FW_RULE_PLACEMENT_UNKNOWN FW_RULE_PLACEMENT_BEFORE FW_RULE_PLACEMENT_AFTER FW_RULE_PLACEMENT_ORDER STATE_DISABLED STATE_ENABLED PROTOCOL_ANY PROTOCOL_IPV6 PROTOCOL_ROUTING PROTOCOL_NONE PROTOCOL_FRAGMENT PROTOCOL_DSTOPTS PROTOCOL_TCP PROTOCOL_UDP PROTOCOL_ICMP PROTOCOL_ICMPV6 PROTOCOL_OSPF PROTOCOL_SCTP PROTOCOL_UNKNOWN PROTOCOL_IGMP PROTOCOL_GGP PROTOCOL_IPV4 PROTOCOL_ST PROTOCOL_EGP PROTOCOL_PIGP PROTOCOL_RCCMON PROTOCOL_NVPII PROTOCOL_PUP PROTOCOL_ARGUS PROTOCOL_EMCON PROTOCOL_XNET PROTOCOL_CHAOS PROTOCOL_MUX PROTOCOL_MEAS PROTOCOL_HMP PROTOCOL_PRM PROTOCOL_IDP PROTOCOL_TRUNK1 PROTOCOL_TRUNK2 PROTOCOL_LEAF1 PROTOCOL_LEAF2 PROTOCOL_RDP PROTOCOL_IRTP PROTOCOL_TP PROTOCOL_BLT PROTOCOL_NSP PROTOCOL_INP PROTOCOL_SEP PROTOCOL_3PC PROTOCOL_IDPR PROTOCOL_XTP PROTOCOL_DDP PROTOCOL_CMTP PROTOCOL_TPXX PROTOCOL_IL PROTOCOL_SDRP PROTOCOL_IDRP PROTOCOL_RSVP PROTOCOL_GRE PROTOCOL_MHRP PROTOCOL_BHA PROTOCOL_ESP PROTOCOL_AH PROTOCOL_INLSP PROTOCOL_SWIPE PROTOCOL_NHRP PROTOCOL_55 PROTOCOL_56 PROTOCOL_57 PROTOCOL_AHIP PROTOCOL_CFTP PROTOCOL_HELLO PROTOCOL_SATEXPAK PROTOCOL_KRYPTOLAN PROTOCOL_RVD PROTOCOL_IPPC PROTOCOL_ADFS PROTOCOL_SATMON PROTOCOL_VISA PROTOCOL_IPCV PROTOCOL_CPNX PROTOCOL_CPHB PROTOCOL_WSN PROTOCOL_PVP PROTOCOL_BRSATMON PROTOCOL_ND PROTOCOL_WBMON PROTOCOL_WBEXPAK PROTOCOL_EON PROTOCOL_VMTP PROTOCOL_SVMTP PROTOCOL_VINES PROTOCOL_TTP PROTOCOL_IGP PROTOCOL_DGP PROTOCOL_TCF PROTOCOL_IGRP PROTOCOL_SRPC PROTOCOL_LARP PROTOCOL_MTP PROTOCOL_AX25 PROTOCOL_IPEIP PROTOCOL_MICP PROTOCOL_SCCSP PROTOCOL_ETHERIP PROTOCOL_ENCAP PROTOCOL_APES PROTOCOL_GMTP PROTOCOL_101 PROTOCOL_102 PROTOCOL_PIM PROTOCOL_104 PROTOCOL_105 PROTOCOL_106 PROTOCOL_107 PROTOCOL_IPCOMP PROTOCOL_109 PROTOCOL_110 PROTOCOL_111 PROTOCOL_112 PROTOCOL_PGM PROTOCOL_114 PROTOCOL_115 PROTOCOL_116 PROTOCOL_117 PROTOCOL_118 PROTOCOL_119 PROTOCOL_120 PROTOCOL_121 PROTOCOL_122 PROTOCOL_123 PROTOCOL_124 PROTOCOL_125 PROTOCOL_126 PROTOCOL_127 PROTOCOL_128 PROTOCOL_129 PROTOCOL_130 PROTOCOL_131 PROTOCOL_133 PROTOCOL_134 PROTOCOL_MH PROTOCOL_136 PROTOCOL_137 PROTOCOL_138 PROTOCOL_139 PROTOCOL_140 PROTOCOL_141 PROTOCOL_142 PROTOCOL_143 PROTOCOL_144 PROTOCOL_145 PROTOCOL_146 PROTOCOL_147 PROTOCOL_148 PROTOCOL_149 PROTOCOL_150 PROTOCOL_151 PROTOCOL_152 PROTOCOL_153 PROTOCOL_154 PROTOCOL_155 PROTOCOL_156 PROTOCOL_157 PROTOCOL_158 PROTOCOL_159 PROTOCOL_160 PROTOCOL_161 PROTOCOL_162 PROTOCOL_163 PROTOCOL_164 PROTOCOL_165 PROTOCOL_166 PROTOCOL_167 PROTOCOL_168 PROTOCOL_169 PROTOCOL_170 PROTOCOL_171 PROTOCOL_172 PROTOCOL_173 PROTOCOL_174 PROTOCOL_175 PROTOCOL_176 PROTOCOL_177 PROTOCOL_178 PROTOCOL_179 PROTOCOL_180 PROTOCOL_181 PROTOCOL_182 PROTOCOL_183 PROTOCOL_184 PROTOCOL_185 PROTOCOL_186 PROTOCOL_187 PROTOCOL_188 PROTOCOL_189 PROTOCOL_190 PROTOCOL_191 PROTOCOL_192 PROTOCOL_193 PROTOCOL_194 PROTOCOL_195 PROTOCOL_196 PROTOCOL_197 PROTOCOL_198 PROTOCOL_199 PROTOCOL_200 PROTOCOL_201 PROTOCOL_202 PROTOCOL_203 PROTOCOL_204 PROTOCOL_205 PROTOCOL_206 PROTOCOL_207 PROTOCOL_208 PROTOCOL_209 PROTOCOL_210 PROTOCOL_211 PROTOCOL_212 PROTOCOL_213 PROTOCOL_214 PROTOCOL_215 PROTOCOL_216 PROTOCOL_217 PROTOCOL_218 PROTOCOL_219 PROTOCOL_220 PROTOCOL_221 PROTOCOL_222 PROTOCOL_223 PROTOCOL_224 PROTOCOL_225 PROTOCOL_226 PROTOCOL_227 PROTOCOL_228 PROTOCOL_229 PROTOCOL_230 PROTOCOL_231 PROTOCOL_232 PROTOCOL_233 PROTOCOL_234 PROTOCOL_235 PROTOCOL_236 PROTOCOL_237 PROTOCOL_238 PROTOCOL_239 PROTOCOL_240 PROTOCOL_241 PROTOCOL_242 PROTOCOL_243 PROTOCOL_244 PROTOCOL_245 PROTOCOL_246 PROTOCOL_247 PROTOCOL_248 PROTOCOL_249 PROTOCOL_250 PROTOCOL_251 PROTOCOL_252 PROTOCOL_253 PROTOCOL_DIVERT PROTOCOL_RAW FW_RULE_ACTION_UNKNOWN FW_RULE_ACTION_ACCEPT FW_RULE_ACTION_ACCEPT_DECISIVELY FW_RULE_ACTION_REJECT FW_RULE_ACTION_DROP FW_RULE_STATE_UNKNOWN FW_RULE_STATE_DISABLED FW_RULE_STATE_ENABLED FW_RULE_STATE_SCHEDULED FW_RULE_STATE_INVALID Gets the list of firewall rule lists on this device.

Creates a firewall rule list.

Deletes the specified firewall rule lists.

Deletes all firewall rule lists on this device.

Sets the description for the specified firewall rule lists. This is an arbitrary field which can be used for any purpose.

Gets the descriptions for the specified firewall rule lists.

Gets the firewall rules for the specified firewall rule lists.

Adds firewall rules to the specified firewall rule lists. Note that the abilities to add more than one rule or, especially, add partial rules and build them up introduce a need for best practices: (1) introduce the rule or rules initially disabled (using the states parameter) and enable them (or set them as scheduled) as a whole when you have them complete or (2) use transactions (see System::Session::start_transaction) to avoid accidentally putting partial rules or incomplete rule sets into place.

Removes firewall rules from the specified firewall rule lists.

Removes all firewall rules from the specified firewall rule lists.

Sets the state for the specified firewall rules. You can add a rule as enabled or disabled initially, build it up, then enable it. You can temporarily disable a rule with no other effect on it, so that it can be enabled easily later without having to rebuild it. You can use the state of FW_RULE_STATE_SCHEDULED to enable scheduling for the rule. See add_fw_rule for more information.

Gets the state for the specified firewall rules.

Sets the order (numerically) for the specified firewall rules. Two rules can't have the same order, so one must manage order carefully if using numeric order to arrange firewall rules. See add_fw_rule for more information.

Gets the order (numerically) for the specified firewall rules.

Gets source address lists for the specified firewall rules.

Adds source address lists to the specified firewall rules.

Removes source address lists from the specified firewall rules.

Removes all source address lists from the specified firewall rules.

This method has been deprecated. Please use get_fw_rule_source_address_range instead. Firewall addresses are now supplied and stored in the form of an address range. Single addresses are converted to a corresponding one-element range where begin is equal to end; for each range, this method returns the start of the address range. Gets (inlined) source addresses for the specified firewall rules.

This method has been deprecated. Please use add_fw_rule_source_address_range instead. When using this method, the system will create a corresponding one-element address range where begin is equal to end. Adds (inlined) source addresses to the specified firewall rules.

This method has been deprecated. Please use remove_fw_rule_source_address_range instead. When using this method, the system will create a corresponding one-element address range where begin is equal to end. Removes (inlined) source addresses from the specified firewall rules.

This method has been deprecated. Please use remove_all_fw_rule_source_address_ranges instead. Removes all (inlined) source addresses from the specified firewall rules.

This method has been deprecated. Please use set_fw_rule_source_address_range_description instead. Sets the description for the specified firewall rules' source addresses. This is an arbitrary field which can be used for any purpose.

This method has been deprecated. Please use get_fw_rule_source_address_range_description instead. Gets the descriptions for the specified firewall rules' source addresses.

Gets destination address lists for the specified firewall rules.

Adds destination address lists to the specified firewall rules.

Removes destination address lists from the specified firewall rules.

Removes all destination address lists from the specified firewall rules.

This method has been deprecated. Please use get_fw_rule_destination_address_range instead. Firewall addresses are now supplied and stored in the form of an address range. Single addresses are converted to a corresponding one-element range where begin is equal to end; for each range, this method returns the start of the address range. Gets (inlined) destination addresses for the specified firewall rules.

This method has been deprecated. Please use add_fw_rule_destination_address_range instead. When using this method, the system will create a corresponding one-element address range where begin is equal to end. Adds (inlined) destination addresses to the specified firewall rules.

This method has been deprecated. Please use remove_fw_rule_destination_address_range instead. When using this method, the system will create a corresponding one-element address range where begin is equal to end. Removes (inlined) destination addresses from the specified firewall rules.

This method has been deprecated. Please use remove_all_fw_rule_destination_address_ranges instead. Removes all (inlined) destination addresses from the specified firewall rules.

This method has been deprecated. Please use set_fw_rule_destination_address_range_description instead. Sets the description for the specified firewall rules' destination addresses. This is an arbitrary field which can be used for any purpose.

This method has been deprecated. Please use get_fw_rule_destination_address_range_description instead. Gets the descriptions for the specified firewall rules' destination addresses.

Gets source port lists for the specified firewall rules.

Adds source port lists to the specified firewall rules.

Removes source port lists from the specified firewall rules.

Removes all source port lists from the specified firewall rules.

Gets (inlined) source ports for the specified firewall rules.

Adds (inlined) source ports to the specified firewall rules.

Removes (inlined) source ports from the specified firewall rules.

Removes all (inlined) source ports from the specified firewall rules.

Sets the description for the specified firewall rules' (inlined) source ports. This is an arbitrary field which can be used for any purpose.

Gets the descriptions for the specified firewall rules' (inlined) source ports.

Gets destination port lists for the specified firewall rules.

Adds destination port lists to the specified firewall rules.

Removes destination port lists from the specified firewall rules.

Removes all destination port lists from the specified firewall rules.

Gets (inlined) destination ports for the specified firewall rules.

Adds (inlined) destination ports to the specified firewall rules.

Removes (inlined) destination ports from the specified firewall rules.

Removes all (inlined) destination ports from the specified firewall rules.

Sets the description for the specified firewall rules' (inlined) destination ports. This is an arbitrary field which can be used for any purpose.

Gets the descriptions for the specified firewall rules' (inlined) destination ports.

Gets (inlined) ICMP type/code values for the specified firewall rules. A value of 255 for either ICMP type or code is a wildcard value.

Adds (inlined) ICMP type/code values to the specified firewall rules.

Removes (inlined) ICMP type/code values from the specified firewall rules.

Removes all (inlined) ICMP type/code values from the specified firewall rules.

Sets the description for the specified firewall rules' (inlined) ICMP type/code values. This is an arbitrary field which can be used for any purpose.

Gets the descriptions for the specified firewall rules' (inlined) ICMP type/code values.

Gets source VLANs for the specified firewall rules.

Adds source VLANs to the specified firewall rules.

Removes source VLANs from the specified firewall rules.

Removes all source VLANs from the specified firewall rules.

Sets a weekly schedule for the specified firewall rules. See Security::FirewallWeeklySchedule for how to create and manipulate weekly schedules.

Gets a weekly schedule for the specified firewall rules.

Sets the (IP) protocol for the specified firewall rules. Note: if the protocol is not one of the supported standard protocols, use set_fw_rule_protocol_numeric.

Gets the (IP) protocol for the specified firewall rules.

Sets the IP protocol (numerically) for the specified firewall rules.

Gets the IP protocol (numerically) for the specified firewall rules.

Sets the action for the specified firewall rules.

Gets the action for the specified firewall rules.

Sets the rule list for the specified firewall rules. If a list is specified then the system will validate that no other properties were specified in the current transaction, and will clear all other match criteria fields (src, dst, ip protocol, et cetera). The empty string means no rule list. Note: this method is reserved for future use, and the functionality (rule list on firewall rule list rules) is unsupported by the system.

Gets the rule list for the specified firewall rules. Note: this method is reserved for future use, and the functionality (rule list on firewall rule list rules) is unsupported by the system.

Sets the description for the specified firewall rules. This is an arbitrary field which can be used for any purpose.

Gets the descriptions for the specified firewall rules.

Sets the logging property for the specified firewall rules. Specifies whether the security software should write a log entry for all packets that match this rule. You must also enable network filter logging in the "security log profile" component for this option to have any effect. Note that the security software always increments the statistics counter when a packet matches a rule, no matter how you set this option.

Gets the logging property for the specified firewall rules.

Gets (inlined) source address ranges for the specified firewall rules.

Adds a list of (inlined) source address ranges for the specified firewall rules.

Removes a list of (inlined) source address ranges from the specified firewall rules.

Removes all (inlined) source address ranges from the specified firewall rules.

Sets the descriptions for the specified firewall rule source address ranges. This is an arbitrary field which can be used for any purpose.

Gets the descriptions for the specified firewall rule source address ranges.

Gets (inlined) destination address ranges for the specified firewall rules.

Adds a list of (inlined) destination address ranges for the specified firewall rules.

Removes a list of (inlined) destination address ranges from the specified firewall rules.

Removes all (inlined) destination address ranges from the specified firewall rules.

Sets the descriptions for the specified firewall rule destination address ranges. This is an arbitrary field which can be used for any purpose.

Gets the descriptions for the specified firewall rule destination address ranges.

Sets the iRules for the specified firewall rules. Specify the iRule as an action when the traffic matches the filter criteria.

Gets the iRules for the specified firewall rules.

Gets the version information for this interface.

Gets (inlined) source geo locations for the specified firewall rules. The geo location is a combination of country code and state name. The country code is two characters long. The state name is the full name of a state that belongs to the country represented by country code.

Adds (inlined) source geo locations to the specified firewall rules.

Removes (inlined) source geo locations from the specified firewall rules.

Removes all (inlined) source geo locations from the specified firewall rules.

Sets the description for the specified firewall rules' source geo locations. This is an arbitrary field which can be used for any purpose.

Gets the descriptions for the specified firewall rules' source geo locations.

Gets (inlined) destination geo locations for the specified firewall rules. The geo location is a combination of country code and state name. The country code is two characters long. The state name is the full name of a state that belongs to the country represented by country code.

Adds (inlined) destination geo locations to the specified firewall rules.

Removes (inlined) destination geo locations from the specified firewall rules.

Removes all (inlined) destination geo locations from the specified firewall rules.

Sets the description for the specified firewall rules' destination geo locations. This is an arbitrary field which can be used for any purpose.

Gets the descriptions for the specified firewall rules' destination geo locations.

Gets the list of firewall rule lists on this device.

Creates a firewall rule list.

Deletes the specified firewall rule lists.

Deletes all firewall rule lists on this device.

Sets the description for the specified firewall rule lists. This is an arbitrary field which can be used for any purpose.

Gets the descriptions for the specified firewall rule lists.

Gets the firewall rules for the specified firewall rule lists.

Adds firewall rules to the specified firewall rule lists. Note that the abilities to add more than one rule or, especially, add partial rules and build them up introduce a need for best practices: (1) introduce the rule or rules initially disabled (using the states parameter) and enable them (or set them as scheduled) as a whole when you have them complete or (2) use transactions (see System::Session::start_transaction) to avoid accidentally putting partial rules or incomplete rule sets into place.

Removes firewall rules from the specified firewall rule lists.

Removes all firewall rules from the specified firewall rule lists.

Sets the state for the specified firewall rules. You can add a rule as enabled or disabled initially, build it up, then enable it. You can temporarily disable a rule with no other effect on it, so that it can be enabled easily later without having to rebuild it. You can use the state of FW_RULE_STATE_SCHEDULED to enable scheduling for the rule. See add_fw_rule for more information.

Gets the state for the specified firewall rules.

Sets the order (numerically) for the specified firewall rules. Two rules can't have the same order, so one must manage order carefully if using numeric order to arrange firewall rules. See add_fw_rule for more information.

Gets the order (numerically) for the specified firewall rules.

Gets source address lists for the specified firewall rules.

Adds source address lists to the specified firewall rules.

Removes source address lists from the specified firewall rules.

Removes all source address lists from the specified firewall rules.

This method has been deprecated. Please use get_fw_rule_source_address_range instead. Firewall addresses are now supplied and stored in the form of an address range. Single addresses are converted to a corresponding one-element range where begin is equal to end; for each range, this method returns the start of the address range. Gets (inlined) source addresses for the specified firewall rules.

This method has been deprecated. Please use add_fw_rule_source_address_range instead. When using this method, the system will create a corresponding one-element address range where begin is equal to end. Adds (inlined) source addresses to the specified firewall rules.

This method has been deprecated. Please use remove_fw_rule_source_address_range instead. When using this method, the system will create a corresponding one-element address range where begin is equal to end. Removes (inlined) source addresses from the specified firewall rules.

This method has been deprecated. Please use remove_all_fw_rule_source_address_ranges instead. Removes all (inlined) source addresses from the specified firewall rules.

This method has been deprecated. Please use set_fw_rule_source_address_range_description instead. Sets the description for the specified firewall rules' source addresses. This is an arbitrary field which can be used for any purpose.

This method has been deprecated. Please use get_fw_rule_source_address_range_description instead. Gets the descriptions for the specified firewall rules' source addresses.

Gets destination address lists for the specified firewall rules.

Adds destination address lists to the specified firewall rules.

Removes destination address lists from the specified firewall rules.

Removes all destination address lists from the specified firewall rules.

This method has been deprecated. Please use get_fw_rule_destination_address_range instead. Firewall addresses are now supplied and stored in the form of an address range. Single addresses are converted to a corresponding one-element range where begin is equal to end; for each range, this method returns the start of the address range. Gets (inlined) destination addresses for the specified firewall rules.

This method has been deprecated. Please use add_fw_rule_destination_address_range instead. When using this method, the system will create a corresponding one-element address range where begin is equal to end. Adds (inlined) destination addresses to the specified firewall rules.

This method has been deprecated. Please use remove_fw_rule_destination_address_range instead. When using this method, the system will create a corresponding one-element address range where begin is equal to end. Removes (inlined) destination addresses from the specified firewall rules.

This method has been deprecated. Please use remove_all_fw_rule_destination_address_ranges instead. Removes all (inlined) destination addresses from the specified firewall rules.

This method has been deprecated. Please use set_fw_rule_destination_address_range_description instead. Sets the description for the specified firewall rules' destination addresses. This is an arbitrary field which can be used for any purpose.

This method has been deprecated. Please use get_fw_rule_destination_address_range_description instead. Gets the descriptions for the specified firewall rules' destination addresses.

Gets source port lists for the specified firewall rules.

Adds source port lists to the specified firewall rules.

Removes source port lists from the specified firewall rules.

Removes all source port lists from the specified firewall rules.

Gets (inlined) source ports for the specified firewall rules.

Adds (inlined) source ports to the specified firewall rules.

Removes (inlined) source ports from the specified firewall rules.

Removes all (inlined) source ports from the specified firewall rules.

Sets the description for the specified firewall rules' (inlined) source ports. This is an arbitrary field which can be used for any purpose.

Gets the descriptions for the specified firewall rules' (inlined) source ports.

Gets destination port lists for the specified firewall rules.

Adds destination port lists to the specified firewall rules.

Removes destination port lists from the specified firewall rules.

Removes all destination port lists from the specified firewall rules.

Gets (inlined) destination ports for the specified firewall rules.

Adds (inlined) destination ports to the specified firewall rules.

Removes (inlined) destination ports from the specified firewall rules.

Removes all (inlined) destination ports from the specified firewall rules.

Sets the description for the specified firewall rules' (inlined) destination ports. This is an arbitrary field which can be used for any purpose.

Gets the descriptions for the specified firewall rules' (inlined) destination ports.

Gets (inlined) ICMP type/code values for the specified firewall rules. A value of 255 for either ICMP type or code is a wildcard value.

Adds (inlined) ICMP type/code values to the specified firewall rules.

Removes (inlined) ICMP type/code values from the specified firewall rules.

Removes all (inlined) ICMP type/code values from the specified firewall rules.

Sets the description for the specified firewall rules' (inlined) ICMP type/code values. This is an arbitrary field which can be used for any purpose.

Gets the descriptions for the specified firewall rules' (inlined) ICMP type/code values.

Gets source VLANs for the specified firewall rules.

Adds source VLANs to the specified firewall rules.

Removes source VLANs from the specified firewall rules.

Removes all source VLANs from the specified firewall rules.

Sets a weekly schedule for the specified firewall rules. See Security::FirewallWeeklySchedule for how to create and manipulate weekly schedules.

Gets a weekly schedule for the specified firewall rules.

Sets the (IP) protocol for the specified firewall rules. Note: if the protocol is not one of the supported standard protocols, use set_fw_rule_protocol_numeric.

Gets the (IP) protocol for the specified firewall rules.

Sets the IP protocol (numerically) for the specified firewall rules.

Gets the IP protocol (numerically) for the specified firewall rules.

Sets the action for the specified firewall rules.

Gets the action for the specified firewall rules.

Sets the rule list for the specified firewall rules. If a list is specified then the system will validate that no other properties were specified in the current transaction, and will clear all other match criteria fields (src, dst, ip protocol, et cetera). The empty string means no rule list. Note: this method is reserved for future use, and the functionality (rule list on firewall rule list rules) is unsupported by the system.

Gets the rule list for the specified firewall rules. Note: this method is reserved for future use, and the functionality (rule list on firewall rule list rules) is unsupported by the system.

Sets the description for the specified firewall rules. This is an arbitrary field which can be used for any purpose.

Gets the descriptions for the specified firewall rules.

Sets the logging property for the specified firewall rules. Specifies whether the security software should write a log entry for all packets that match this rule. You must also enable network filter logging in the "security log profile" component for this option to have any effect. Note that the security software always increments the statistics counter when a packet matches a rule, no matter how you set this option.

Gets the logging property for the specified firewall rules.

Gets (inlined) source address ranges for the specified firewall rules.

Adds a list of (inlined) source address ranges for the specified firewall rules.

Removes a list of (inlined) source address ranges from the specified firewall rules.

Removes all (inlined) source address ranges from the specified firewall rules.

Sets the descriptions for the specified firewall rule source address ranges. This is an arbitrary field which can be used for any purpose.

Gets the descriptions for the specified firewall rule source address ranges.

Gets (inlined) destination address ranges for the specified firewall rules.

Adds a list of (inlined) destination address ranges for the specified firewall rules.

Removes a list of (inlined) destination address ranges from the specified firewall rules.

Removes all (inlined) destination address ranges from the specified firewall rules.

Sets the descriptions for the specified firewall rule destination address ranges. This is an arbitrary field which can be used for any purpose.

Gets the descriptions for the specified firewall rule destination address ranges.

Sets the iRules for the specified firewall rules. Specify the iRule as an action when the traffic matches the filter criteria.

Gets the iRules for the specified firewall rules.

Gets the version information for this interface.

Gets (inlined) source geo locations for the specified firewall rules. The geo location is a combination of country code and state name. The country code is two characters long. The state name is the full name of a state that belongs to the country represented by country code.

Adds (inlined) source geo locations to the specified firewall rules.

Removes (inlined) source geo locations from the specified firewall rules.

Removes all (inlined) source geo locations from the specified firewall rules.

Sets the description for the specified firewall rules' source geo locations. This is an arbitrary field which can be used for any purpose.

Gets the descriptions for the specified firewall rules' source geo locations.

Gets (inlined) destination geo locations for the specified firewall rules. The geo location is a combination of country code and state name. The country code is two characters long. The state name is the full name of a state that belongs to the country represented by country code.

Adds (inlined) destination geo locations to the specified firewall rules.

Removes (inlined) destination geo locations from the specified firewall rules.

Removes all (inlined) destination geo locations from the specified firewall rules.

Sets the description for the specified firewall rules' destination geo locations. This is an arbitrary field which can be used for any purpose.

Gets the descriptions for the specified firewall rules' destination geo locations.

The FirewallRuleList interface enables you to create and modify named collections of firewall rules. You can attach a rule list to rules for other objects, like virtual servers and self IPs. Note that the source and destination addresses in the firewall methods (get_fw_rule and so on) are type Common::NetAddress, a type which allows one to specify a prefix length after the address, e.g., "10.1.1.0/24".