports. type: array - contextPath: TrendMicro.FirewallRules.destinationPortListID description: ID of the destination port list. type: integer - contextPath: TrendMicro.FirewallRules.destinationPortNot description: Whether the destination port setting should be inverted. type: boolean - contextPath: TrendMicro.FirewallRules.anyFlags description: True if any flags are used. type: boolean - contextPath: TrendMicro.FirewallRules.logDisabled description: Whether logging for this filter is disabled. type: boolean - contextPath: TrendMicro.FirewallRules.includePacketData description: Whether this filter should capture data for every log. type: boolean - contextPath: TrendMicro.FirewallRules.alertEnabled description: Whether this filter should be alerted on. type: boolean - contextPath: TrendMicro.FirewallRules.scheduleID description: ID of the schedule to control when this filter is "on". type: integer - contextPath: TrendMicro.FirewallRules.contextID description: RuleContext that is applied to this filter. type: integer - contextPath: TrendMicro.FirewallRules.tcpflags description: TCP flags. type: array - contextPath: TrendMicro.FirewallRules.TCPNot description: Whether the TCP settings are inverted. type: boolean - contextPath: TrendMicro.FirewallRules.ICMPType description: ICMP type. type: integer - contextPath: TrendMicro.FirewallRules.ICMPCode description: ICMP code. type: integer - contextPath: TrendMicro.FirewallRules.ICMPNot description: Whether the ICMP settings are inverted. type: boolean - arguments: - description: The ID number of the firewall rule to modify. The ID can be obtained from the trendmicro-list-firewall-rules and trendmicro-search-firewall-rules commands. name: firewall_rule_id required: true - description: Name of the firewall rule. name: name - description: Description of the firewall rule. name: description - description: 'Action of the packet filter. Possible values: "log-only", "allow", "deny", "force-allow", "bypass".' name: action auto: PREDEFINED predefined: - log-only - allow - deny - force-allow - bypass - description: 'Priority of the packet filter. Possible values: "0", "1", "2", "3", "4".' name: priority auto: PREDEFINED predefined: - "0" - "1" - "2" - "3" - "4" - description: 'Packet direction. Possible values: "incoming" and "outgoing".' name: direction auto: PREDEFINED predefined: - incoming - outgoing - description: 'Supported frame types. Possible values: "any", "ip", "arp", "revarp", "ipv4", "ipv6", and "other".' name: frame_type auto: PREDEFINED predefined: - any - ip - arp - revarp - ipv4 - ipv6 - other - description: Ethernet frame number. name: frame_number - description: Whether the frame setting should be inverted. name: frame_not - description: 'Protocol. Possible values: "any", "icmp", "igmp", "ggp", "udp", pu"p, "idp", "nd", "raw", "tcp-dudp", "icmpv6", and "other".' name: protocol auto: PREDEFINED predefined: - any - icmp - igmp - ggp - tcp - pup - udp - idp - nd - raw - tcp-udp - icmpv6 - other - description: Two-byte protocol number. name: protocol_number - description: Whether the protocol setting should be inverted. name: protocol_not - description: 'Source IP type. Possible values: "any", "single", "multiple", "masked-ip", "range", and "ip-list".' name: source_ip_type auto: PREDEFINED predefined: - any - masked-ip - range - ip-list - single - multiple - description: Source IP. name: source_ip_value - description: Source IP mask. name: source_ip_mask - description: The first value for a range of source IP addresses. name: source_ip_range_from - description: The last value for a range of source IP addresses. name: source_ip_range_to - description: List of source IP addresses. isArray: true name: source_ip_multiple - description: ID of the source IP list. name: source_ip_list_id - description: Whether the source IP setting should be inverted. name: source_ip_not - description: 'Source MAC type. Possible values: "any", "single", "multiple", and "mac-list".' name: source_mac_type auto: PREDEFINED predefined: - any - single - mac-list - multiple - description: Source MAC address. name: source_mac_value - description: List of MAC addresses. isArray: true name: source_mac_multiple - description: ID of the MAC address list. name: source_mac_list_id - description: Whether the source MAC setting should be inverted. name: source_mac_not - description: 'The type of source port. Possible values: "any", "multiple", and "port-list".' name: source_port_type auto: PREDEFINED predefined: - any - multiple - port-list - description: Comma-delimited list of the source ports. isArray: true name: source_port_multiple - description: ID of the source port list. name: source_port_list_id - description: Whether the source port setting should be inverted. name: source_port_not - description: 'Destination IP type. Possible values: "any", "single", "multiple", "range", "masked-ip", and "ip-list".' name: destination_ip_type auto: PREDEFINED predefined: - any - single - multiple - range - masked-ip - ip-list - description: Destination IP. name: destination_ip_value - description: Destination IP mask. name: destination_ip_mask - description: The first value for a range of destination IP addresses. name: destination_ip_range_from - description: The last value for a range of destination IP addresses. name: destination_ip_range_to - description: Comma-delimited list of the destination IP addresses. isArray: true name: destination_ip_multiple - description: ID of the destination IP list. name: destination_ip_list_id - description: Whether the destination IP setting should be inverted. name: destination_ip_not - description: 'Destination MAC type. Possible values: "any", "single", "multiple", and "mac-list".' name: destination_mac_type auto: PREDEFINED predefined: - any - single - multiple - mac-list - description: Destination MAC address. name: destination_mac_value - description: Comma-delimited list of the addresses. isArray: true name: destination_mac_multiple - description: ID of the MAC address list,. name: destination_mac_list_id - description: Whether the destination MAC setting should be inverted. name: destination_mac_not - description: 'The type of destination port. Possible values: "any", "multiple", and "port-list".' name: destination_port_type auto: PREDEFINED predefined: - any - port-list - multiple - description: Comma-delimited list of the destination ports. isArray: true name: destination_port_multiple - description: ID of the destination port list. name: destination_port_list_id - description: Whether the destination port setting should be inverted. name: destination_port_not - description: True if any flags are used. name: any_flags - description: Whether logging for this filter is disabled. name: log_disabled - description: Whether this filter should capture data for every log. name: include_packet_data - description: Whether this filter should be alerted on. name: alert_enabled - description: ID of the schedule to control when this filter is "on". name: schedule_id - description: RuleContext that is applied to this filter. name: context_id - isArray: true name: tcpflags description: 'The TCP flags the rule should filter by. Possible values: "syn", "ack", "psh", "urg", "fin", and "rst".' auto: PREDEFINED predefined: - syn - ack - psh - urg - fin - rst - name: tcp_not description: Whether the TCP settings should be inverted. - name: icmp_type description: The ICMP type the rule should filter by. - name: icmp_code description: The ICMP code the rule should filter by. - name: icmp_not description: Whether the ICMP settings should be inverted. description: Modify the properties of a certain firewall rule. name: trendmicro-modify-firewall-rule outputs: - contextPath: TrendMicro.FirewallRules.name description: Name of the firewall rule. type: string - contextPath: TrendMicro.FirewallRules.description description: Description of the firewall rule. type: string - contextPath: TrendMicro.FirewallRules.action description: Action of the packet filter. type: string - contextPath: TrendMicro.FirewallRules.priority description: Priority of the packet filter. type: string - contextPath: TrendMicro.FirewallRules.direction description: Packet direction. type: string - contextPath: TrendMicro.FirewallRules.frameType description: Supported frame types. type: string - contextPath: TrendMicro.FirewallRules.frameNumber description: Ethernet frame number. type: integer - contextPath: TrendMicro.FirewallRules.frameNot description: Whether the frame setting should be inverted. type: boolean - contextPath: TrendMicro.FirewallRules.protocol description: Protocol. type: string - contextPath: TrendMicro.FirewallRules.protocolNumber description: Two-byte protocol number. type: integer - contextPath: TrendMicro.FirewallRules.protocolNot description: Whether the protocol setting should be inverted. type: boolean - contextPath: TrendMicro.FirewallRules.sourceIPType description: Source IP type. type: string - contextPath: TrendMicro.FirewallRules.sourceIPValue description: Source IP. type: string - contextPath: TrendMicro.FirewallRules.sourceIPMask description: Source IP mask. type: string - contextPath: TrendMicro.FirewallRules.sourceIPRangeFrom description: The first value for a range of source IP addresses. type: string - contextPath: TrendMicro.FirewallRules.sourceIPRangeTo description: The last value for a range of source IP addresses. type: string - contextPath: TrendMicro.FirewallRules.sourceIPMultiple description: List of source IP addresses. type: array - contextPath: TrendMicro.FirewallRules.sourceIPListID description: ID of the source IP list. type: integer - contextPath: TrendMicro.FirewallRules.sourceIPNot description: Whether the source IP setting should be inverted. type: boolean - contextPath: TrendMicro.FirewallRules.sourceMACType description: Source MAC type. type: string - contextPath: TrendMicro.FirewallRules.sourceMACValue description: Source MAC address. type: string - contextPath: TrendMicro.FirewallRules.sourceMACMultiple description: List of MAC addresses. type: array - contextPath: TrendMicro.FirewallRules.sourceMACListID description: ID of the MAC address list. type: integer - contextPath: TrendMicro.FirewallRules.sourceMACNot description: Whether the source MAC setting should be inverted. type: boolean - contextPath: TrendMicro.FirewallRules.sourcePortType description: The type of source port. type: string - contextPath: TrendMicro.FirewallRules.sourcePortMultiple description: Comma-delimited list of the source ports. type: array - contextPath: TrendMicro.FirewallRules.sourcePortListID description: ID of the source port list. type: integer - contextPath: TrendMicro.FirewallRules.sourcePortNot description: Whether the source port setting should be inverted. type: boolean - contextPath: TrendMicro.FirewallRules.destinationIPType description: Destination IP type. type: string - contextPath: TrendMicro.FirewallRules.destinationIPValue description: Destination IP. type: string - contextPath: TrendMicro.FirewallRules.destinationIPMask description: Destination IP mask. type: string - contextPath: TrendMicro.FirewallRules.destinationIPRangeFrom description: The first value for a range of destination IP addresses. type: string - contextPath: TrendMicro.FirewallRules.destinationIPRangeTo description: The last value for a range of destination IP addresses. type: string - contextPath: TrendMicro.FirewallRules.destinationIPMultiple description: Comma-delimited list of the destination IP addresses. type: array - contextPath: TrendMicro.FirewallRules.destinationIPListID description: ID of the destination IP list. type: integer - contextPath: TrendMicro.FirewallRules.destinationIPNot description: Whether the destination IP setting should be inverted. type: boolean - contextPath: TrendMicro.FirewallRules.destinationMACType description: Destination MAC type. type: string - contextPath: TrendMicro.FirewallRules.destinationMACValue description: Destination MAC address. type: string - contextPath: TrendMicro.FirewallRules.destinationMACMultiple description: Comma-delimited list of the addresses. type: array - contextPath: TrendMicro.FirewallRules.destinationMACListID description: ID of the MAC address list. type: integer - contextPath: TrendMicro.FirewallRules.destinationMACNot description: Whether the destination MAC setting should be inverted. type: boolean - contextPath: TrendMicro.FirewallRules.destinationPortType description: The type of destination port. type: string - contextPath: TrendMicro.FirewallRules.destinationPortMultiple description: Comma-delimited list of the destination ports. type: array - contextPath: TrendMicro.FirewallRules.destinationPortListID description: ID of the destination port list. type: integer - contextPath: TrendMicro.FirewallRules.destinationPortNot description: Whether the destination port setting should be inverted. type: boolean - contextPath: TrendMicro.FirewallRules.anyFlags description: True if any flags are used. type: boolean - contextPath: TrendMicro.FirewallRules.logDisabled description: Whether logging for this filter is disabled. type: boolean - contextPath: TrendMicro.FirewallRules.includePacketData description: Whether this filter should capture data for every log. type: boolean - contextPath: TrendMicro.FirewallRules.alertEnabled description: Whether this filter should be alerted on. type: boolean - contextPath: TrendMicro.FirewallRules.scheduleID description: ID of the schedule to control when this filter is "on". type: integer - contextPath: TrendMicro.FirewallRules.contextID description: RuleContext that is applied to this filter. type: integer - contextPath: TrendMicro.FirewallRules.tcpflags description: TCP flags. type: array - contextPath: TrendMicro.FirewallRules.TCPNot description: Whether the TCP settings are inverted.. type: boolean - contextPath: TrendMicro.FirewallRules.ICMPType description: ICMP type. type: integer - contextPath: TrendMicro.FirewallRules.ICMPCode description: ICMP code. type: integer - contextPath: TrendMicro.FirewallRules.ICMPNot description: Whether the ICMP settings are inverted. type: boolean - arguments: - description: The ID number of the firewall rule to delete. The ID can be obtained from the trendmicro-list-firewall-rules and trendmicro-search-firewall-rules commands. name: firewall_rule_id required: true description: Delete a certain firewall rule. name: trendmicro-delete-firewall-rule - arguments: - description: The ID number of the computer. The ID can be obtained from the trendmicro-list-computers and trendmicro-search-computers commands. name: computer_id required: true - auto: PREDEFINED defaultValue: 'false' description: 'Whether to return only rule IDs assigned directly to the current computer. Possible values: "true" and "false".' name: overrides predefined: - 'true' - 'false' description: List all IDs of the firewall rules that are assigned to a certain computer. name: trendmicro-list-firewall-rule-ids-of-computer outputs: - contextPath: TrendMicro.FirewallAssignments.assignedRuleIDs description: List of the assigned firewall rule IDs. type: array - arguments: - description: The ID number of the computer. The ID can be obtained from the trendmicro-list-computers and trendmicro-search-computers commands. name: computer_id required: true - auto: PREDEFINED defaultValue: 'false' description: 'Whether to return only rule IDs assigned directly to the current computer. Possible values: "true" and "false".' name: overrides predefined: - 'true' - 'false' - description: The rule IDs to add to the computer. isArray: true name: rule_ids required: true description: Add firewall rule IDs to a certain computer. name: trendmicro-add-firewall-rule-ids-to-computer outputs: - contextPath: TrendMicro.FirewallAssignments.assignedRuleIDs description: List of the assigned firewall rule IDs. type: array - arguments: - description: The ID number of the computer. The ID can be obtained from the trendmicro-list-computers and trendmicro-search-computers commands. name: computer_id required: true - auto: PREDEFINED defaultValue: 'false' description: 'Whether to return only rule IDs assigned directly to the current computer. Possible values: "true" and "false".' name: overrides predefined: - 'true' - 'false' - description: The rule IDs to assign to the computer. isArray: true name: rule_ids required: true description: Assign firewall rule IDs to a certain computer. name: trendmicro-set-firewall-rule-ids-to-computer outputs: - contextPath: TrendMicro.FirewallAssignments.assignedRuleIDs description: List of assigned firewall rule IDs. type: array - arguments: - description: The ID number of the policy to get. The ID can be obtained from the trendmicro-list-policies and trendmicro-search-policies commands. name: policy_id required: true - auto: PREDEFINED defaultValue: 'false' description: 'Whether to display only overrides defined for the current policy. Possible values: "true" and "false".' name: overrides predefined: - 'true' - 'false' description: Get information about a certain policy. name: trendmicro-get-policy outputs: - contextPath: TrendMicro.Policies.parentID description: ID of the parent policy. type: integer - contextPath: TrendMicro.Policies.name description: Name of the policy. type: string - contextPath: TrendMicro.Policies.description description: Description of the policy. type: string - contextPath: TrendMicro.Policies.recommendationScanMode description: Enable or disable ongoing recommendation scans for computers assigned this policy. type: string - contextPath: TrendMicro.Policies.autoRequiresUpdate description: Automatically update computers assigned this policy when the configuration changes. type: string - arguments: - description: The ID number of the policy to modify. The ID can be obtained from the trendmicro-list-policies and trendmicro-search-policies commands. name: policy_id required: true - auto: PREDEFINED defaultValue: 'false' description: 'Whether to display only overrides defined for the current policy. Possible values: "true" and "false".' name: overrides predefined: - 'true' - 'false' - description: ID of the parent policy. name: parent_id - description: Name of the policy. name: name - description: Description of the policy. name: description - description: Enable or disable ongoing recommendation scans for computers assigned this policy. name: recommendation_scan_mode - description: Automatically update computers assigned this policy when the configuration changes. name: auto_requires_update description: Modify a certain policy. name: trendmicro-modify-policy outputs: - contextPath: TrendMicro.Policies.parentID description: ID of the parent policy. type: integer - contextPath: TrendMicro.Policies.name description: Name of the policy. type: string - contextPath: TrendMicro.Policies.description description: Description of the policy. type: string - contextPath: TrendMicro.Policies.recommendationScanMode description: Enable or disable ongoing recommendation scans for computers assigned this policy. type: string - contextPath: TrendMicro.Policies.autoRequiresUpdate description: Automatically update computers assigned this policy when the configuration changes. type: string - arguments: - description: The ID number of the policy to delete. The ID can be obtained from the trendmicro-list-policies and trendmicro-search-policies commands. name: policy_id required: true description: Delete a certain policy. name: trendmicro-delete-policy - arguments: - description: The ID number of the policy. The ID can be obtained from the trendmicro-list-policies and trendmicro-search-policies commands. name: policy_id required: true - description: The name of the policy setting. name: name required: true auto: PREDEFINED predefined: - logInspectionSettingSeverityClippingAgentEventSendSyslogLevelMin - firewallSettingEngineOptionConnectionsCleanupMax - firewallSettingEngineOptionVerifyTcpChecksumEnabled - antiMalwareSettingScanCacheOnDemandConfigId - applicationControlSettingSharedRulesetId - webReputationSettingSmartProtectionServerConnectionLostWarningEnabled - applicationControlSettingExecutionEnforcementLevel - webReputationSettingBlockedUrlDomains - firewallSettingEngineOptionSynSentTimeout - platformSettingAgentSelfProtectionPassword - firewallSettingReconnaissanceBlockTcpXmasAttackDuration - intrusionPreventionSettingVirtualAndContainerNetworkScanEnabled - logInspectionSettingSyslogConfigId - firewallSettingEngineOptionDebugModeEnabled - firewallSettingVirtualAndContainerNetworkScanEnabled - antiMalwareSettingFileHashSha256Enabled - firewallSettingReconnaissanceNotifyFingerprintProbeEnabled - firewallSettingEventLogFileRetainNum - firewallSettingAntiEvasionCheckTcpPawsZero - antiMalwareSettingConnectedThreatDefenseUseControlManagerSuspiciousObjectListEnabled - intrusionPreventionSettingEngineOptionFragmentedIpKeepMax - firewallSettingEngineOptionDrop6To4BogonsAddressesEnabled - logInspectionSettingSeverityClippingAgentEventStoreLevelMin - platformSettingScanCacheConcurrencyMax - antiMalwareSettingSyslogConfigId - firewallSettingAntiEvasionTcpPawsWindowPolicy - firewallSettingReconnaissanceDetectTcpXmasAttackEnabled - applicationControlSettingRulesetMode - antiMalwareSettingSmartProtectionGlobalServerUseProxyEnabled - webReputationSettingSmartProtectionLocalServerAllowOffDomainGlobal - integrityMonitoringSettingCombinedModeProtectionSource - firewallSettingEngineOptionCloseWaitTimeout - platformSettingScanOpenPortListId - platformSettingAgentSelfProtectionPasswordEnabled - firewallSettingEngineOptionAckTimeout - firewallSettingEventLogFileCachedEntriesStaleTime - firewallSettingCombinedModeProtectionSource - platformSettingAgentEventsSendInterval - platformSettingInactiveAgentCleanupOverrideEnabled - firewallSettingFailureResponseEngineSystem - platformSettingRelayState - firewallSettingEngineOptionDropEvasiveRetransmitEnabled - activityMonitoringSettingIndicatorEnabled - intrusionPreventionSettingEngineOptionFragmentedIpTimeout - firewallSettingAntiEvasionCheckTcpZeroFlags - webReputationSettingSmartProtectionGlobalServerUseProxyEnabled - intrusionPreventionSettingNsxSecurityTaggingPreventModeLevel - firewallSettingReconnaissanceNotifyTcpXmasAttackEnabled - firewallSettingEngineOptionUdpTimeout - webReputationSettingSmartProtectionLocalServerEnabled - firewallSettingEngineOptionTcpMssLimit - firewallSettingEngineOptionColdStartTimeout - firewallSettingEngineOptionEstablishedTimeout - antiMalwareSettingIdentifiedFilesSpaceMaxMbytes - firewallSettingEngineOptionAllowNullIpEnabled - platformSettingNotificationsSuppressPopupsEnabled - firewallSettingAntiEvasionCheckTcpRstFinFlags - firewallSettingEngineOptionDisconnectTimeout - firewallSettingEngineOptionCloseTimeout - firewallSettingEngineOptionTunnelDepthMaxExceededAction - firewallSettingReconnaissanceDetectTcpNullScanEnabled - platformSettingSmartProtectionAntiMalwareGlobalServerProxyId - firewallSettingEngineOptionFilterIpv4Tunnels - webReputationSettingSmartProtectionLocalServerUrls - firewallSettingEngineOptionLogOnePacketPeriod - firewallSettingEngineOptionFilterIpv6Tunnels - firewallSettingAntiEvasionCheckTcpCongestionFlags - platformSettingHeartbeatMissedAlertThreshold - intrusionPreventionSettingEngineOptionsEnabled - firewallSettingEngineOptionConnectionsNumUdpMax - integrityMonitoringSettingAutoApplyRecommendationsEnabled - firewallSettingEngineOptionTunnelDepthMax - firewallSettingEngineOptionDropUnknownSslProtocolEnabled - antiMalwareSettingNsxSecurityTaggingValue - intrusionPreventionSettingLogDataRuleFirstMatchEnabled - firewallSettingEngineOptionLoggingPolicy - platformSettingTroubleshootingLoggingLevel - antiMalwareSettingVirtualApplianceOnDemandScanCacheEntriesMax - webReputationSettingCombinedModeProtectionSource - firewallSettingEngineOptionClosingTimeout - firewallSettingAntiEvasionCheckPaws - intrusionPreventionSettingAutoApplyRecommendationsEnabled - firewallSettingReconnaissanceDetectFingerprintProbeEnabled - antiMalwareSettingNsxSecurityTaggingRemoveOnCleanScanEnabled - firewallSettingEngineOptionLogPacketLengthMax - firewallSettingEngineOptionDropTeredoAnomaliesEnabled - webReputationSettingSecurityLevel - firewallSettingEngineOptionDropIpv6SiteLocalAddressesEnabled - activityMonitoringSettingActivityEnabled - firewallSettingEngineOptionStrictTerodoPortCheckEnabled - webReputationSettingBlockedUrlKeywords - webReputationSettingSyslogConfigId - firewallSettingFailureResponsePacketSanityCheck - firewallSettingNetworkEngineMode - firewallSettingEventLogFileSizeMax - antiMalwareSettingMalwareScanMultithreadedProcessingEnabled - firewallSettingReconnaissanceDetectTcpSynFinScanEnabled - firewallSettingEngineOptionDropIpZeroPayloadEnabled - firewallSettingEngineOptionBlockIpv6Agent8AndEarlierEnabled - intrusionPreventionSettingEngineOptionFragmentedIpPacketSendIcmpEnabled - antiMalwareSettingPredictiveMachineLearningExceptions - firewallSettingEngineOptionLogEventsPerSecondMax - firewallSettingEngineOptionSslSessionTime - antiMalwareSettingBehaviorMonitoringScanExclusionList - antiMalwareSettingSmartProtectionGlobalServerEnabled - firewallSettingEngineOptionLogOnePacketWithinPeriodEnabled - firewallSettingEngineOptionGenerateConnectionEventsIcmpEnabled - platformSettingHeartbeatInactiveVmOfflineAlertEnabled - webReputationSettingSmartProtectionWebReputationGlobalServerProxyId - antiMalwareSettingNsxSecurityTaggingEnabled - firewallSettingAntiEvasionCheckFragmentedPackets - firewallSettingEngineOptionConnectionsNumIcmpMax - firewallSettingAntiEvasionCheckTcpSplitHandshake - antiMalwareSettingCombinedModeProtectionSource - firewallSettingEngineOptionEventNodesMax - webReputationSettingMonitorPortListId - applicationControlSettingSyslogConfigId - firewallSettingAntiEvasionCheckOutNoConnection - firewallSettingEngineOptionBlockIpv6Agent9AndLaterEnabled - integrityMonitoringSettingVirtualApplianceOptimizationScanCacheEntriesMax - firewallSettingReconnaissanceNotifyTcpNullScanEnabled - firewallSettingEngineOptionIgnoreStatusCode1 - firewallSettingEngineOptionIgnoreStatusCode0 - firewallSettingEngineOptionIgnoreStatusCode2 - firewallSettingEngineOptionSslSessionSize - antiMalwareSettingScanCacheRealTimeConfigId - platformSettingRecommendationOngoingScansInterval - platformSettingSmartProtectionGlobalServerUseProxyEnabled - firewallSettingInterfaceLimitOneActiveEnabled - firewallSettingAntiEvasionCheckTcpChecksum - firewallSettingEngineOptionDropIpv6ExtType0Enabled - antiMalwareSettingScanFileSizeMaxMbytes - firewallSettingEngineOptionGenerateConnectionEventsTcpEnabled - antiMalwareSettingFileHashSizeMaxMbytes - firewallSettingEventLogFileCachedEntriesLifeTime - platformSettingSmartProtectionGlobalServerProxyId - logInspectionSettingAutoApplyRecommendationsEnabled - antiMalwareSettingConnectedThreatDefenseSuspiciousFileDdanSubmissionEnabled - webReputationSettingBlockingPageLink - firewallSettingSyslogConfigId - platformSettingAgentCommunicationsDirection - integrityMonitoringSettingScanCacheConfigId - antiMalwareSettingDocumentExploitProtectionRuleExceptions - firewallSettingAntiEvasionCheckTcpSynWithData - antiMalwareSettingFileHashEnabled - firewallSettingReconnaissanceBlockFingerprintProbeDuration - firewallSettingEngineOptionDropIpv6BogonsAddressesEnabled - firewallSettingEngineOptionBootStartTimeout - firewallSettingEngineOptionConnectionsNumTcpMax - firewallSettingAntiEvasionSecurityPosture - firewallSettingInterfacePatterns - firewallSettingInterfaceIsolationEnabled - antiMalwareSettingVirtualApplianceRealTimeScanCacheEntriesMax - firewallSettingEventsOutOfAllowedPolicyEnabled - firewallSettingAntiEvasionCheckEvasiveRetransmit - firewallSettingEngineOptionIcmpTimeout - integrityMonitoringSettingSyslogConfigId - firewallSettingEngineOptionConnectionCleanupTimeout - antiMalwareSettingSmartProtectionLocalServerAllowOffDomainGlobal - firewallSettingReconnaissanceNotifyTcpSynFinScanEnabled - firewallSettingEngineOptionErrorTimeout - webReputationSettingAllowedUrls - firewallSettingReconnaissanceNotifyNetworkOrPortScanEnabled - firewallSettingEngineOptionFinWait1Timeout - firewallSettingEngineOptionGenerateConnectionEventsUdpEnabled - activityMonitoringSettingSyslogConfigId - firewallSettingAntiEvasionCheckTcpSynRstFlags - antiMalwareSettingSpywareApprovedList - firewallSettingAntiEvasionCheckTcpUrgentFlags - intrusionPreventionSettingNsxSecurityTaggingDetectModeLevel - intrusionPreventionSettingEngineOptionFragmentedIpUnconcernedMacAddressBypassEnabled - firewallSettingEngineOptionLogAllPacketDataEnabled - firewallSettingAntiEvasionCheckTcpSynFinFlags - platformSettingHeartbeatInterval - firewallSettingEngineOptionFragmentSizeMin - antiMalwareSettingSmartProtectionServerConnectionLostWarningEnabled - firewallSettingReconnaissanceBlockNetworkOrPortScanDuration - integrityMonitoringSettingContentHashAlgorithm - antiMalwareSettingSmartScanState - firewallSettingConfigPackageExceedsAlertMaxEnabled - platformSettingEnvironmentVariableOverrides - firewallSettingEngineOptionFragmentOffsetMin - antiMalwareSettingSmartProtectionLocalServerUrls - firewallSettingEngineOptionSynRcvdTimeout - firewallSettingEventLogFileCachedEntriesNum - firewallSettingEngineOptionForceAllowIcmpType3Code4 - firewallSettingReconnaissanceBlockTcpNullScanDuration - platformSettingSmartProtectionGlobalServerEnabled - integrityMonitoringSettingRealtimeEnabled - firewallSettingEngineOptionLastAckTimeout - firewallSettingReconnaissanceExcludeIpListId - platformSettingAgentSelfProtectionEnabled - firewallSettingEngineOptionDropIpv6ReservedAddressesEnabled - firewallSettingAntiEvasionCheckFinNoConnection - firewallSettingEngineOptionDebugPacketNumMax - firewallSettingEngineOptionBypassCiscoWaasConnectionsEnabled - firewallSettingReconnaissanceEnabled - platformSettingHeartbeatLocalTimeShiftAlertThreshold - antiMalwareSettingFileHashMd5Enabled - firewallSettingReconnaissanceDetectNetworkOrPortScanEnabled - firewallSettingEngineOptionSilentTcpConnectionDropEnabled - firewallSettingEngineOptionBlockSameSrcDstIpEnabled - firewallSettingEngineOptionForceAllowDhcpDns - firewallSettingReconnaissanceIncludeIpListId - firewallSettingEngineOptionsEnabled - firewallSettingReconnaissanceBlockTcpSynFinScanDuration - webReputationSettingSecurityBlockUntestedPagesEnabled - webReputationSettingAllowedUrlDomains - firewallSettingEventLogFileIgnoreSourceIpListId - firewallSettingEngineOptionDropIpv6FragmentsLowerThanMinMtuEnabled - platformSettingAutoAssignNewIntrusionPreventionRulesEnabled - firewallSettingAntiEvasionCheckRstNoConnection - webReputationSettingBlockedUrls - platformSettingCombinedModeNetworkGroupProtectionSource - webReputationSettingAlertingEnabled - antiMalwareSettingNsxSecurityTaggingOnRemediationFailureEnabled - integrityMonitoringSettingCpuUsageLevel - platformSettingAutoUpdateAntiMalwareEngineEnabled - intrusionPreventionSettingCombinedModeProtectionSource - auto: PREDEFINED defaultValue: 'false' description: 'Whether to display only overrides defined for the current policy. Possible values: "true" and "false".' name: overrides predefined: - 'true' - 'false' description: Get information about a setting of a certain policy. name: trendmicro-get-policy-setting outputs: - contextPath: TrendMicro.PolicySettings.policyId description: Policy ID of a setting. type: integer - contextPath: TrendMicro.PolicySettings.name description: Name of a setting. type: string - contextPath: TrendMicro.PolicySettings.value description: The value of a setting. type: string - arguments: - description: The ID number of the policy. The ID can be obtained from the trendmicro-list-policies and trendmicro-search-policies commands. name: policy_id required: true - description: The name of the setting. name: name required: true auto: PREDEFINED predefined: - logInspectionSettingSeverityClippingAgentEventSendSyslogLevelMin - firewallSettingEngineOptionConnectionsCleanupMax - firewallSettingEngineOptionVerifyTcpChecksumEnabled - antiMalwareSettingScanCacheOnDemandConfigId - applicationControlSettingSharedRulesetId - webReputationSettingSmartProtectionServerConnectionLostWarningEnabled - applicationControlSettingExecutionEnforcementLevel - webReputationSettingBlockedUrlDomains - firewallSettingEngineOptionSynSentTimeout - platformSettingAgentSelfProtectionPassword - firewallSettingReconnaissanceBlockTcpXmasAttackDuration - intrusionPreventionSettingVirtualAndContainerNetworkScanEnabled - logInspectionSettingSyslogConfigId - firewallSettingEngineOptionDebugModeEnabled - firewallSettingVirtualAndContainerNetworkScanEnabled - antiMalwareSettingFileHashSha256Enabled - firewallSettingReconnaissanceNotifyFingerprintProbeEnabled - firewallSettingEventLogFileRetainNum - firewallSettingAntiEvasionCheckTcpPawsZero - antiMalwareSettingConnectedThreatDefenseUseControlManagerSuspiciousObjectListEnabled - intrusionPreventionSettingEngineOptionFragmentedIpKeepMax - firewallSettingEngineOptionDrop6To4BogonsAddressesEnabled - logInspectionSettingSeverityClippingAgentEventStoreLevelMin - platformSettingScanCacheConcurrencyMax - antiMalwareSettingSyslogConfigId - firewallSettingAntiEvasionTcpPawsWindowPolicy - firewallSettingReconnaissanceDetectTcpXmasAttackEnabled - applicationControlSettingRulesetMode - antiMalwareSettingSmartProtectionGlobalServerUseProxyEnabled - webReputationSettingSmartProtectionLocalServerAllowOffDomainGlobal - integrityMonitoringSettingCombinedModeProtectionSource - firewallSettingEngineOptionCloseWaitTimeout - platformSettingScanOpenPortListId - platformSettingAgentSelfProtectionPasswordEnabled - firewallSettingEngineOptionAckTimeout - firewallSettingEventLogFileCachedEntriesStaleTime - firewallSettingCombinedModeProtectionSource - platformSettingAgentEventsSendInterval - platformSettingInactiveAgentCleanupOverrideEnabled - firewallSettingFailureResponseEngineSystem - platformSettingRelayState - firewallSettingEngineOptionDropEvasiveRetransmitEnabled - activityMonitoringSettingIndicatorEnabled - intrusionPreventionSettingEngineOptionFragmentedIpTimeout - firewallSettingAntiEvasionCheckTcpZeroFlags - webReputationSettingSmartProtectionGlobalServerUseProxyEnabled - intrusionPreventionSettingNsxSecurityTaggingPreventModeLevel - firewallSettingReconnaissanceNotifyTcpXmasAttackEnabled - firewallSettingEngineOptionUdpTimeout - webReputationSettingSmartProtectionLocalServerEnabled - firewallSettingEngineOptionTcpMssLimit - firewallSettingEngineOptionColdStartTimeout - firewallSettingEngineOptionEstablishedTimeout - antiMalwareSettingIdentifiedFilesSpaceMaxMbytes - firewallSettingEngineOptionAllowNullIpEnabled - platformSettingNotificationsSuppressPopupsEnabled - firewallSettingAntiEvasionCheckTcpRstFinFlags - firewallSettingEngineOptionDisconnectTimeout - firewallSettingEngineOptionCloseTimeout - firewallSettingEngineOptionTunnelDepthMaxExceededAction - firewallSettingReconnaissanceDetectTcpNullScanEnabled - platformSettingSmartProtectionAntiMalwareGlobalServerProxyId - firewallSettingEngineOptionFilterIpv4Tunnels - webReputationSettingSmartProtectionLocalServerUrls - firewallSettingEngineOptionLogOnePacketPeriod - firewallSettingEngineOptionFilterIpv6Tunnels - firewallSettingAntiEvasionCheckTcpCongestionFlags - platformSettingHeartbeatMissedAlertThreshold - intrusionPreventionSettingEngineOptionsEnabled - firewallSettingEngineOptionConnectionsNumUdpMax - integrityMonitoringSettingAutoApplyRecommendationsEnabled - firewallSettingEngineOptionTunnelDepthMax - firewallSettingEngineOptionDropUnknownSslProtocolEnabled - antiMalwareSettingNsxSecurityTaggingValue - intrusionPreventionSettingLogDataRuleFirstMatchEnabled - firewallSettingEngineOptionLoggingPolicy - platformSettingTroubleshootingLoggingLevel - antiMalwareSettingVirtualApplianceOnDemandScanCacheEntriesMax - webReputationSettingCombinedModeProtectionSource - firewallSettingEngineOptionClosingTimeout - firewallSettingAntiEvasionCheckPaws - intrusionPreventionSettingAutoApplyRecommendationsEnabled - firewallSettingReconnaissanceDetectFingerprintProbeEnabled - antiMalwareSettingNsxSecurityTaggingRemoveOnCleanScanEnabled - firewallSettingEngineOptionLogPacketLengthMax - firewallSettingEngineOptionDropTeredoAnomaliesEnabled - webReputationSettingSecurityLevel - firewallSettingEngineOptionDropIpv6SiteLocalAddressesEnabled - activityMonitoringSettingActivityEnabled - firewallSettingEngineOptionStrictTerodoPortCheckEnabled - webReputationSettingBlockedUrlKeywords - webReputationSettingSyslogConfigId - firewallSettingFailureResponsePacketSanityCheck - firewallSettingNetworkEngineMode - firewallSettingEventLogFileSizeMax - antiMalwareSettingMalwareScanMultithreadedProcessingEnabled - firewallSettingReconnaissanceDetectTcpSynFinScanEnabled - firewallSettingEngineOptionDropIpZeroPayloadEnabled - firewallSettingEngineOptionBlockIpv6Agent8AndEarlierEnabled - intrusionPreventionSettingEngineOptionFragmentedIpPacketSendIcmpEnabled - antiMalwareSettingPredictiveMachineLearningExceptions - firewallSettingEngineOptionLogEventsPerSecondMax - firewallSettingEngineOptionSslSessionTime - antiMalwareSettingBehaviorMonitoringScanExclusionList - antiMalwareSettingSmartProtectionGlobalServerEnabled - firewallSettingEngineOptionLogOnePacketWithinPeriodEnabled - firewallSettingEngineOptionGenerateConnectionEventsIcmpEnabled - platformSettingHeartbeatInactiveVmOfflineAlertEnabled - webReputationSettingSmartProtectionWebReputationGlobalServerProxyId - antiMalwareSettingNsxSecurityTaggingEnabled - firewallSettingAntiEvasionCheckFragmentedPackets - firewallSettingEngineOptionConnectionsNumIcmpMax - firewallSettingAntiEvasionCheckTcpSplitHandshake - antiMalwareSettingCombinedModeProtectionSource - firewallSettingEngineOptionEventNodesMax - webReputationSettingMonitorPortListId - applicationControlSettingSyslogConfigId - firewallSettingAntiEvasionCheckOutNoConnection - firewallSettingEngineOptionBlockIpv6Agent9AndLaterEnabled - integrityMonitoringSettingVirtualApplianceOptimizationScanCacheEntriesMax - firewallSettingReconnaissanceNotifyTcpNullScanEnabled - firewallSettingEngineOptionIgnoreStatusCode1 - firewallSettingEngineOptionIgnoreStatusCode0 - firewallSettingEngineOptionIgnoreStatusCode2 - firewallSettingEngineOptionSslSessionSize - antiMalwareSettingScanCacheRealTimeConfigId - platformSettingRecommendationOngoingScansInterval - platformSettingSmartProtectionGlobalServerUseProxyEnabled - firewallSettingInterfaceLimitOneActiveEnabled - firewallSettingAntiEvasionCheckTcpChecksum - firewallSettingEngineOptionDropIpv6ExtType0Enabled - antiMalwareSettingScanFileSizeMaxMbytes - firewallSettingEngineOptionGenerateConnectionEventsTcpEnabled - antiMalwareSettingFileHashSizeMaxMbytes - firewallSettingEventLogFileCachedEntriesLifeTime - platformSettingSmartProtectionGlobalServerProxyId - logInspectionSettingAutoApplyRecommendationsEnabled - antiMalwareSettingConnectedThreatDefenseSuspiciousFileDdanSubmissionEnabled - webReputationSettingBlockingPageLink - firewallSettingSyslogConfigId - platformSettingAgentCommunicationsDirection - integrityMonitoringSettingScanCacheConfigId - antiMalwareSettingDocumentExploitProtectionRuleExceptions - firewallSettingAntiEvasionCheckTcpSynWithData - antiMalwareSettingFileHashEnabled - firewallSettingReconnaissanceBlockFingerprintProbeDuration - firewallSettingEngineOptionDropIpv6BogonsAddressesEnabled - firewallSettingEngineOptionBootStartTimeout - firewallSettingEngineOptionConnectionsNumTcpMax - firewallSettingAntiEvasionSecurityPosture - firewallSettingInterfacePatterns - firewallSettingInterfaceIsolationEnabled - antiMalwareSettingVirtualApplianceRealTimeScanCacheEntriesMax - firewallSettingEventsOutOfAllowedPolicyEnabled - firewallSettingAntiEvasionCheckEvasiveRetransmit - firewallSettingEngineOptionIcmpTimeout - integrityMonitoringSettingSyslogConfigId - firewallSettingEngineOptionConnectionCleanupTimeout - antiMalwareSettingSmartProtectionLocalServerAllowOffDomainGlobal - firewallSettingReconnaissanceNotifyTcpSynFinScanEnabled - firewallSettingEngineOptionErrorTimeout - webReputationSettingAllowedUrls - firewallSettingReconnaissanceNotifyNetworkOrPortScanEnabled - firewallSettingEngineOptionFinWait1Timeout - firewallSettingEngineOptionGenerateConnectionEventsUdpEnabled - activityMonitoringSettingSyslogConfigId - firewallSettingAntiEvasionCheckTcpSynRstFlags - antiMalwareSettingSpywareApprovedList - firewallSettingAntiEvasionCheckTcpUrgentFlags - intrusionPreventionSettingNsxSecurityTaggingDetectModeLevel - intrusionPreventionSettingEngineOptionFragmentedIpUnconcernedMacAddressBypassEnabled - firewallSettingEngineOptionLogAllPacketDataEnabled - firewallSettingAntiEvasionCheckTcpSynFinFlags - platformSettingHeartbeatInterval - firewallSettingEngineOptionFragmentSizeMin - antiMalwareSettingSmartProtectionServerConnectionLostWarningEnabled - firewallSettingReconnaissanceBlockNetworkOrPortScanDuration - integrityMonitoringSettingContentHashAlgorithm - antiMalwareSettingSmartScanState - firewallSettingConfigPackageExceedsAlertMaxEnabled - platformSettingEnvironmentVariableOverrides - firewallSettingEngineOptionFragmentOffsetMin - antiMalwareSettingSmartProtectionLocalServerUrls - firewallSettingEngineOptionSynRcvdTimeout - firewallSettingEventLogFileCachedEntriesNum - firewallSettingEngineOptionForceAllowIcmpType3Code4 - firewallSettingReconnaissanceBlockTcpNullScanDuration - platformSettingSmartProtectionGlobalServerEnabled - integrityMonitoringSettingRealtimeEnabled - firewallSettingEngineOptionLastAckTimeout - firewallSettingReconnaissanceExcludeIpListId - platformSettingAgentSelfProtectionEnabled - firewallSettingEngineOptionDropIpv6ReservedAddressesEnabled - firewallSettingAntiEvasionCheckFinNoConnection - firewallSettingEngineOptionDebugPacketNumMax - firewallSettingEngineOptionBypassCiscoWaasConnectionsEnabled - firewallSettingReconnaissanceEnabled - platformSettingHeartbeatLocalTimeShiftAlertThreshold - antiMalwareSettingFileHashMd5Enabled - firewallSettingReconnaissanceDetectNetworkOrPortScanEnabled - firewallSettingEngineOptionSilentTcpConnectionDropEnabled - firewallSettingEngineOptionBlockSameSrcDstIpEnabled - firewallSettingEngineOptionForceAllowDhcpDns - firewallSettingReconnaissanceIncludeIpListId - firewallSettingEngineOptionsEnabled - firewallSettingReconnaissanceBlockTcpSynFinScanDuration - webReputationSettingSecurityBlockUntestedPagesEnabled - webReputationSettingAllowedUrlDomains - firewallSettingEventLogFileIgnoreSourceIpListId - firewallSettingEngineOptionDropIpv6FragmentsLowerThanMinMtuEnabled - platformSettingAutoAssignNewIntrusionPreventionRulesEnabled - firewallSettingAntiEvasionCheckRstNoConnection - webReputationSettingBlockedUrls - platformSettingCombinedModeNetworkGroupProtectionSource - webReputationSettingAlertingEnabled - antiMalwareSettingNsxSecurityTaggingOnRemediationFailureEnabled - integrityMonitoringSettingCpuUsageLevel - platformSettingAutoUpdateAntiMalwareEngineEnabled - intrusionPreventionSettingCombinedModeProtectionSource - auto: PREDEFINED defaultValue: 'false' description: 'Whether to display only overrides defined for the current computer. Possible values: "true" and "false".' name: overrides predefined: - 'true' - 'false' - description: The value of a setting. name: value description: Modify the value of a setting of a certain policy. name: trendmicro-modify-policy-setting outputs: - contextPath: TrendMicro.PolicySettings.policyId description: Policy ID of a setting. type: integer - contextPath: TrendMicro.PolicySettings.name description: Name of a setting. type: string - contextPath: TrendMicro.PolicySettings.value description: The value of a setting. type: string - arguments: - description: The ID number of the policy. The ID can be obtained from the trendmicro-list-policies and trendmicro-search-policies commands. name: policy_id required: true - description: The name of the policy settings. name: name required: true auto: PREDEFINED predefined: - logInspectionSettingSeverityClippingAgentEventSendSyslogLevelMin - firewallSettingEngineOptionConnectionsCleanupMax - firewallSettingEngineOptionVerifyTcpChecksumEnabled - antiMalwareSettingScanCacheOnDemandConfigId - applicationControlSettingSharedRulesetId - webReputationSettingSmartProtectionServerConnectionLostWarningEnabled - applicationControlSettingExecutionEnforcementLevel - webReputationSettingBlockedUrlDomains - firewallSettingEngineOptionSynSentTimeout - platformSettingAgentSelfProtectionPassword - firewallSettingReconnaissanceBlockTcpXmasAttackDuration - intrusionPreventionSettingVirtualAndContainerNetworkScanEnabled - logInspectionSettingSyslogConfigId - firewallSettingEngineOptionDebugModeEnabled - firewallSettingVirtualAndContainerNetworkScanEnabled - antiMalwareSettingFileHashSha256Enabled - firewallSettingReconnaissanceNotifyFingerprintProbeEnabled - firewallSettingEventLogFileRetainNum - firewallSettingAntiEvasionCheckTcpPawsZero - antiMalwareSettingConnectedThreatDefenseUseControlManagerSuspiciousObjectListEnabled - intrusionPreventionSettingEngineOptionFragmentedIpKeepMax - firewallSettingEngineOptionDrop6To4BogonsAddressesEnabled - logInspectionSettingSeverityClippingAgentEventStoreLevelMin - platformSettingScanCacheConcurrencyMax - antiMalwareSettingSyslogConfigId - firewallSettingAntiEvasionTcpPawsWindowPolicy - firewallSettingReconnaissanceDetectTcpXmasAttackEnabled - applicationControlSettingRulesetMode - antiMalwareSettingSmartProtectionGlobalServerUseProxyEnabled - webReputationSettingSmartProtectionLocalServerAllowOffDomainGlobal - integrityMonitoringSettingCombinedModeProtectionSource - firewallSettingEngineOptionCloseWaitTimeout - platformSettingScanOpenPortListId - platformSettingAgentSelfProtectionPasswordEnabled - firewallSettingEngineOptionAckTimeout - firewallSettingEventLogFileCachedEntriesStaleTime - firewallSettingCombinedModeProtectionSource - platformSettingAgentEventsSendInterval - platformSettingInactiveAgentCleanupOverrideEnabled - firewallSettingFailureResponseEngineSystem - platformSettingRelayState - firewallSettingEngineOptionDropEvasiveRetransmitEnabled - activityMonitoringSettingIndicatorEnabled - intrusionPreventionSettingEngineOptionFragmentedIpTimeout - firewallSettingAntiEvasionCheckTcpZeroFlags - webReputationSettingSmartProtectionGlobalServerUseProxyEnabled - intrusionPreventionSettingNsxSecurityTaggingPreventModeLevel - firewallSettingReconnaissanceNotifyTcpXmasAttackEnabled - firewallSettingEngineOptionUdpTimeout - webReputationSettingSmartProtectionLocalServerEnabled - firewallSettingEngineOptionTcpMssLimit - firewallSettingEngineOptionColdStartTimeout - firewallSettingEngineOptionEstablishedTimeout - antiMalwareSettingIdentifiedFilesSpaceMaxMbytes - firewallSettingEngineOptionAllowNullIpEnabled - platformSettingNotificationsSuppressPopupsEnabled - firewallSettingAntiEvasionCheckTcpRstFinFlags - firewallSettingEngineOptionDisconnectTimeout - firewallSettingEngineOptionCloseTimeout - firewallSettingEngineOptionTunnelDepthMaxExceededAction - firewallSettingReconnaissanceDetectTcpNullScanEnabled - platformSettingSmartProtectionAntiMalwareGlobalServerProxyId - firewallSettingEngineOptionFilterIpv4Tunnels - webReputationSettingSmartProtectionLocalServerUrls - firewallSettingEngineOptionLogOnePacketPeriod - firewallSettingEngineOptionFilterIpv6Tunnels - firewallSettingAntiEvasionCheckTcpCongestionFlags - platformSettingHeartbeatMissedAlertThreshold - intrusionPreventionSettingEngineOptionsEnabled - firewallSettingEngineOptionConnectionsNumUdpMax - integrityMonitoringSettingAutoApplyRecommendationsEnabled - firewallSettingEngineOptionTunnelDepthMax - firewallSettingEngineOptionDropUnknownSslProtocolEnabled - antiMalwareSettingNsxSecurityTaggingValue - intrusionPreventionSettingLogDataRuleFirstMatchEnabled - firewallSettingEngineOptionLoggingPolicy - platformSettingTroubleshootingLoggingLevel - antiMalwareSettingVirtualApplianceOnDemandScanCacheEntriesMax - webReputationSettingCombinedModeProtectionSource - firewallSettingEngineOptionClosingTimeout - firewallSettingAntiEvasionCheckPaws - intrusionPreventionSettingAutoApplyRecommendationsEnabled - firewallSettingReconnaissanceDetectFingerprintProbeEnabled - antiMalwareSettingNsxSecurityTaggingRemoveOnCleanScanEnabled - firewallSettingEngineOptionLogPacketLengthMax - firewallSettingEngineOptionDropTeredoAnomaliesEnabled - webReputationSettingSecurityLevel - firewallSettingEngineOptionDropIpv6SiteLocalAddressesEnabled - activityMonitoringSettingActivityEnabled - firewallSettingEngineOptionStrictTerodoPortCheckEnabled - webReputationSettingBlockedUrlKeywords - webReputationSettingSyslogConfigId - firewallSettingFailureResponsePacketSanityCheck - firewallSettingNetworkEngineMode - firewallSettingEventLogFileSizeMax - antiMalwareSettingMalwareScanMultithreadedProcessingEnabled - firewallSettingReconnaissanceDetectTcpSynFinScanEnabled - firewallSettingEngineOptionDropIpZeroPayloadEnabled - firewallSettingEngineOptionBlockIpv6Agent8AndEarlierEnabled - intrusionPreventionSettingEngineOptionFragmentedIpPacketSendIcmpEnabled - antiMalwareSettingPredictiveMachineLearningExceptions - firewallSettingEngineOptionLogEventsPerSecondMax - firewallSettingEngineOptionSslSessionTime - antiMalwareSettingBehaviorMonitoringScanExclusionList - antiMalwareSettingSmartProtectionGlobalServerEnabled - firewallSettingEngineOptionLogOnePacketWithinPeriodEnabled - firewallSettingEngineOptionGenerateConnectionEventsIcmpEnabled - platformSettingHeartbeatInactiveVmOfflineAlertEnabled - webReputationSettingSmartProtectionWebReputationGlobalServerProxyId - antiMalwareSettingNsxSecurityTaggingEnabled - firewallSettingAntiEvasionCheckFragmentedPackets - firewallSettingEngineOptionConnectionsNumIcmpMax - firewallSettingAntiEvasionCheckTcpSplitHandshake - antiMalwareSettingCombinedModeProtectionSource - firewallSettingEngineOptionEventNodesMax - webReputationSettingMonitorPortListId - applicationControlSettingSyslogConfigId - firewallSettingAntiEvasionCheckOutNoConnection - firewallSettingEngineOptionBlockIpv6Agent9AndLaterEnabled - integrityMonitoringSettingVirtualApplianceOptimizationScanCacheEntriesMax - firewallSettingReconnaissanceNotifyTcpNullScanEnabled - firewallSettingEngineOptionIgnoreStatusCode1 - firewallSettingEngineOptionIgnoreStatusCode0 - firewallSettingEngineOptionIgnoreStatusCode2 - firewallSettingEngineOptionSslSessionSize - antiMalwareSettingScanCacheRealTimeConfigId - platformSettingRecommendationOngoingScansInterval - platformSettingSmartProtectionGlobalServerUseProxyEnabled - firewallSettingInterfaceLimitOneActiveEnabled - firewallSettingAntiEvasionCheckTcpChecksum - firewallSettingEngineOptionDropIpv6ExtType0Enabled - antiMalwareSettingScanFileSizeMaxMbytes - firewallSettingEngineOptionGenerateConnectionEventsTcpEnabled - antiMalwareSettingFileHashSizeMaxMbytes - firewallSettingEventLogFileCachedEntriesLifeTime - platformSettingSmartProtectionGlobalServerProxyId - logInspectionSettingAutoApplyRecommendationsEnabled - antiMalwareSettingConnectedThreatDefenseSuspiciousFileDdanSubmissionEnabled - webReputationSettingBlockingPageLink - firewallSettingSyslogConfigId - platformSettingAgentCommunicationsDirection - integrityMonitoringSettingScanCacheConfigId - antiMalwareSettingDocumentExploitProtectionRuleExceptions - firewallSettingAntiEvasionCheckTcpSynWithData - antiMalwareSettingFileHashEnabled - firewallSettingReconnaissanceBlockFingerprintProbeDuration - firewallSettingEngineOptionDropIpv6BogonsAddressesEnabled - firewallSettingEngineOptionBootStartTimeout - firewallSettingEngineOptionConnectionsNumTcpMax - firewallSettingAntiEvasionSecurityPosture - firewallSettingInterfacePatterns - firewallSettingInterfaceIsolationEnabled - antiMalwareSettingVirtualApplianceRealTimeScanCacheEntriesMax - firewallSettingEventsOutOfAllowedPolicyEnabled - firewallSettingAntiEvasionCheckEvasiveRetransmit - firewallSettingEngineOptionIcmpTimeout - integrityMonitoringSettingSyslogConfigId - firewallSettingEngineOptionConnectionCleanupTimeout - antiMalwareSettingSmartProtectionLocalServerAllowOffDomainGlobal - firewallSettingReconnaissanceNotifyTcpSynFinScanEnabled - firewallSettingEngineOptionErrorTimeout - webReputationSettingAllowedUrls - firewallSettingReconnaissanceNotifyNetworkOrPortScanEnabled - firewallSettingEngineOptionFinWait1Timeout - firewallSettingEngineOptionGenerateConnectionEventsUdpEnabled - activityMonitoringSettingSyslogConfigId - firewallSettingAntiEvasionCheckTcpSynRstFlags - antiMalwareSettingSpywareApprovedList - firewallSettingAntiEvasionCheckTcpUrgentFlags - intrusionPreventionSettingNsxSecurityTaggingDetectModeLevel - intrusionPreventionSettingEngineOptionFragmentedIpUnconcernedMacAddressBypassEnabled - firewallSettingEngineOptionLogAllPacketDataEnabled - firewallSettingAntiEvasionCheckTcpSynFinFlags - platformSettingHeartbeatInterval - firewallSettingEngineOptionFragmentSizeMin - antiMalwareSettingSmartProtectionServerConnectionLostWarningEnabled - firewallSettingReconnaissanceBlockNetworkOrPortScanDuration - integrityMonitoringSettingContentHashAlgorithm - antiMalwareSettingSmartScanState - firewallSettingConfigPackageExceedsAlertMaxEnabled - platformSettingEnvironmentVariableOverrides - firewallSettingEngineOptionFragmentOffsetMin - antiMalwareSettingSmartProtectionLocalServerUrls - firewallSettingEngineOptionSynRcvdTimeout - firewallSettingEventLogFileCachedEntriesNum - firewallSettingEngineOptionForceAllowIcmpType3Code4 - firewallSettingReconnaissanceBlockTcpNullScanDuration - platformSettingSmartProtectionGlobalServerEnabled - integrityMonitoringSettingRealtimeEnabled - firewallSettingEngineOptionLastAckTimeout - firewallSettingReconnaissanceExcludeIpListId - platformSettingAgentSelfProtectionEnabled - firewallSettingEngineOptionDropIpv6ReservedAddressesEnabled - firewallSettingAntiEvasionCheckFinNoConnection - firewallSettingEngineOptionDebugPacketNumMax - firewallSettingEngineOptionBypassCiscoWaasConnectionsEnabled - firewallSettingReconnaissanceEnabled - platformSettingHeartbeatLocalTimeShiftAlertThreshold - antiMalwareSettingFileHashMd5Enabled - firewallSettingReconnaissanceDetectNetworkOrPortScanEnabled - firewallSettingEngineOptionSilentTcpConnectionDropEnabled - firewallSettingEngineOptionBlockSameSrcDstIpEnabled - firewallSettingEngineOptionForceAllowDhcpDns - firewallSettingReconnaissanceIncludeIpListId - firewallSettingEngineOptionsEnabled - firewallSettingReconnaissanceBlockTcpSynFinScanDuration - webReputationSettingSecurityBlockUntestedPagesEnabled - webReputationSettingAllowedUrlDomains - firewallSettingEventLogFileIgnoreSourceIpListId - firewallSettingEngineOptionDropIpv6FragmentsLowerThanMinMtuEnabled - platformSettingAutoAssignNewIntrusionPreventionRulesEnabled - firewallSettingAntiEvasionCheckRstNoConnection - webReputationSettingBlockedUrls - platformSettingCombinedModeNetworkGroupProtectionSource - webReputationSettingAlertingEnabled - antiMalwareSettingNsxSecurityTaggingOnRemediationFailureEnabled - integrityMonitoringSettingCpuUsageLevel - platformSettingAutoUpdateAntiMalwareEngineEnabled - intrusionPreventionSettingCombinedModeProtectionSource - auto: PREDEFINED defaultValue: 'false' description: 'Whether to display only overrides defined for the current policy. Possible values: "true" and "false".' name: overrides predefined: - 'true' - 'false' description: Reset the value of a setting of a certain policy. name: trendmicro-reset-policy-setting outputs: - contextPath: TrendMicro.PolicySettings.policyId description: Policy ID of a setting. type: integer - contextPath: TrendMicro.PolicySettings.name description: Name of a setting. type: string - contextPath: TrendMicro.PolicySettings.value description: The value of a setting. type: string - arguments: - auto: PREDEFINED defaultValue: 'false' description: 'Whether to display only overrides defined for the current policy. Possible values: "true" and "false".' name: overrides predefined: - 'true' - 'false' description: List all existing policies. name: trendmicro-list-policies outputs: - contextPath: TrendMicro.Policies.parentID description: ID of the parent policy. type: integer - contextPath: TrendMicro.Policies.name description: Name of the policy. type: string - contextPath: TrendMicro.Policies.description description: Description of the policy. type: string - contextPath: TrendMicro.Policies.recommendationScanMode description: Enable or disable ongoing recommendation scans for computers assigned this policy. type: string - contextPath: TrendMicro.Policies.autoRequiresUpdate description: Automatically update computers assigned this policy when the configuration changes. type: string - arguments: - auto: PREDEFINED defaultValue: 'false' description: 'Whether to display only overrides defined for the current computer. Possible values: "true" and "false".' name: overrides predefined: - 'true' - 'false' - description: The maximum number of objects to return. name: max_items - description: 'The field name to search for. Possible values: "ID", "parentID", "name", "description", "recommendationScanMode", and "autoRequiresUpdate".' isArray: true name: field_name required: true auto: PREDEFINED predefined: - ID - parentID - name - description - recommendationScanMode - autoRequiresUpdate - auto: PREDEFINED required: true description: 'The type of the field. Possible values: "boolean", "numeric", "choice", "id", and "string".' name: field_type predefined: - boolean - numeric - choice - id - string - auto: PREDEFINED description: 'The comparison operation to use. Possible values: "less-than", "less-than-or-equal", "equal", "greater-than-or-equal", "greater-than", and "not-equal".' name: operation predefined: - less-than - less-than-or-equal - equal - greater-than-or-equal - greater-than - not-equal required: true - description: The value to compare against the field name. name: value required: true - description: If true, forces the response objects to be sorted by ID, overriding the default sort order. name: sort_by_object_id description: Search for specific policies by some field name with a certain type. Every field has a specific type. It can be a simple type like a string, a numeric or a boolean. However, it can also be a choice, which is a string with specific options (enumeration). To search, you must provide the field_name and field_type, the operation to perform, and the value to search. name: trendmicro-search-policies outputs: - contextPath: TrendMicro.Policies.parentID description: ID of the parent policy. type: integer - contextPath: TrendMicro.Policies.name description: Name of the policy. type: string - contextPath: TrendMicro.Policies.description description: Description of the policy. type: string - contextPath: TrendMicro.Policies.recommendationScanMode description: Enable or disable ongoing recommendation scans for computers assigned this policy. type: string - contextPath: TrendMicro.Policies.autoRequiresUpdate description: Automatically update computers assigned this policy when the configuration changes. type: string - arguments: - auto: PREDEFINED defaultValue: 'false' description: 'Whether to display only overrides defined for the current policy. Possible values: "true" and "false".' name: overrides predefined: - 'true' - 'false' - description: ID of the parent policy. name: parent_id - description: Name of the policy. name: name required: true - description: Description of the policy. name: description - auto: PREDEFINED description: 'Enable or disable ongoing recommendation scans for computers assigned this policy. Possible values: "off" and "ongoing".' name: recommendation_scan_mode predefined: - 'off' - 'ongoing' - auto: PREDEFINED description: 'Automatically update computers assigned this policy when the configuration changes. Posssible values: "off" and "on".' name: auto_requires_update predefined: - 'off' - 'on' description: Create a new policy. name: trendmicro-create-policy outputs: - contextPath: TrendMicro.Policies.parentID description: ID of the parent policy. type: integer - contextPath: TrendMicro.Policies.name description: Name of the policy. type: string - contextPath: TrendMicro.Policies.description description: Description of the policy. type: string - contextPath: TrendMicro.Policies.recommendationScanMode description: Enable or disable ongoing recommendation scans for computers assigned this policy. type: string - contextPath: TrendMicro.Policies.autoRequiresUpdate description: Automatically update computers assigned this policy when the configuration changes. type: string - arguments: - description: The computer ID. The ID can be obtained from the trendmicro-list-computers and trendmicro-search-computers commands. name: computer_id required: true - description: The firewall rule ID to remove. The ID can be obtained from the trendmicro-list-firewall-rules and trendmicro-search-firewall-rules commands. name: firewall_rule_id required: true description: Remove a firewall rule ID from a certain computer. name: trendmicro-remove-firewall-rule-id-from-computer - description: List default policy settings. name: trendmicro-list-default-policy-settings outputs: - contextPath: TrendMicro.DefaultPolicySettings.name description: The name of the default policy setting. type: string - contextPath: TrendMicro.DefaultPolicySettings.value description: The value of the default policy setting. type: string - arguments: - description: The name of the default setting. name: name required: true auto: PREDEFINED predefined: - logInspectionSettingSeverityClippingAgentEventSendSyslogLevelMin - firewallSettingEngineOptionConnectionsCleanupMax - firewallSettingEngineOptionVerifyTcpChecksumEnabled - antiMalwareSettingScanCacheOnDemandConfigId - applicationControlSettingSharedRulesetId - webReputationSettingSmartProtectionServerConnectionLostWarningEnabled - applicationControlSettingExecutionEnforcementLevel - webReputationSettingBlockedUrlDomains - firewallSettingEngineOptionSynSentTimeout - platformSettingAgentSelfProtectionPassword - firewallSettingReconnaissanceBlockTcpXmasAttackDuration - intrusionPreventionSettingVirtualAndContainerNetworkScanEnabled - logInspectionSettingSyslogConfigId - firewallSettingEngineOptionDebugModeEnabled - firewallSettingVirtualAndContainerNetworkScanEnabled - antiMalwareSettingFileHashSha256Enabled - firewallSettingReconnaissanceNotifyFingerprintProbeEnabled - firewallSettingEventLogFileRetainNum - firewallSettingAntiEvasionCheckTcpPawsZero - antiMalwareSettingConnectedThreatDefenseUseControlManagerSuspiciousObjectListEnabled - intrusionPreventionSettingEngineOptionFragmentedIpKeepMax - firewallSettingEngineOptionDrop6To4BogonsAddressesEnabled - logInspectionSettingSeverityClippingAgentEventStoreLevelMin - platformSettingScanCacheConcurrencyMax - antiMalwareSettingSyslogConfigId - firewallSettingAntiEvasionTcpPawsWindowPolicy - firewallSettingReconnaissanceDetectTcpXmasAttackEnabled - applicationControlSettingRulesetMode - antiMalwareSettingSmartProtectionGlobalServerUseProxyEnabled - webReputationSettingSmartProtectionLocalServerAllowOffDomainGlobal - integrityMonitoringSettingCombinedModeProtectionSource - firewallSettingEngineOptionCloseWaitTimeout - platformSettingScanOpenPortListId - platformSettingAgentSelfProtectionPasswordEnabled - firewallSettingEngineOptionAckTimeout - firewallSettingEventLogFileCachedEntriesStaleTime - firewallSettingCombinedModeProtectionSource - platformSettingAgentEventsSendInterval - platformSettingInactiveAgentCleanupOverrideEnabled - firewallSettingFailureResponseEngineSystem - platformSettingRelayState - firewallSettingEngineOptionDropEvasiveRetransmitEnabled - activityMonitoringSettingIndicatorEnabled - intrusionPreventionSettingEngineOptionFragmentedIpTimeout - firewallSettingAntiEvasionCheckTcpZeroFlags - webReputationSettingSmartProtectionGlobalServerUseProxyEnabled - intrusionPreventionSettingNsxSecurityTaggingPreventModeLevel - firewallSettingReconnaissanceNotifyTcpXmasAttackEnabled - firewallSettingEngineOptionUdpTimeout - webReputationSettingSmartProtectionLocalServerEnabled - firewallSettingEngineOptionTcpMssLimit - firewallSettingEngineOptionColdStartTimeout - firewallSettingEngineOptionEstablishedTimeout - antiMalwareSettingIdentifiedFilesSpaceMaxMbytes - firewallSettingEngineOptionAllowNullIpEnabled - platformSettingNotificationsSuppressPopupsEnabled - firewallSettingAntiEvasionCheckTcpRstFinFlags - firewallSettingEngineOptionDisconnectTimeout - firewallSettingEngineOptionCloseTimeout - firewallSettingEngineOptionTunnelDepthMaxExceededAction - firewallSettingReconnaissanceDetectTcpNullScanEnabled - platformSettingSmartProtectionAntiMalwareGlobalServerProxyId - firewallSettingEngineOptionFilterIpv4Tunnels - webReputationSettingSmartProtectionLocalServerUrls - firewallSettingEngineOptionLogOnePacketPeriod - firewallSettingEngineOptionFilterIpv6Tunnels - firewallSettingAntiEvasionCheckTcpCongestionFlags - platformSettingHeartbeatMissedAlertThreshold - intrusionPreventionSettingEngineOptionsEnabled - firewallSettingEngineOptionConnectionsNumUdpMax - integrityMonitoringSettingAutoApplyRecommendationsEnabled - firewallSettingEngineOptionTunnelDepthMax - firewallSettingEngineOptionDropUnknownSslProtocolEnabled - antiMalwareSettingNsxSecurityTaggingValue - intrusionPreventionSettingLogDataRuleFirstMatchEnabled - firewallSettingEngineOptionLoggingPolicy - platformSettingTroubleshootingLoggingLevel - antiMalwareSettingVirtualApplianceOnDemandScanCacheEntriesMax - webReputationSettingCombinedModeProtectionSource - firewallSettingEngineOptionClosingTimeout - firewallSettingAntiEvasionCheckPaws - intrusionPreventionSettingAutoApplyRecommendationsEnabled - firewallSettingReconnaissanceDetectFingerprintProbeEnabled - antiMalwareSettingNsxSecurityTaggingRemoveOnCleanScanEnabled - firewallSettingEngineOptionLogPacketLengthMax - firewallSettingEngineOptionDropTeredoAnomaliesEnabled - webReputationSettingSecurityLevel - firewallSettingEngineOptionDropIpv6SiteLocalAddressesEnabled - activityMonitoringSettingActivityEnabled - firewallSettingEngineOptionStrictTerodoPortCheckEnabled - webReputationSettingBlockedUrlKeywords - webReputationSettingSyslogConfigId - firewallSettingFailureResponsePacketSanityCheck - firewallSettingNetworkEngineMode - firewallSettingEventLogFileSizeMax - antiMalwareSettingMalwareScanMultithreadedProcessingEnabled - firewallSettingReconnaissanceDetectTcpSynFinScanEnabled - firewallSettingEngineOptionDropIpZeroPayloadEnabled - firewallSettingEngineOptionBlockIpv6Agent8AndEarlierEnabled - intrusionPreventionSettingEngineOptionFragmentedIpPacketSendIcmpEnabled - antiMalwareSettingPredictiveMachineLearningExceptions - firewallSettingEngineOptionLogEventsPerSecondMax - firewallSettingEngineOptionSslSessionTime - antiMalwareSettingBehaviorMonitoringScanExclusionList - antiMalwareSettingSmartProtectionGlobalServerEnabled - firewallSettingEngineOptionLogOnePacketWithinPeriodEnabled - firewallSettingEngineOptionGenerateConnectionEventsIcmpEnabled - platformSettingHeartbeatInactiveVmOfflineAlertEnabled - webReputationSettingSmartProtectionWebReputationGlobalServerProxyId - antiMalwareSettingNsxSecurityTaggingEnabled - firewallSettingAntiEvasionCheckFragmentedPackets - firewallSettingEngineOptionConnectionsNumIcmpMax - firewallSettingAntiEvasionCheckTcpSplitHandshake - antiMalwareSettingCombinedModeProtectionSource - firewallSettingEngineOptionEventNodesMax - webReputationSettingMonitorPortListId - applicationControlSettingSyslogConfigId - firewallSettingAntiEvasionCheckOutNoConnection - firewallSettingEngineOptionBlockIpv6Agent9AndLaterEnabled - integrityMonitoringSettingVirtualApplianceOptimizationScanCacheEntriesMax - firewallSettingReconnaissanceNotifyTcpNullScanEnabled - firewallSettingEngineOptionIgnoreStatusCode1 - firewallSettingEngineOptionIgnoreStatusCode0 - firewallSettingEngineOptionIgnoreStatusCode2 - firewallSettingEngineOptionSslSessionSize - antiMalwareSettingScanCacheRealTimeConfigId - platformSettingRecommendationOngoingScansInterval - platformSettingSmartProtectionGlobalServerUseProxyEnabled - firewallSettingInterfaceLimitOneActiveEnabled - firewallSettingAntiEvasionCheckTcpChecksum - firewallSettingEngineOptionDropIpv6ExtType0Enabled - antiMalwareSettingScanFileSizeMaxMbytes - firewallSettingEngineOptionGenerateConnectionEventsTcpEnabled - antiMalwareSettingFileHashSizeMaxMbytes - firewallSettingEventLogFileCachedEntriesLifeTime - platformSettingSmartProtectionGlobalServerProxyId - logInspectionSettingAutoApplyRecommendationsEnabled - antiMalwareSettingConnectedThreatDefenseSuspiciousFileDdanSubmissionEnabled - webReputationSettingBlockingPageLink - firewallSettingSyslogConfigId - platformSettingAgentCommunicationsDirection - integrityMonitoringSettingScanCacheConfigId - antiMalwareSettingDocumentExploitProtectionRuleExceptions - firewallSettingAntiEvasionCheckTcpSynWithData - antiMalwareSettingFileHashEnabled - firewallSettingReconnaissanceBlockFingerprintProbeDuration - firewallSettingEngineOptionDropIpv6BogonsAddressesEnabled - firewallSettingEngineOptionBootStartTimeout - firewallSettingEngineOptionConnectionsNumTcpMax - firewallSettingAntiEvasionSecurityPosture - firewallSettingInterfacePatterns - firewallSettingInterfaceIsolationEnabled - antiMalwareSettingVirtualApplianceRealTimeScanCacheEntriesMax - firewallSettingEventsOutOfAllowedPolicyEnabled - firewallSettingAntiEvasionCheckEvasiveRetransmit - firewallSettingEngineOptionIcmpTimeout - integrityMonitoringSettingSyslogConfigId - firewallSettingEngineOptionConnectionCleanupTimeout - antiMalwareSettingSmartProtectionLocalServerAllowOffDomainGlobal - firewallSettingReconnaissanceNotifyTcpSynFinScanEnabled - firewallSettingEngineOptionErrorTimeout - webReputationSettingAllowedUrls - firewallSettingReconnaissanceNotifyNetworkOrPortScanEnabled - firewallSettingEngineOptionFinWait1Timeout - firewallSettingEngineOptionGenerateConnectionEventsUdpEnabled - activityMonitoringSettingSyslogConfigId - firewallSettingAntiEvasionCheckTcpSynRstFlags - antiMalwareSettingSpywareApprovedList - firewallSettingAntiEvasionCheckTcpUrgentFlags - intrusionPreventionSettingNsxSecurityTaggingDetectModeLevel - intrusionPreventionSettingEngineOptionFragmentedIpUnconcernedMacAddressBypassEnabled - firewallSettingEngineOptionLogAllPacketDataEnabled - firewallSettingAntiEvasionCheckTcpSynFinFlags - platformSettingHeartbeatInterval - firewallSettingEngineOptionFragmentSizeMin - antiMalwareSettingSmartProtectionServerConnectionLostWarningEnabled - firewallSettingReconnaissanceBlockNetworkOrPortScanDuration - integrityMonitoringSettingContentHashAlgorithm - antiMalwareSettingSmartScanState - firewallSettingConfigPackageExceedsAlertMaxEnabled - platformSettingEnvironmentVariableOverrides - firewallSettingEngineOptionFragmentOffsetMin - antiMalwareSettingSmartProtectionLocalServerUrls - firewallSettingEngineOptionSynRcvdTimeout - firewallSettingEventLogFileCachedEntriesNum - firewallSettingEngineOptionForceAllowIcmpType3Code4 - firewallSettingReconnaissanceBlockTcpNullScanDuration - platformSettingSmartProtectionGlobalServerEnabled - integrityMonitoringSettingRealtimeEnabled - firewallSettingEngineOptionLastAckTimeout - firewallSettingReconnaissanceExcludeIpListId - platformSettingAgentSelfProtectionEnabled - firewallSettingEngineOptionDropIpv6ReservedAddressesEnabled - firewallSettingAntiEvasionCheckFinNoConnection - firewallSettingEngineOptionDebugPacketNumMax - firewallSettingEngineOptionBypassCiscoWaasConnectionsEnabled - firewallSettingReconnaissanceEnabled - platformSettingHeartbeatLocalTimeShiftAlertThreshold - antiMalwareSettingFileHashMd5Enabled - firewallSettingReconnaissanceDetectNetworkOrPortScanEnabled - firewallSettingEngineOptionSilentTcpConnectionDropEnabled - firewallSettingEngineOptionBlockSameSrcDstIpEnabled - firewallSettingEngineOptionForceAllowDhcpDns - firewallSettingReconnaissanceIncludeIpListId - firewallSettingEngineOptionsEnabled - firewallSettingReconnaissanceBlockTcpSynFinScanDuration - webReputationSettingSecurityBlockUntestedPagesEnabled - webReputationSettingAllowedUrlDomains - firewallSettingEventLogFileIgnoreSourceIpListId - firewallSettingEngineOptionDropIpv6FragmentsLowerThanMinMtuEnabled - platformSettingAutoAssignNewIntrusionPreventionRulesEnabled - firewallSettingAntiEvasionCheckRstNoConnection - webReputationSettingBlockedUrls - platformSettingCombinedModeNetworkGroupProtectionSource - webReputationSettingAlertingEnabled - antiMalwareSettingNsxSecurityTaggingOnRemediationFailureEnabled - integrityMonitoringSettingCpuUsageLevel - platformSettingAutoUpdateAntiMalwareEngineEnabled - intrusionPreventionSettingCombinedModeProtectionSource description: Get information about a certain default policy setting. name: trendmicro-get-default-policy-setting outputs: - contextPath: TrendMicro.DefaultPolicySettings.name description: The name of the default policy setting. type: string - contextPath: TrendMicro.DefaultPolicySettings.value description: The value of the default policy setting. type: string - arguments: - description: The name of the default setting. name: name required: true - description: The new value of the default setting. name: value required: true description: Modify the value of a certain default policy setting. name: trendmicro-modify-default-policy-setting outputs: - contextPath: TrendMicro.DefaultPolicySettings.name description: The name of the default policy setting. type: string - contextPath: TrendMicro.DefaultPolicySettings.value description: The value of the default policy setting. - arguments: - description: The name of the default setting. name: name required: true description: Reset the value of a certain default policy setting. name: trendmicro-reset-default-policy-setting outputs: - contextPath: TrendMicro.DefaultPolicySettings.name description: The name of the default policy setting. - contextPath: TrendMicro.DefaultPolicySettings.value description: The value of the default policy setting. - arguments: - description: The name of the scheduled task. name: name required: true - description: The type of the scheduled task. name: type required: true predefined: - scan-for-open-ports - scan-for-recommendations - scan-for-integrity-changes - scan-for-malware auto: PREDEFINED - description: The computer ID to create the task on. Can be retrieved from the trendmicro-list-computers command. name: computer_id required: true description: Creates a once-only scheduled task with a specific computer ID and runs it. name: trendmicro-create-onceonly-scan-scheduled-task outputs: - contextPath: TrendMicro.ScheduledTask.name description: The name of the scheduled task. type: String - contextPath: TrendMicro.ScheduledTask.type description: The type of the scheduled task. type: String - contextPath: TrendMicro.ScheduledTask.scheduleDetails.timeZone description: The timezone of the scheduled task. type: String - contextPath: TrendMicro.ScheduledTask.scheduleDetails.recurrenceType description: The recurrence type of the scheduled task. type: String - contextPath: TrendMicro.ScheduledTask.scheduleDetails.onceOnlyScheduleParameters.startTime description: The start time of the scheduled task. type: Number - contextPath: TrendMicro.ScheduledTask.enabled description: Whether the scheduled task is enabled. type: Boolean - contextPath: TrendMicro.ScheduledTask.nextRunTime description: The next run time of the scheduled task. type: Date - contextPath: TrendMicro.ScheduledTask.scanForMalwareTaskParameters.computerFilter.type description: The type of the computer filter of the scheduled task. type: String - contextPath: TrendMicro.ScheduledTask.scanForMalwareTaskParameters.computerFilter.computerID description: The computer ID of the scheduled task. type: Number - contextPath: TrendMicro.ScheduledTask.scanForMalwareTaskParameters.timeout description: The timeout for the scheduled task. type: String - contextPath: TrendMicro.ScheduledTask.ID description: The ID of the scheduled task. type: Number - arguments: - description: A comma seperated of task-IDs to delete. name: task_ids required: true isArray: true description: Deletes a scheduled task. name: trendmicro-delete-scheduled-task outputs: [] - arguments: - description: The ID of the task to retrieve. name: task_id required: false description: Get information on all scheduled tasks. name: trendmicro-list-scheduled-task outputs: - contextPath: TrendMicro.ScheduledTask.name description: The name of the scheduled task. type: String - contextPath: TrendMicro.ScheduledTask.type description: The type of the scheduled task. type: String - contextPath: TrendMicro.ScheduledTask.scheduleDetails.timeZone description: The timezone of the scheduled task. type: String - contextPath: TrendMicro.ScheduledTask.scheduleDetails.recurrenceType description: The recurrence type of the scheduled task. type: String - contextPath: TrendMicro.ScheduledTask.scheduleDetails.onceOnlyScheduleParameters.startTime description: The start time of the scheduled task. type: Number - contextPath: TrendMicro.ScheduledTask.enabled description: Whether the scheduled task is enabled. type: Boolean - contextPath: TrendMicro.ScheduledTask.nextRunTime description: The next run time of the scheduled task. type: Date - contextPath: TrendMicro.ScheduledTask.scanForMalwareTaskParameters.computerFilter.type description: The type of the computer filter of the scheduled task. type: String - contextPath: TrendMicro.ScheduledTask.scanForMalwareTaskParameters.computerFilter.computerID description: The computer ID of the scheduled task. type: Number - contextPath: TrendMicro.ScheduledTask.scanForMalwareTaskParameters.timeout description: The timeout for the scheduled task. type: String - contextPath: TrendMicro.ScheduledTask.ID description: The ID of the scheduled task. type: Number dockerimage: demisto/python3:3.12.13.10116658 runonce: false subtype: python3 type: python tests: - No tests fromversion: 6.0.0