Forcepoint NGFW Modeling Rule

Modeling Rule

Forcepoint Web Security

Details

IDForcepoint_NGFW_ModelingRule
From Version6.10.0

Schema

forcepoint_firewall_raw

Field Type Array?
act string
app string
cefDeviceEventClassId string
cefDeviceVersion string
cefName string
cefSeverity string
cefVersion string
destinationServiceName string
deviceExternalId string
deviceFacility string
dpt int
dst string
dvc string
dvchost string
in string
out string
proto string
request string
requestURL string
spt int
src string
suser string
{
    "forcepoint_firewall_raw": {
      "dvchost": {
        "type": "string",
        "is_array": false
      },
      "src": {
        "type": "string",
        "is_array": false
      },
      "dst": {
        "type": "string",
        "is_array": false
      },
      "dpt": {
        "type": "int",
        "is_array": false
      },
      "spt": {
        "type": "int",
        "is_array": false
      },
      "in": {
        "type": "string",
        "is_array": false
      },
      "act": {
        "type": "string",
        "is_array": false
      },
      "app": {
        "type": "string",
        "is_array": false
      },
      "dvc": {
        "type": "string",
        "is_array": false
      },
      "out": {
        "type": "string",
        "is_array": false
      },
      "suser": {
        "type": "string",
        "is_array": false
      },
      "cefName": {
        "type": "string",
        "is_array": false
      },
      "request": {
        "type": "string",
        "is_array": false
      },
      "cefVersion": {
        "type": "string",
        "is_array": false
      },
      "requestURL": {
        "type": "string",
        "is_array": false
      },
      "cefSeverity": {
        "type": "string",
        "is_array": false
      },
      "deviceFacility": {
        "type": "string",
        "is_array": false
      },
      "cefDeviceVersion": {
        "type": "string",
        "is_array": false
      },
      "deviceExternalId": {
        "type": "string",
        "is_array": false
      },
      "cefDeviceEventClassId": {
        "type": "string",
        "is_array": false
      },
      "destinationServiceName": {
        "type": "string",
        "is_array": false
      },                              
      "proto": {
        "type": "string",
        "is_array": false
      }
    }
  }