IP_Intelligence_Policy (object)

Configures a IP Intelligence (Dynamic White/Black List) policy

Properties (* = required):

name	type(s)	default	allowed values	description
/*/
blacklistCategories	array			Specifies List of IP Intelligence blacklist categories with the enforcement and logging settings per category.
class*	string		“IP_Intelligence_Policy”
defaultAction	string	“drop”	“drop”, “accept”	Specifies the default enforcement action.
defaultLogBlacklistHitOnly	string	“no”	“no”, “yes”, “limited”	Specifies the default blacklist hit only logging action.
defaultLogBlacklistWhitelistHit	string		“no”, “yes”	Specifies the default blacklist and whitelist hit logging action.
description	string			Description for the IP Intelligence Policy.
feedLists	array			Specifies IP Intelligence feed lists that are applied to all.
label	string		“^[^x00-x1fx22#&*<>?x5b-x5d`x7f]*$”	Optional friendly name for this object. Allows 0-64 chars, excluding a few likely to cause trouble with string searching, JS, TCL, or HTML
remark	string		“^[^x00-x1fx22x5cx7f]*$”	Arbitrary (brief) text pertaining to this object. Allows 0-64 chars, excluding only control characters, double-quote, and backslash. This is permissive enough that you should worry about XSS attacks

Blacklist_Categories (object)

IP Intelligence blacklist categories with the enforcement and logging settings per category.

Properties (* = required):

name	type(s)	default	allowed values	description
/*/
action	string		“accept”, “drop”	Specifies the default enforcement action.
blacklistCategory	object			Reference to a denylist category
logBlacklistHitOnly	string		“limited”, “yes”, “no”	Specifies the default blacklist hit only logging action.
logBlacklistWhitelistHit	string		“yes”, “no”	Specifies the default blacklist and whitelist hit logging action.
matchDirectionOverride	string		“match-source”, “match-destination”, “match-source-and-destination”	Specifies the source/destination IP match direction setting

Blacklist_Categories.blacklistCategory (object)

Reference to a denylist category

Properties (* = required):

name	type(s)	default	allowed values	description
bigip	string		“f5bigip” formatted string	Pathname of existing BIG-IP denylist category