ipv4WafTypeRule

An IPv4 firewall rule that references a WAF rule.

idstring<uuid>required

Unique identifier.

namestringrequired

Name of the firewall rule.

Possible values: non-empty and <= 60 characters

descriptionstring

Description of the firewall rule.

Possible values: <= 255 characters

ruleTypestringrequired

Possible values: [waf]

enabledbooleanrequired

Default value: true

actionstringrequired

WAF firewall rule action.

Possible values: [accept]

Default value: accept

sourceZones objectrequired

WAF firewall rule selector that always matches any item.

anybooleanrequired

Possible values: [true]

destinationZones objectrequired

WAF firewall rule selector that always matches any item.

anybooleanrequired

Possible values: [true]

sourceNetworks objectrequired

WAF firewall rule selector that always matches any item.

anybooleanrequired

Possible values: [true]

destinationNetworks object

Destination networks for the WAF firewall rule.

ipv4Addresses object[]

Array [

namestringrequired

Possible values: non-empty and <= 60 characters

]

wafServiceintegerrequired

WAF service ID.

wafRule objectrequired

Reference to a WAF rule by ID and name.

idstring<uuid>required

UUID of the WAF rule.

namestringrequired

Name of the WAF rule.

Possible values: non-empty and <= 60 characters

securityFeatures object

Security features for the WAF rule.

ipsPolicy objectnullable

Reference to an object by name.

namestringrequired

Possible values: non-empty and <= 60 characters

scanWithNdrActiveThreatIntelligenceboolean

Scan with NDR active threat intelligence.

Default value: false

qos object

QoS settings for the WAF rule.

trafficShapingPolicy objectnullable

Reference to an object by name.

namestringrequired

Possible values: non-empty and <= 60 characters

createdAtstring<date-time>required

Date and time.

updatedAtstring<date-time>required

Date and time.

ipv4WafTypeRule

{
  "id": "5c2c6a4a-8e2a-4c3a-9f1d-6b6e2a4a8e2a",
  "name": "allow-waf-traffic",
  "description": "Protect web traffic with an existing WAF rule.",
  "ruleType": "waf",
  "enabled": true,
  "action": "accept",
  "sourceZones": {
    "any": true
  },
  "sourceNetworks": {
    "any": true
  },
  "destinationZones": {
    "any": true
  },
  "destinationNetworks": {
    "ipv4Addresses": [
      {
        "name": "203.0.113.10"
      }
    ]
  },
  "wafService": 80,
  "wafRule": {
    "id": "6d3d7b5b-9f3b-4d4b-af2e-7c7f3b5b9f3b",
    "name": "WebApp-Protection-rule"
  },
  "createdAt": "2026-01-28T10:30:00Z",
  "updatedAt": "2026-01-28T10:30:00Z"
}