Skip to content

/AWS1/CL_R5GUPDATEFWALLRULEOUT

UpdateFirewallRuleOutput

CONSTRUCTOR

IMPORTING

Required arguments:

iv_action TYPE /AWS1/R5GFIREWALLRULEACTION /AWS1/R5GFIREWALLRULEACTION

The action that DNS Firewall should take on a DNS query when it matches one of the domains in the rule's domain list, or a threat in a DNS Firewall Advanced rule.

iv_createdat TYPE /AWS1/R5GISO8601TIMESTRING /AWS1/R5GISO8601TIMESTRING

The time and date the Firewall rule was created.

iv_id TYPE /AWS1/R5GRESOURCEID /AWS1/R5GRESOURCEID

The ID of the Firewall rule.

iv_name TYPE /AWS1/R5GRESOURCENAME /AWS1/R5GRESOURCENAME

The name of the Firewall rule.

iv_priority TYPE /AWS1/R5GFIREWALLRULEPRIORITY /AWS1/R5GFIREWALLRULEPRIORITY

The setting that determines the processing order of the rule in the rule group. DNS Firewall processes the rules in a rule group by order of priority, starting from the lowest setting.

iv_dnsviewid TYPE /AWS1/R5GRESOURCEID /AWS1/R5GRESOURCEID

The ID of the DNS view the Firewall rule is associated with.

iv_status TYPE /AWS1/R5GCRRESOURCESTATUS /AWS1/R5GCRRESOURCESTATUS

The operational status of the firewall rule.

iv_updatedat TYPE /AWS1/R5GISO8601TIMESTRING /AWS1/R5GISO8601TIMESTRING

The time and date the rule was updated.

Optional arguments:

iv_blockoverridednstype TYPE /AWS1/R5GBLOCKOVRDDNSQUERYTYPE /AWS1/R5GBLOCKOVRDDNSQUERYTYPE

The DNS record's type. This determines the format of the record value that you provided in BlockOverrideDomain. Used for the rule action BLOCK with a BlockResponse setting of OVERRIDE.

iv_blockoverridedomain TYPE /AWS1/R5GDOMAIN /AWS1/R5GDOMAIN

The custom DNS record to send back in response to the query. Used for the rule action BLOCK with a BlockResponse setting of OVERRIDE.

iv_blockoverridettl TYPE /AWS1/R5GBLOCKOVERRIDETTL /AWS1/R5GBLOCKOVERRIDETTL

The recommended amount of time, in seconds, for the DNS resolver or web browser to cache the provided override record. Used for the rule action BLOCK with a BlockResponse setting of OVERRIDE.

iv_blockresponse TYPE /AWS1/R5GFIREWALLBLOCKRESPONSE /AWS1/R5GFIREWALLBLOCKRESPONSE

The way that you want DNS Firewall to block the request. Used for the rule action setting BLOCK.

iv_confidencethreshold TYPE /AWS1/R5GCONFIDENCETHRESHOLD /AWS1/R5GCONFIDENCETHRESHOLD

The confidence threshold for DNS Firewall Advanced. You must provide this value when you create a DNS Firewall Advanced rule.

iv_description TYPE /AWS1/R5GRESOURCEDESCRIPTION /AWS1/R5GRESOURCEDESCRIPTION

The description of the Firewall rule.

iv_dnsadvancedprotection TYPE /AWS1/R5GDNSADVANCEDPROTECTION /AWS1/R5GDNSADVANCEDPROTECTION

The type of the DNS Firewall Advanced rule. Valid values are DGA and DNS_TUNNELING.

iv_firewalldomainlistid TYPE /AWS1/R5GRESOURCEID /AWS1/R5GRESOURCEID

The ID of the domain list associated with the Firewall rule.

iv_querytype TYPE /AWS1/R5GDNSQUERYTYPE /AWS1/R5GDNSQUERYTYPE

The DNS query type you want the rule to evaluate.


Queryable Attributes

action

The action that DNS Firewall should take on a DNS query when it matches one of the domains in the rule's domain list, or a threat in a DNS Firewall Advanced rule.

Accessible with the following methods

Method Description
GET_ACTION() Getter for ACTION, with configurable default
ASK_ACTION() Getter for ACTION w/ exceptions if field has no value
HAS_ACTION() Determine if ACTION has a value

blockOverrideDnsType

The DNS record's type. This determines the format of the record value that you provided in BlockOverrideDomain. Used for the rule action BLOCK with a BlockResponse setting of OVERRIDE.

Accessible with the following methods

Method Description
GET_BLOCKOVERRIDEDNSTYPE() Getter for BLOCKOVERRIDEDNSTYPE, with configurable default
ASK_BLOCKOVERRIDEDNSTYPE() Getter for BLOCKOVERRIDEDNSTYPE w/ exceptions if field has n
HAS_BLOCKOVERRIDEDNSTYPE() Determine if BLOCKOVERRIDEDNSTYPE has a value

blockOverrideDomain

The custom DNS record to send back in response to the query. Used for the rule action BLOCK with a BlockResponse setting of OVERRIDE.

Accessible with the following methods

Method Description
GET_BLOCKOVERRIDEDOMAIN() Getter for BLOCKOVERRIDEDOMAIN, with configurable default
ASK_BLOCKOVERRIDEDOMAIN() Getter for BLOCKOVERRIDEDOMAIN w/ exceptions if field has no
HAS_BLOCKOVERRIDEDOMAIN() Determine if BLOCKOVERRIDEDOMAIN has a value

blockOverrideTtl

The recommended amount of time, in seconds, for the DNS resolver or web browser to cache the provided override record. Used for the rule action BLOCK with a BlockResponse setting of OVERRIDE.

Accessible with the following methods

Method Description
GET_BLOCKOVERRIDETTL() Getter for BLOCKOVERRIDETTL, with configurable default
ASK_BLOCKOVERRIDETTL() Getter for BLOCKOVERRIDETTL w/ exceptions if field has no va
HAS_BLOCKOVERRIDETTL() Determine if BLOCKOVERRIDETTL has a value

blockResponse

The way that you want DNS Firewall to block the request. Used for the rule action setting BLOCK.

Accessible with the following methods

Method Description
GET_BLOCKRESPONSE() Getter for BLOCKRESPONSE, with configurable default
ASK_BLOCKRESPONSE() Getter for BLOCKRESPONSE w/ exceptions if field has no value
HAS_BLOCKRESPONSE() Determine if BLOCKRESPONSE has a value

confidenceThreshold

The confidence threshold for DNS Firewall Advanced. You must provide this value when you create a DNS Firewall Advanced rule.

Accessible with the following methods

Method Description
GET_CONFIDENCETHRESHOLD() Getter for CONFIDENCETHRESHOLD, with configurable default
ASK_CONFIDENCETHRESHOLD() Getter for CONFIDENCETHRESHOLD w/ exceptions if field has no
HAS_CONFIDENCETHRESHOLD() Determine if CONFIDENCETHRESHOLD has a value

createdAt

The time and date the Firewall rule was created.

Accessible with the following methods

Method Description
GET_CREATEDAT() Getter for CREATEDAT, with configurable default
ASK_CREATEDAT() Getter for CREATEDAT w/ exceptions if field has no value
HAS_CREATEDAT() Determine if CREATEDAT has a value

description

The description of the Firewall rule.

Accessible with the following methods

Method Description
GET_DESCRIPTION() Getter for DESCRIPTION, with configurable default
ASK_DESCRIPTION() Getter for DESCRIPTION w/ exceptions if field has no value
HAS_DESCRIPTION() Determine if DESCRIPTION has a value

dnsAdvancedProtection

The type of the DNS Firewall Advanced rule. Valid values are DGA and DNS_TUNNELING.

Accessible with the following methods

Method Description
GET_DNSADVANCEDPROTECTION() Getter for DNSADVANCEDPROTECTION, with configurable default
ASK_DNSADVANCEDPROTECTION() Getter for DNSADVANCEDPROTECTION w/ exceptions if field has
HAS_DNSADVANCEDPROTECTION() Determine if DNSADVANCEDPROTECTION has a value

firewallDomainListId

The ID of the domain list associated with the Firewall rule.

Accessible with the following methods

Method Description
GET_FIREWALLDOMAINLISTID() Getter for FIREWALLDOMAINLISTID, with configurable default
ASK_FIREWALLDOMAINLISTID() Getter for FIREWALLDOMAINLISTID w/ exceptions if field has n
HAS_FIREWALLDOMAINLISTID() Determine if FIREWALLDOMAINLISTID has a value

id

The ID of the Firewall rule.

Accessible with the following methods

Method Description
GET_ID() Getter for ID, with configurable default
ASK_ID() Getter for ID w/ exceptions if field has no value
HAS_ID() Determine if ID has a value

name

The name of the Firewall rule.

Accessible with the following methods

Method Description
GET_NAME() Getter for NAME, with configurable default
ASK_NAME() Getter for NAME w/ exceptions if field has no value
HAS_NAME() Determine if NAME has a value

priority

The setting that determines the processing order of the rule in the rule group. DNS Firewall processes the rules in a rule group by order of priority, starting from the lowest setting.

Accessible with the following methods

Method Description
GET_PRIORITY() Getter for PRIORITY, with configurable default
ASK_PRIORITY() Getter for PRIORITY w/ exceptions if field has no value
HAS_PRIORITY() Determine if PRIORITY has a value

dnsViewId

The ID of the DNS view the Firewall rule is associated with.

Accessible with the following methods

Method Description
GET_DNSVIEWID() Getter for DNSVIEWID, with configurable default
ASK_DNSVIEWID() Getter for DNSVIEWID w/ exceptions if field has no value
HAS_DNSVIEWID() Determine if DNSVIEWID has a value

queryType

The DNS query type you want the rule to evaluate.

Accessible with the following methods

Method Description
GET_QUERYTYPE() Getter for QUERYTYPE, with configurable default
ASK_QUERYTYPE() Getter for QUERYTYPE w/ exceptions if field has no value
HAS_QUERYTYPE() Determine if QUERYTYPE has a value

status

The operational status of the firewall rule.

Accessible with the following methods

Method Description
GET_STATUS() Getter for STATUS, with configurable default
ASK_STATUS() Getter for STATUS w/ exceptions if field has no value
HAS_STATUS() Determine if STATUS has a value

updatedAt

The time and date the rule was updated.

Accessible with the following methods

Method Description
GET_UPDATEDAT() Getter for UPDATEDAT, with configurable default
ASK_UPDATEDAT() Getter for UPDATEDAT w/ exceptions if field has no value
HAS_UPDATEDAT() Determine if UPDATEDAT has a value