STATE_DISABLED STATE_ENABLED IP_INTELLIGENCE_POLICY_MATCH_DIRECTION_UNKNOWN IP_INTELLIGENCE_POLICY_MATCH_DIRECTION_SOURCE IP_INTELLIGENCE_POLICY_MATCH_DIRECTION_DESTINATION IP_INTELLIGENCE_POLICY_MATCH_DIRECTION_SOURCE_AND_DESTINATION IP_INTELLIGENCE_POLICY_ACTION_TYPE_UNKNOWN IP_INTELLIGENCE_POLICY_ACTION_TYPE_USE_PARENT IP_INTELLIGENCE_POLICY_ACTION_TYPE_ALLOW IP_INTELLIGENCE_POLICY_ACTION_TYPE_DROP IP_INTELLIGENCE_POLICY_BLACKLIST_CATEGORY_LOG_TYPE_UNKNOWN IP_INTELLIGENCE_POLICY_BLACKLIST_CATEGORY_LOG_TYPE_USE_PARENT IP_INTELLIGENCE_POLICY_BLACKLIST_CATEGORY_LOG_TYPE_YES IP_INTELLIGENCE_POLICY_BLACKLIST_CATEGORY_LOG_TYPE_NO Gets a list of all policies. An IP intelligence policy is comprised of three logical groups of settings: list of feed lists, enforcement and logging settings per blacklist category, and default enforcement and logging settings for blacklist categories.

Creates a set of policies.

Deletes the specified policies.

Deletes all user defined policies.

Sets the default action types for the specified policies. Specifies a default enforcement action which will be performed on the matched packet unless an implicit action is specified for one of the blacklist categories the packet's IP is categorized with. If the packet's IP is listed in a white list the action is always accept.

Gets the default action types for the specified policies.

Sets the log blacklist hit states for the specified policies. Specifies whether a log message will be generated if packet's source IP is categorized with blacklist only (but not whitelist).

Gets the log blacklist hit states for the specified policies.

Sets the log blacklist whitelist both hit states for the specified policies. Specifies whether log message will be generated if packet's source IP is categorized with both blacklist and whitelist.

Gets the log blacklist whitelist both hit states for the specified policies.

Sets the descriptions for the specified policies. This is an arbitrary field which can be used for any purpose.

Gets the descriptions for the specified policies.

Gets categories for the specified policies. You can add or remove blacklist categories for the policy. Each category specifies the action, the log message for blacklist hit only setting, and the log message for blacklist and whitelist both hit setting.

Adds a list of categories for the specified policies.

Removes a list of categories from the specified policies.

Removes all categories from the specified policies.

Sets the action types for the specified blacklist categories. Specifies what enforcement action will be applied if the packet is categorized with this blacklist category. If the packet is categorized with more than one blacklist the most restrictive action will be applied.

Gets the action types for the specified blacklist categories.

Sets the log blacklist hit only settings for the specified blacklist categories. Specifies if a log message will be generated if the packet is categorized with this blacklist and no whitelists includes this packet's IP.

Gets the log blacklist hit only settings for the specified blacklist categories.

Sets the log blacklist whitelist hit settings for the specified blacklist categories. Specifies if a log message will be generated if the packet is categorized with this blacklist and the packet's IP is listed in a whitelist.

Gets the log blacklist whitelist hit settings for the specified blacklist categories.

Sets the descriptions for the specified blacklist categories. This is an arbitrary field which can be used for any purpose.

Gets the descriptions for the specified blacklist categories.

Gets feed lists for the specified policies. You can add or remove feed lists for the policy. A feed list is a list of URL feeds.

Adds a list of feed lists for the specified policies.

Removes a list of feed lists from the specified policies.

Removes all feed lists from the specified policies.

Sets the match directions for the specified blacklist categories. Specifies the match direction for this blacklist category within this policy. This can be set to source, destination, or both.

Gets the match directions for the specified blacklist categories.

Gets the version information for this interface.

Gets a list of all policies. An IP intelligence policy is comprised of three logical groups of settings: list of feed lists, enforcement and logging settings per blacklist category, and default enforcement and logging settings for blacklist categories.

Creates a set of policies.

Deletes the specified policies.

Deletes all user defined policies.

Sets the default action types for the specified policies. Specifies a default enforcement action which will be performed on the matched packet unless an implicit action is specified for one of the blacklist categories the packet's IP is categorized with. If the packet's IP is listed in a white list the action is always accept.

Gets the default action types for the specified policies.

Sets the log blacklist hit states for the specified policies. Specifies whether a log message will be generated if packet's source IP is categorized with blacklist only (but not whitelist).

Gets the log blacklist hit states for the specified policies.

Sets the log blacklist whitelist both hit states for the specified policies. Specifies whether log message will be generated if packet's source IP is categorized with both blacklist and whitelist.

Gets the log blacklist whitelist both hit states for the specified policies.

Sets the descriptions for the specified policies. This is an arbitrary field which can be used for any purpose.

Gets the descriptions for the specified policies.

Gets categories for the specified policies. You can add or remove blacklist categories for the policy. Each category specifies the action, the log message for blacklist hit only setting, and the log message for blacklist and whitelist both hit setting.

Adds a list of categories for the specified policies.

Removes a list of categories from the specified policies.

Removes all categories from the specified policies.

Sets the action types for the specified blacklist categories. Specifies what enforcement action will be applied if the packet is categorized with this blacklist category. If the packet is categorized with more than one blacklist the most restrictive action will be applied.

Gets the action types for the specified blacklist categories.

Sets the log blacklist hit only settings for the specified blacklist categories. Specifies if a log message will be generated if the packet is categorized with this blacklist and no whitelists includes this packet's IP.

Gets the log blacklist hit only settings for the specified blacklist categories.

Sets the log blacklist whitelist hit settings for the specified blacklist categories. Specifies if a log message will be generated if the packet is categorized with this blacklist and the packet's IP is listed in a whitelist.

Gets the log blacklist whitelist hit settings for the specified blacklist categories.

Sets the descriptions for the specified blacklist categories. This is an arbitrary field which can be used for any purpose.

Gets the descriptions for the specified blacklist categories.

Gets feed lists for the specified policies. You can add or remove feed lists for the policy. A feed list is a list of URL feeds.

Adds a list of feed lists for the specified policies.

Removes a list of feed lists from the specified policies.

Removes all feed lists from the specified policies.

Sets the match directions for the specified blacklist categories. Specifies the match direction for this blacklist category within this policy. This can be set to source, destination, or both.

Gets the match directions for the specified blacklist categories.

Gets the version information for this interface.

The IPIntelligencePolicy interface enables you to manipulate an IP Intelligence policy. The IP Intelligence policy is a functionally enriched generalization of the IP Intelligence profile (the latter has been immediately deprecated in this release). As opposed to the deprecated profile, policy can be applied to route domains and globally in addition to virtual servers. When packet passes through the system first the global policy is applied, then route domain's one and then virtual's one provided the configured policies are applicable to the packet's source IP. In addition to the predefined blacklist categories (see the IPIntelligenceBlacklistCategory interface) and 3rd party integrated IP reputation database coming with the system the IP Intelligence policy provides an ability to configure dynamic IP whitelists and blacklists downloaded from external web feeds (see IPIntelligenceFeedList interface). The IP Intelligence policy is comprised of three logical groups of settings: 1) List of feed lists create the union set of IP addresses/subnets with their blacklist/whitelist categorization. The policy is applied on the packet only if packet's source IP is found in that set. 2. Enforcement and logging settings per blacklist category. If the policy applies to the packet and the packet's source IP's blacklist category is explicitly confgured in the policy, the configuration settings will be applied to that packet. When the packet's source IP is categorized with more than one category the most restrictive action and logging settings will apply. 3. Default policy enforcement and logging settings are used when the packet to which the policy applied is categorized with the blacklist which isn't explicitly configured in this policy or it is configured and the corresponding setting is set with the option "use policy setting".