1. Packages
  2. Checkpoint Provider
  3. API Docs
  4. ManagementThreatProfile
Viewing docs for checkpoint 3.0.0
published on Monday, Mar 30, 2026 by checkpointsw
Schema (JSON)
checkpointsw/terraform-provider-checkpoint

checkpoint.ManagementThreatProfile

Viewing docs for checkpoint 3.0.0
published on Monday, Mar 30, 2026 by checkpointsw
Schema (JSON)
checkpointsw/terraform-provider-checkpoint

    This resource allows you to add/update/delete Check Point Threat Profile.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as checkpoint from "@pulumi/checkpoint";

const example = new checkpoint.ManagementThreatProfile("example", {
    name: "my theat profile",
    activeProtectionsPerformanceImpact: "high",
    activeProtectionsSeverity: "Critical",
});

    import pulumi
import pulumi_checkpoint as checkpoint

example = checkpoint.ManagementThreatProfile("example",
    name="my theat profile",
    active_protections_performance_impact="high",
    active_protections_severity="Critical")

    package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/checkpoint/v3/checkpoint"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := checkpoint.NewManagementThreatProfile(ctx, "example", &checkpoint.ManagementThreatProfileArgs{
			Name:                               pulumi.String("my theat profile"),
			ActiveProtectionsPerformanceImpact: pulumi.String("high"),
			ActiveProtectionsSeverity:          pulumi.String("Critical"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Checkpoint = Pulumi.Checkpoint;

return await Deployment.RunAsync(() => 
{
    var example = new Checkpoint.ManagementThreatProfile("example", new()
    {
        Name = "my theat profile",
        ActiveProtectionsPerformanceImpact = "high",
        ActiveProtectionsSeverity = "Critical",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.checkpoint.ManagementThreatProfile;
import com.pulumi.checkpoint.ManagementThreatProfileArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new ManagementThreatProfile("example", ManagementThreatProfileArgs.builder()
            .name("my theat profile")
            .activeProtectionsPerformanceImpact("high")
            .activeProtectionsSeverity("Critical")
            .build());

    }
}

    resources:
  example:
    type: checkpoint:ManagementThreatProfile
    properties:
      name: my theat profile
      activeProtectionsPerformanceImpact: high
      activeProtectionsSeverity: Critical

    Create ManagementThreatProfile Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new ManagementThreatProfile(name: string, args?: ManagementThreatProfileArgs, opts?: CustomResourceOptions);
    @overload
def ManagementThreatProfile(resource_name: str,
                            args: Optional[ManagementThreatProfileArgs] = None,
                            opts: Optional[ResourceOptions] = None)

@overload
def ManagementThreatProfile(resource_name: str,
                            opts: Optional[ResourceOptions] = None,
                            active_protections_performance_impact: Optional[str] = None,
                            active_protections_severity: Optional[str] = None,
                            anti_bot: Optional[bool] = None,
                            anti_virus: Optional[bool] = None,
                            color: Optional[str] = None,
                            comments: Optional[str] = None,
                            confidence_level_high: Optional[str] = None,
                            confidence_level_low: Optional[str] = None,
                            confidence_level_medium: Optional[str] = None,
                            deactivate_protections_by_extended_attributes: Optional[Sequence[ManagementThreatProfileDeactivateProtectionsByExtendedAttributeArgs]] = None,
                            ignore_errors: Optional[bool] = None,
                            ignore_warnings: Optional[bool] = None,
                            indicator_overrides: Optional[Sequence[ManagementThreatProfileIndicatorOverrideArgs]] = None,
                            ips: Optional[bool] = None,
                            ips_settings: Optional[Sequence[ManagementThreatProfileIpsSettingArgs]] = None,
                            malicious_mail_policy_settings: Optional[Sequence[ManagementThreatProfileMaliciousMailPolicySettingArgs]] = None,
                            management_threat_profile_id: Optional[str] = None,
                            name: Optional[str] = None,
                            overrides: Optional[Sequence[ManagementThreatProfileOverrideArgs]] = None,
                            scan_malicious_links: Optional[Sequence[ManagementThreatProfileScanMaliciousLinkArgs]] = None,
                            tags: Optional[Sequence[str]] = None,
                            threat_emulation: Optional[bool] = None,
                            threat_extraction: Optional[bool] = None,
                            use_extended_attributes: Optional[bool] = None,
                            use_indicators: Optional[bool] = None,
                            zero_phishing: Optional[bool] = None)
    func NewManagementThreatProfile(ctx *Context, name string, args *ManagementThreatProfileArgs, opts ...ResourceOption) (*ManagementThreatProfile, error)
    public ManagementThreatProfile(string name, ManagementThreatProfileArgs? args = null, CustomResourceOptions? opts = null)
    public ManagementThreatProfile(String name, ManagementThreatProfileArgs args)
public ManagementThreatProfile(String name, ManagementThreatProfileArgs args, CustomResourceOptions options)

    type: checkpoint:ManagementThreatProfile
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args ManagementThreatProfileArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args ManagementThreatProfileArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args ManagementThreatProfileArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args ManagementThreatProfileArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args ManagementThreatProfileArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var managementThreatProfileResource = new Checkpoint.Index.ManagementThreatProfile("managementThreatProfileResource", new()
{
    ActiveProtectionsPerformanceImpact = "string",
    ActiveProtectionsSeverity = "string",
    AntiBot = false,
    AntiVirus = false,
    Color = "string",
    Comments = "string",
    ConfidenceLevelHigh = "string",
    ConfidenceLevelLow = "string",
    ConfidenceLevelMedium = "string",
    DeactivateProtectionsByExtendedAttributes = new[]
    {
        new Checkpoint.Inputs.ManagementThreatProfileDeactivateProtectionsByExtendedAttributeArgs
        {
            Category = "string",
            Name = "string",
            Uid = "string",
            Values = new[]
            {
                new Checkpoint.Inputs.ManagementThreatProfileDeactivateProtectionsByExtendedAttributeValueArgs
                {
                    Name = "string",
                    Uid = "string",
                },
            },
        },
    },
    IgnoreErrors = false,
    IgnoreWarnings = false,
    IndicatorOverrides = new[]
    {
        new Checkpoint.Inputs.ManagementThreatProfileIndicatorOverrideArgs
        {
            Action = "string",
            Indicator = "string",
        },
    },
    Ips = false,
    IpsSettings = new[]
    {
        new Checkpoint.Inputs.ManagementThreatProfileIpsSettingArgs
        {
            ExcludeProtectionWithPerformanceImpact = false,
            ExcludeProtectionWithPerformanceImpactMode = "string",
            ExcludeProtectionWithSeverity = false,
            ExcludeProtectionWithSeverityMode = "string",
            NewlyUpdatedProtections = "string",
        },
    },
    MaliciousMailPolicySettings = new[]
    {
        new Checkpoint.Inputs.ManagementThreatProfileMaliciousMailPolicySettingArgs
        {
            AddCustomizedTextToEmailBody = false,
            AddEmailSubjectPrefix = false,
            AddXHeaderToEmail = false,
            EmailAction = "string",
            EmailBodyCustomizedText = "string",
            EmailSubjectPrefixText = "string",
            FailedToScanAttachmentsText = "string",
            MaliciousAttachmentsText = "string",
            MaliciousLinksText = "string",
            RemoveAttachmentsAndLinks = false,
            SendCopy = false,
            SendCopyLists = new[]
            {
                "string",
            },
        },
    },
    ManagementThreatProfileId = "string",
    Name = "string",
    Overrides = new[]
    {
        new Checkpoint.Inputs.ManagementThreatProfileOverrideArgs
        {
            Action = "string",
            Protection = "string",
            CapturePackets = false,
            Defaults = new[]
            {
                new Checkpoint.Inputs.ManagementThreatProfileOverrideDefaultArgs
                {
                    Action = "string",
                    CapturePackets = false,
                    Track = "string",
                },
            },
            Finals = new[]
            {
                new Checkpoint.Inputs.ManagementThreatProfileOverrideFinalArgs
                {
                    Action = "string",
                    CapturePackets = false,
                    Track = "string",
                },
            },
            ProtectionExternalInfos = new[]
            {
                "string",
            },
            ProtectionUid = "string",
            Track = "string",
        },
    },
    ScanMaliciousLinks = new[]
    {
        new Checkpoint.Inputs.ManagementThreatProfileScanMaliciousLinkArgs
        {
            MaxBytes = 0,
            MaxLinks = 0,
        },
    },
    Tags = new[]
    {
        "string",
    },
    ThreatEmulation = false,
    ThreatExtraction = false,
    UseExtendedAttributes = false,
    UseIndicators = false,
    ZeroPhishing = false,
});

    example, err := checkpoint.NewManagementThreatProfile(ctx, "managementThreatProfileResource", &checkpoint.ManagementThreatProfileArgs{
	ActiveProtectionsPerformanceImpact: pulumi.String("string"),
	ActiveProtectionsSeverity:          pulumi.String("string"),
	AntiBot:                            pulumi.Bool(false),
	AntiVirus:                          pulumi.Bool(false),
	Color:                              pulumi.String("string"),
	Comments:                           pulumi.String("string"),
	ConfidenceLevelHigh:                pulumi.String("string"),
	ConfidenceLevelLow:                 pulumi.String("string"),
	ConfidenceLevelMedium:              pulumi.String("string"),
	DeactivateProtectionsByExtendedAttributes: checkpoint.ManagementThreatProfileDeactivateProtectionsByExtendedAttributeArray{
		&checkpoint.ManagementThreatProfileDeactivateProtectionsByExtendedAttributeArgs{
			Category: pulumi.String("string"),
			Name:     pulumi.String("string"),
			Uid:      pulumi.String("string"),
			Values: checkpoint.ManagementThreatProfileDeactivateProtectionsByExtendedAttributeValueArray{
				&checkpoint.ManagementThreatProfileDeactivateProtectionsByExtendedAttributeValueArgs{
					Name: pulumi.String("string"),
					Uid:  pulumi.String("string"),
				},
			},
		},
	},
	IgnoreErrors:   pulumi.Bool(false),
	IgnoreWarnings: pulumi.Bool(false),
	IndicatorOverrides: checkpoint.ManagementThreatProfileIndicatorOverrideArray{
		&checkpoint.ManagementThreatProfileIndicatorOverrideArgs{
			Action:    pulumi.String("string"),
			Indicator: pulumi.String("string"),
		},
	},
	Ips: pulumi.Bool(false),
	IpsSettings: checkpoint.ManagementThreatProfileIpsSettingArray{
		&checkpoint.ManagementThreatProfileIpsSettingArgs{
			ExcludeProtectionWithPerformanceImpact:     pulumi.Bool(false),
			ExcludeProtectionWithPerformanceImpactMode: pulumi.String("string"),
			ExcludeProtectionWithSeverity:              pulumi.Bool(false),
			ExcludeProtectionWithSeverityMode:          pulumi.String("string"),
			NewlyUpdatedProtections:                    pulumi.String("string"),
		},
	},
	MaliciousMailPolicySettings: checkpoint.ManagementThreatProfileMaliciousMailPolicySettingArray{
		&checkpoint.ManagementThreatProfileMaliciousMailPolicySettingArgs{
			AddCustomizedTextToEmailBody: pulumi.Bool(false),
			AddEmailSubjectPrefix:        pulumi.Bool(false),
			AddXHeaderToEmail:            pulumi.Bool(false),
			EmailAction:                  pulumi.String("string"),
			EmailBodyCustomizedText:      pulumi.String("string"),
			EmailSubjectPrefixText:       pulumi.String("string"),
			FailedToScanAttachmentsText:  pulumi.String("string"),
			MaliciousAttachmentsText:     pulumi.String("string"),
			MaliciousLinksText:           pulumi.String("string"),
			RemoveAttachmentsAndLinks:    pulumi.Bool(false),
			SendCopy:                     pulumi.Bool(false),
			SendCopyLists: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
	},
	ManagementThreatProfileId: pulumi.String("string"),
	Name:                      pulumi.String("string"),
	Overrides: checkpoint.ManagementThreatProfileOverrideArray{
		&checkpoint.ManagementThreatProfileOverrideArgs{
			Action:         pulumi.String("string"),
			Protection:     pulumi.String("string"),
			CapturePackets: pulumi.Bool(false),
			Defaults: checkpoint.ManagementThreatProfileOverrideDefaultArray{
				&checkpoint.ManagementThreatProfileOverrideDefaultArgs{
					Action:         pulumi.String("string"),
					CapturePackets: pulumi.Bool(false),
					Track:          pulumi.String("string"),
				},
			},
			Finals: checkpoint.ManagementThreatProfileOverrideFinalArray{
				&checkpoint.ManagementThreatProfileOverrideFinalArgs{
					Action:         pulumi.String("string"),
					CapturePackets: pulumi.Bool(false),
					Track:          pulumi.String("string"),
				},
			},
			ProtectionExternalInfos: pulumi.StringArray{
				pulumi.String("string"),
			},
			ProtectionUid: pulumi.String("string"),
			Track:         pulumi.String("string"),
		},
	},
	ScanMaliciousLinks: checkpoint.ManagementThreatProfileScanMaliciousLinkArray{
		&checkpoint.ManagementThreatProfileScanMaliciousLinkArgs{
			MaxBytes: pulumi.Float64(0),
			MaxLinks: pulumi.Float64(0),
		},
	},
	Tags: pulumi.StringArray{
		pulumi.String("string"),
	},
	ThreatEmulation:       pulumi.Bool(false),
	ThreatExtraction:      pulumi.Bool(false),
	UseExtendedAttributes: pulumi.Bool(false),
	UseIndicators:         pulumi.Bool(false),
	ZeroPhishing:          pulumi.Bool(false),
})

    var managementThreatProfileResource = new ManagementThreatProfile("managementThreatProfileResource", ManagementThreatProfileArgs.builder()
    .activeProtectionsPerformanceImpact("string")
    .activeProtectionsSeverity("string")
    .antiBot(false)
    .antiVirus(false)
    .color("string")
    .comments("string")
    .confidenceLevelHigh("string")
    .confidenceLevelLow("string")
    .confidenceLevelMedium("string")
    .deactivateProtectionsByExtendedAttributes(ManagementThreatProfileDeactivateProtectionsByExtendedAttributeArgs.builder()
        .category("string")
        .name("string")
        .uid("string")
        .values(ManagementThreatProfileDeactivateProtectionsByExtendedAttributeValueArgs.builder()
            .name("string")
            .uid("string")
            .build())
        .build())
    .ignoreErrors(false)
    .ignoreWarnings(false)
    .indicatorOverrides(ManagementThreatProfileIndicatorOverrideArgs.builder()
        .action("string")
        .indicator("string")
        .build())
    .ips(false)
    .ipsSettings(ManagementThreatProfileIpsSettingArgs.builder()
        .excludeProtectionWithPerformanceImpact(false)
        .excludeProtectionWithPerformanceImpactMode("string")
        .excludeProtectionWithSeverity(false)
        .excludeProtectionWithSeverityMode("string")
        .newlyUpdatedProtections("string")
        .build())
    .maliciousMailPolicySettings(ManagementThreatProfileMaliciousMailPolicySettingArgs.builder()
        .addCustomizedTextToEmailBody(false)
        .addEmailSubjectPrefix(false)
        .addXHeaderToEmail(false)
        .emailAction("string")
        .emailBodyCustomizedText("string")
        .emailSubjectPrefixText("string")
        .failedToScanAttachmentsText("string")
        .maliciousAttachmentsText("string")
        .maliciousLinksText("string")
        .removeAttachmentsAndLinks(false)
        .sendCopy(false)
        .sendCopyLists("string")
        .build())
    .managementThreatProfileId("string")
    .name("string")
    .overrides(ManagementThreatProfileOverrideArgs.builder()
        .action("string")
        .protection("string")
        .capturePackets(false)
        .defaults(ManagementThreatProfileOverrideDefaultArgs.builder()
            .action("string")
            .capturePackets(false)
            .track("string")
            .build())
        .finals(ManagementThreatProfileOverrideFinalArgs.builder()
            .action("string")
            .capturePackets(false)
            .track("string")
            .build())
        .protectionExternalInfos("string")
        .protectionUid("string")
        .track("string")
        .build())
    .scanMaliciousLinks(ManagementThreatProfileScanMaliciousLinkArgs.builder()
        .maxBytes(0.0)
        .maxLinks(0.0)
        .build())
    .tags("string")
    .threatEmulation(false)
    .threatExtraction(false)
    .useExtendedAttributes(false)
    .useIndicators(false)
    .zeroPhishing(false)
    .build());

    management_threat_profile_resource = checkpoint.ManagementThreatProfile("managementThreatProfileResource",
    active_protections_performance_impact="string",
    active_protections_severity="string",
    anti_bot=False,
    anti_virus=False,
    color="string",
    comments="string",
    confidence_level_high="string",
    confidence_level_low="string",
    confidence_level_medium="string",
    deactivate_protections_by_extended_attributes=[{
        "category": "string",
        "name": "string",
        "uid": "string",
        "values": [{
            "name": "string",
            "uid": "string",
        }],
    }],
    ignore_errors=False,
    ignore_warnings=False,
    indicator_overrides=[{
        "action": "string",
        "indicator": "string",
    }],
    ips=False,
    ips_settings=[{
        "exclude_protection_with_performance_impact": False,
        "exclude_protection_with_performance_impact_mode": "string",
        "exclude_protection_with_severity": False,
        "exclude_protection_with_severity_mode": "string",
        "newly_updated_protections": "string",
    }],
    malicious_mail_policy_settings=[{
        "add_customized_text_to_email_body": False,
        "add_email_subject_prefix": False,
        "add_x_header_to_email": False,
        "email_action": "string",
        "email_body_customized_text": "string",
        "email_subject_prefix_text": "string",
        "failed_to_scan_attachments_text": "string",
        "malicious_attachments_text": "string",
        "malicious_links_text": "string",
        "remove_attachments_and_links": False,
        "send_copy": False,
        "send_copy_lists": ["string"],
    }],
    management_threat_profile_id="string",
    name="string",
    overrides=[{
        "action": "string",
        "protection": "string",
        "capture_packets": False,
        "defaults": [{
            "action": "string",
            "capture_packets": False,
            "track": "string",
        }],
        "finals": [{
            "action": "string",
            "capture_packets": False,
            "track": "string",
        }],
        "protection_external_infos": ["string"],
        "protection_uid": "string",
        "track": "string",
    }],
    scan_malicious_links=[{
        "max_bytes": 0,
        "max_links": 0,
    }],
    tags=["string"],
    threat_emulation=False,
    threat_extraction=False,
    use_extended_attributes=False,
    use_indicators=False,
    zero_phishing=False)

    const managementThreatProfileResource = new checkpoint.ManagementThreatProfile("managementThreatProfileResource", {
    activeProtectionsPerformanceImpact: "string",
    activeProtectionsSeverity: "string",
    antiBot: false,
    antiVirus: false,
    color: "string",
    comments: "string",
    confidenceLevelHigh: "string",
    confidenceLevelLow: "string",
    confidenceLevelMedium: "string",
    deactivateProtectionsByExtendedAttributes: [{
        category: "string",
        name: "string",
        uid: "string",
        values: [{
            name: "string",
            uid: "string",
        }],
    }],
    ignoreErrors: false,
    ignoreWarnings: false,
    indicatorOverrides: [{
        action: "string",
        indicator: "string",
    }],
    ips: false,
    ipsSettings: [{
        excludeProtectionWithPerformanceImpact: false,
        excludeProtectionWithPerformanceImpactMode: "string",
        excludeProtectionWithSeverity: false,
        excludeProtectionWithSeverityMode: "string",
        newlyUpdatedProtections: "string",
    }],
    maliciousMailPolicySettings: [{
        addCustomizedTextToEmailBody: false,
        addEmailSubjectPrefix: false,
        addXHeaderToEmail: false,
        emailAction: "string",
        emailBodyCustomizedText: "string",
        emailSubjectPrefixText: "string",
        failedToScanAttachmentsText: "string",
        maliciousAttachmentsText: "string",
        maliciousLinksText: "string",
        removeAttachmentsAndLinks: false,
        sendCopy: false,
        sendCopyLists: ["string"],
    }],
    managementThreatProfileId: "string",
    name: "string",
    overrides: [{
        action: "string",
        protection: "string",
        capturePackets: false,
        defaults: [{
            action: "string",
            capturePackets: false,
            track: "string",
        }],
        finals: [{
            action: "string",
            capturePackets: false,
            track: "string",
        }],
        protectionExternalInfos: ["string"],
        protectionUid: "string",
        track: "string",
    }],
    scanMaliciousLinks: [{
        maxBytes: 0,
        maxLinks: 0,
    }],
    tags: ["string"],
    threatEmulation: false,
    threatExtraction: false,
    useExtendedAttributes: false,
    useIndicators: false,
    zeroPhishing: false,
});

    type: checkpoint:ManagementThreatProfile
properties:
    activeProtectionsPerformanceImpact: string
    activeProtectionsSeverity: string
    antiBot: false
    antiVirus: false
    color: string
    comments: string
    confidenceLevelHigh: string
    confidenceLevelLow: string
    confidenceLevelMedium: string
    deactivateProtectionsByExtendedAttributes:
        - category: string
          name: string
          uid: string
          values:
            - name: string
              uid: string
    ignoreErrors: false
    ignoreWarnings: false
    indicatorOverrides:
        - action: string
          indicator: string
    ips: false
    ipsSettings:
        - excludeProtectionWithPerformanceImpact: false
          excludeProtectionWithPerformanceImpactMode: string
          excludeProtectionWithSeverity: false
          excludeProtectionWithSeverityMode: string
          newlyUpdatedProtections: string
    maliciousMailPolicySettings:
        - addCustomizedTextToEmailBody: false
          addEmailSubjectPrefix: false
          addXHeaderToEmail: false
          emailAction: string
          emailBodyCustomizedText: string
          emailSubjectPrefixText: string
          failedToScanAttachmentsText: string
          maliciousAttachmentsText: string
          maliciousLinksText: string
          removeAttachmentsAndLinks: false
          sendCopy: false
          sendCopyLists:
            - string
    managementThreatProfileId: string
    name: string
    overrides:
        - action: string
          capturePackets: false
          defaults:
            - action: string
              capturePackets: false
              track: string
          finals:
            - action: string
              capturePackets: false
              track: string
          protection: string
          protectionExternalInfos:
            - string
          protectionUid: string
          track: string
    scanMaliciousLinks:
        - maxBytes: 0
          maxLinks: 0
    tags:
        - string
    threatEmulation: false
    threatExtraction: false
    useExtendedAttributes: false
    useIndicators: false
    zeroPhishing: false

    ManagementThreatProfile Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The ManagementThreatProfile resource accepts the following input properties:

    ActiveProtectionsPerformanceImpact string
    Protections with this performance impact only will be activated in the profile.
    ActiveProtectionsSeverity string
    Protections with this severity only will be activated in the profile.
    AntiBot bool
    Is Anti-Bot blade activated.
    AntiVirus bool
    Is Anti-Virus blade activated.
    Color string
    Color of the object. Should be one of existing colors.
    Comments string
    Comments string.
    ConfidenceLevelHigh string
    Action for protections with high confidence level.
    ConfidenceLevelLow string
    Action for protections with low confidence level.
    ConfidenceLevelMedium string
    Action for protections with medium confidence level.
    DeactivateProtectionsByExtendedAttributes List<ManagementThreatProfileDeactivateProtectionsByExtendedAttribute>
    Deactivate protections by these extended attributes. deactivate_protections_by_extended_attributes blocks are documented below.
    IgnoreErrors bool
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    IgnoreWarnings bool
    Apply changes ignoring warnings.
    IndicatorOverrides List<ManagementThreatProfileIndicatorOverride>
    Indicators whose action will be overridden in this profile. indicator_overrides blocks are documented below.
    Ips bool
    Is IPS blade activated.
    IpsSettings List<ManagementThreatProfileIpsSetting>
    IPS blade settings. ips_settings blocks are documented below.
    MaliciousMailPolicySettings List<ManagementThreatProfileMaliciousMailPolicySetting>
    Malicious Mail Policy for MTA Gateways. malicious_mail_policy_settings blocks are documented below.
    ManagementThreatProfileId string
    Name string
    Object name. Should be unique in the domain.
    Overrides List<ManagementThreatProfileOverride>
    Overrides per profile for this protection. overrides blocks are documented below.
    ScanMaliciousLinks List<ManagementThreatProfileScanMaliciousLink>
    Scans malicious links (URLs) inside email messages. scan_malicious_links blocks are documented below.
    Tags List<string>
    Collection of tag identifiers.
    ThreatEmulation bool
    Is Threat Emulation blade activated.
    ThreatExtraction bool
    Is Threat-Extraction blade activated.
    UseExtendedAttributes bool
    Whether to activate/deactivate IPS protections according to the extended attributes.
    UseIndicators bool
    Indicates whether the profile should make use of indicators.
    ZeroPhishing bool
    Is Zero-Phishing blade activated.
    ActiveProtectionsPerformanceImpact string
    Protections with this performance impact only will be activated in the profile.
    ActiveProtectionsSeverity string
    Protections with this severity only will be activated in the profile.
    AntiBot bool
    Is Anti-Bot blade activated.
    AntiVirus bool
    Is Anti-Virus blade activated.
    Color string
    Color of the object. Should be one of existing colors.
    Comments string
    Comments string.
    ConfidenceLevelHigh string
    Action for protections with high confidence level.
    ConfidenceLevelLow string
    Action for protections with low confidence level.
    ConfidenceLevelMedium string
    Action for protections with medium confidence level.
    DeactivateProtectionsByExtendedAttributes []ManagementThreatProfileDeactivateProtectionsByExtendedAttributeArgs
    Deactivate protections by these extended attributes. deactivate_protections_by_extended_attributes blocks are documented below.
    IgnoreErrors bool
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    IgnoreWarnings bool
    Apply changes ignoring warnings.
    IndicatorOverrides []ManagementThreatProfileIndicatorOverrideArgs
    Indicators whose action will be overridden in this profile. indicator_overrides blocks are documented below.
    Ips bool
    Is IPS blade activated.
    IpsSettings []ManagementThreatProfileIpsSettingArgs
    IPS blade settings. ips_settings blocks are documented below.
    MaliciousMailPolicySettings []ManagementThreatProfileMaliciousMailPolicySettingArgs
    Malicious Mail Policy for MTA Gateways. malicious_mail_policy_settings blocks are documented below.
    ManagementThreatProfileId string
    Name string
    Object name. Should be unique in the domain.
    Overrides []ManagementThreatProfileOverrideArgs
    Overrides per profile for this protection. overrides blocks are documented below.
    ScanMaliciousLinks []ManagementThreatProfileScanMaliciousLinkArgs
    Scans malicious links (URLs) inside email messages. scan_malicious_links blocks are documented below.
    Tags []string
    Collection of tag identifiers.
    ThreatEmulation bool
    Is Threat Emulation blade activated.
    ThreatExtraction bool
    Is Threat-Extraction blade activated.
    UseExtendedAttributes bool
    Whether to activate/deactivate IPS protections according to the extended attributes.
    UseIndicators bool
    Indicates whether the profile should make use of indicators.
    ZeroPhishing bool
    Is Zero-Phishing blade activated.
    activeProtectionsPerformanceImpact String
    Protections with this performance impact only will be activated in the profile.
    activeProtectionsSeverity String
    Protections with this severity only will be activated in the profile.
    antiBot Boolean
    Is Anti-Bot blade activated.
    antiVirus Boolean
    Is Anti-Virus blade activated.
    color String
    Color of the object. Should be one of existing colors.
    comments String
    Comments string.
    confidenceLevelHigh String
    Action for protections with high confidence level.
    confidenceLevelLow String
    Action for protections with low confidence level.
    confidenceLevelMedium String
    Action for protections with medium confidence level.
    deactivateProtectionsByExtendedAttributes List<ManagementThreatProfileDeactivateProtectionsByExtendedAttribute>
    Deactivate protections by these extended attributes. deactivate_protections_by_extended_attributes blocks are documented below.
    ignoreErrors Boolean
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    ignoreWarnings Boolean
    Apply changes ignoring warnings.
    indicatorOverrides List<ManagementThreatProfileIndicatorOverride>
    Indicators whose action will be overridden in this profile. indicator_overrides blocks are documented below.
    ips Boolean
    Is IPS blade activated.
    ipsSettings List<ManagementThreatProfileIpsSetting>
    IPS blade settings. ips_settings blocks are documented below.
    maliciousMailPolicySettings List<ManagementThreatProfileMaliciousMailPolicySetting>
    Malicious Mail Policy for MTA Gateways. malicious_mail_policy_settings blocks are documented below.
    managementThreatProfileId String
    name String
    Object name. Should be unique in the domain.
    overrides List<ManagementThreatProfileOverride>
    Overrides per profile for this protection. overrides blocks are documented below.
    scanMaliciousLinks List<ManagementThreatProfileScanMaliciousLink>
    Scans malicious links (URLs) inside email messages. scan_malicious_links blocks are documented below.
    tags List<String>
    Collection of tag identifiers.
    threatEmulation Boolean
    Is Threat Emulation blade activated.
    threatExtraction Boolean
    Is Threat-Extraction blade activated.
    useExtendedAttributes Boolean
    Whether to activate/deactivate IPS protections according to the extended attributes.
    useIndicators Boolean
    Indicates whether the profile should make use of indicators.
    zeroPhishing Boolean
    Is Zero-Phishing blade activated.
    activeProtectionsPerformanceImpact string
    Protections with this performance impact only will be activated in the profile.
    activeProtectionsSeverity string
    Protections with this severity only will be activated in the profile.
    antiBot boolean
    Is Anti-Bot blade activated.
    antiVirus boolean
    Is Anti-Virus blade activated.
    color string
    Color of the object. Should be one of existing colors.
    comments string
    Comments string.
    confidenceLevelHigh string
    Action for protections with high confidence level.
    confidenceLevelLow string
    Action for protections with low confidence level.
    confidenceLevelMedium string
    Action for protections with medium confidence level.
    deactivateProtectionsByExtendedAttributes ManagementThreatProfileDeactivateProtectionsByExtendedAttribute[]
    Deactivate protections by these extended attributes. deactivate_protections_by_extended_attributes blocks are documented below.
    ignoreErrors boolean
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    ignoreWarnings boolean
    Apply changes ignoring warnings.
    indicatorOverrides ManagementThreatProfileIndicatorOverride[]
    Indicators whose action will be overridden in this profile. indicator_overrides blocks are documented below.
    ips boolean
    Is IPS blade activated.
    ipsSettings ManagementThreatProfileIpsSetting[]
    IPS blade settings. ips_settings blocks are documented below.
    maliciousMailPolicySettings ManagementThreatProfileMaliciousMailPolicySetting[]
    Malicious Mail Policy for MTA Gateways. malicious_mail_policy_settings blocks are documented below.
    managementThreatProfileId string
    name string
    Object name. Should be unique in the domain.
    overrides ManagementThreatProfileOverride[]
    Overrides per profile for this protection. overrides blocks are documented below.
    scanMaliciousLinks ManagementThreatProfileScanMaliciousLink[]
    Scans malicious links (URLs) inside email messages. scan_malicious_links blocks are documented below.
    tags string[]
    Collection of tag identifiers.
    threatEmulation boolean
    Is Threat Emulation blade activated.
    threatExtraction boolean
    Is Threat-Extraction blade activated.
    useExtendedAttributes boolean
    Whether to activate/deactivate IPS protections according to the extended attributes.
    useIndicators boolean
    Indicates whether the profile should make use of indicators.
    zeroPhishing boolean
    Is Zero-Phishing blade activated.
    active_protections_performance_impact str
    Protections with this performance impact only will be activated in the profile.
    active_protections_severity str
    Protections with this severity only will be activated in the profile.
    anti_bot bool
    Is Anti-Bot blade activated.
    anti_virus bool
    Is Anti-Virus blade activated.
    color str
    Color of the object. Should be one of existing colors.
    comments str
    Comments string.
    confidence_level_high str
    Action for protections with high confidence level.
    confidence_level_low str
    Action for protections with low confidence level.
    confidence_level_medium str
    Action for protections with medium confidence level.
    deactivate_protections_by_extended_attributes Sequence[ManagementThreatProfileDeactivateProtectionsByExtendedAttributeArgs]
    Deactivate protections by these extended attributes. deactivate_protections_by_extended_attributes blocks are documented below.
    ignore_errors bool
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    ignore_warnings bool
    Apply changes ignoring warnings.
    indicator_overrides Sequence[ManagementThreatProfileIndicatorOverrideArgs]
    Indicators whose action will be overridden in this profile. indicator_overrides blocks are documented below.
    ips bool
    Is IPS blade activated.
    ips_settings Sequence[ManagementThreatProfileIpsSettingArgs]
    IPS blade settings. ips_settings blocks are documented below.
    malicious_mail_policy_settings Sequence[ManagementThreatProfileMaliciousMailPolicySettingArgs]
    Malicious Mail Policy for MTA Gateways. malicious_mail_policy_settings blocks are documented below.
    management_threat_profile_id str
    name str
    Object name. Should be unique in the domain.
    overrides Sequence[ManagementThreatProfileOverrideArgs]
    Overrides per profile for this protection. overrides blocks are documented below.
    scan_malicious_links Sequence[ManagementThreatProfileScanMaliciousLinkArgs]
    Scans malicious links (URLs) inside email messages. scan_malicious_links blocks are documented below.
    tags Sequence[str]
    Collection of tag identifiers.
    threat_emulation bool
    Is Threat Emulation blade activated.
    threat_extraction bool
    Is Threat-Extraction blade activated.
    use_extended_attributes bool
    Whether to activate/deactivate IPS protections according to the extended attributes.
    use_indicators bool
    Indicates whether the profile should make use of indicators.
    zero_phishing bool
    Is Zero-Phishing blade activated.
    activeProtectionsPerformanceImpact String
    Protections with this performance impact only will be activated in the profile.
    activeProtectionsSeverity String
    Protections with this severity only will be activated in the profile.
    antiBot Boolean
    Is Anti-Bot blade activated.
    antiVirus Boolean
    Is Anti-Virus blade activated.
    color String
    Color of the object. Should be one of existing colors.
    comments String
    Comments string.
    confidenceLevelHigh String
    Action for protections with high confidence level.
    confidenceLevelLow String
    Action for protections with low confidence level.
    confidenceLevelMedium String
    Action for protections with medium confidence level.
    deactivateProtectionsByExtendedAttributes List<Property Map>
    Deactivate protections by these extended attributes. deactivate_protections_by_extended_attributes blocks are documented below.
    ignoreErrors Boolean
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    ignoreWarnings Boolean
    Apply changes ignoring warnings.
    indicatorOverrides List<Property Map>
    Indicators whose action will be overridden in this profile. indicator_overrides blocks are documented below.
    ips Boolean
    Is IPS blade activated.
    ipsSettings List<Property Map>
    IPS blade settings. ips_settings blocks are documented below.
    maliciousMailPolicySettings List<Property Map>
    Malicious Mail Policy for MTA Gateways. malicious_mail_policy_settings blocks are documented below.
    managementThreatProfileId String
    name String
    Object name. Should be unique in the domain.
    overrides List<Property Map>
    Overrides per profile for this protection. overrides blocks are documented below.
    scanMaliciousLinks List<Property Map>
    Scans malicious links (URLs) inside email messages. scan_malicious_links blocks are documented below.
    tags List<String>
    Collection of tag identifiers.
    threatEmulation Boolean
    Is Threat Emulation blade activated.
    threatExtraction Boolean
    Is Threat-Extraction blade activated.
    useExtendedAttributes Boolean
    Whether to activate/deactivate IPS protections according to the extended attributes.
    useIndicators Boolean
    Indicates whether the profile should make use of indicators.
    zeroPhishing Boolean
    Is Zero-Phishing blade activated.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the ManagementThreatProfile resource produces the following output properties:

    ActivateProtectionsByExtendedAttributes List<ManagementThreatProfileActivateProtectionsByExtendedAttribute>
    Activate protections by these extended attributes. activate_protections_by_extended_attributes blocks are documented below.
    Id string
    The provider-assigned unique ID for this managed resource.
    ActivateProtectionsByExtendedAttributes []ManagementThreatProfileActivateProtectionsByExtendedAttribute
    Activate protections by these extended attributes. activate_protections_by_extended_attributes blocks are documented below.
    Id string
    The provider-assigned unique ID for this managed resource.
    activateProtectionsByExtendedAttributes List<ManagementThreatProfileActivateProtectionsByExtendedAttribute>
    Activate protections by these extended attributes. activate_protections_by_extended_attributes blocks are documented below.
    id String
    The provider-assigned unique ID for this managed resource.
    activateProtectionsByExtendedAttributes ManagementThreatProfileActivateProtectionsByExtendedAttribute[]
    Activate protections by these extended attributes. activate_protections_by_extended_attributes blocks are documented below.
    id string
    The provider-assigned unique ID for this managed resource.
    activate_protections_by_extended_attributes Sequence[ManagementThreatProfileActivateProtectionsByExtendedAttribute]
    Activate protections by these extended attributes. activate_protections_by_extended_attributes blocks are documented below.
    id str
    The provider-assigned unique ID for this managed resource.
    activateProtectionsByExtendedAttributes List<Property Map>
    Activate protections by these extended attributes. activate_protections_by_extended_attributes blocks are documented below.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing ManagementThreatProfile Resource

    Get an existing ManagementThreatProfile resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: ManagementThreatProfileState, opts?: CustomResourceOptions): ManagementThreatProfile
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        activate_protections_by_extended_attributes: Optional[Sequence[ManagementThreatProfileActivateProtectionsByExtendedAttributeArgs]] = None,
        active_protections_performance_impact: Optional[str] = None,
        active_protections_severity: Optional[str] = None,
        anti_bot: Optional[bool] = None,
        anti_virus: Optional[bool] = None,
        color: Optional[str] = None,
        comments: Optional[str] = None,
        confidence_level_high: Optional[str] = None,
        confidence_level_low: Optional[str] = None,
        confidence_level_medium: Optional[str] = None,
        deactivate_protections_by_extended_attributes: Optional[Sequence[ManagementThreatProfileDeactivateProtectionsByExtendedAttributeArgs]] = None,
        ignore_errors: Optional[bool] = None,
        ignore_warnings: Optional[bool] = None,
        indicator_overrides: Optional[Sequence[ManagementThreatProfileIndicatorOverrideArgs]] = None,
        ips: Optional[bool] = None,
        ips_settings: Optional[Sequence[ManagementThreatProfileIpsSettingArgs]] = None,
        malicious_mail_policy_settings: Optional[Sequence[ManagementThreatProfileMaliciousMailPolicySettingArgs]] = None,
        management_threat_profile_id: Optional[str] = None,
        name: Optional[str] = None,
        overrides: Optional[Sequence[ManagementThreatProfileOverrideArgs]] = None,
        scan_malicious_links: Optional[Sequence[ManagementThreatProfileScanMaliciousLinkArgs]] = None,
        tags: Optional[Sequence[str]] = None,
        threat_emulation: Optional[bool] = None,
        threat_extraction: Optional[bool] = None,
        use_extended_attributes: Optional[bool] = None,
        use_indicators: Optional[bool] = None,
        zero_phishing: Optional[bool] = None) -> ManagementThreatProfile
    func GetManagementThreatProfile(ctx *Context, name string, id IDInput, state *ManagementThreatProfileState, opts ...ResourceOption) (*ManagementThreatProfile, error)
    public static ManagementThreatProfile Get(string name, Input<string> id, ManagementThreatProfileState? state, CustomResourceOptions? opts = null)
    public static ManagementThreatProfile get(String name, Output<String> id, ManagementThreatProfileState state, CustomResourceOptions options)
    resources:  _:    type: checkpoint:ManagementThreatProfile    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    ActivateProtectionsByExtendedAttributes List<ManagementThreatProfileActivateProtectionsByExtendedAttribute>
    Activate protections by these extended attributes. activate_protections_by_extended_attributes blocks are documented below.
    ActiveProtectionsPerformanceImpact string
    Protections with this performance impact only will be activated in the profile.
    ActiveProtectionsSeverity string
    Protections with this severity only will be activated in the profile.
    AntiBot bool
    Is Anti-Bot blade activated.
    AntiVirus bool
    Is Anti-Virus blade activated.
    Color string
    Color of the object. Should be one of existing colors.
    Comments string
    Comments string.
    ConfidenceLevelHigh string
    Action for protections with high confidence level.
    ConfidenceLevelLow string
    Action for protections with low confidence level.
    ConfidenceLevelMedium string
    Action for protections with medium confidence level.
    DeactivateProtectionsByExtendedAttributes List<ManagementThreatProfileDeactivateProtectionsByExtendedAttribute>
    Deactivate protections by these extended attributes. deactivate_protections_by_extended_attributes blocks are documented below.
    IgnoreErrors bool
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    IgnoreWarnings bool
    Apply changes ignoring warnings.
    IndicatorOverrides List<ManagementThreatProfileIndicatorOverride>
    Indicators whose action will be overridden in this profile. indicator_overrides blocks are documented below.
    Ips bool
    Is IPS blade activated.
    IpsSettings List<ManagementThreatProfileIpsSetting>
    IPS blade settings. ips_settings blocks are documented below.
    MaliciousMailPolicySettings List<ManagementThreatProfileMaliciousMailPolicySetting>
    Malicious Mail Policy for MTA Gateways. malicious_mail_policy_settings blocks are documented below.
    ManagementThreatProfileId string
    Name string
    Object name. Should be unique in the domain.
    Overrides List<ManagementThreatProfileOverride>
    Overrides per profile for this protection. overrides blocks are documented below.
    ScanMaliciousLinks List<ManagementThreatProfileScanMaliciousLink>
    Scans malicious links (URLs) inside email messages. scan_malicious_links blocks are documented below.
    Tags List<string>
    Collection of tag identifiers.
    ThreatEmulation bool
    Is Threat Emulation blade activated.
    ThreatExtraction bool
    Is Threat-Extraction blade activated.
    UseExtendedAttributes bool
    Whether to activate/deactivate IPS protections according to the extended attributes.
    UseIndicators bool
    Indicates whether the profile should make use of indicators.
    ZeroPhishing bool
    Is Zero-Phishing blade activated.
    ActivateProtectionsByExtendedAttributes []ManagementThreatProfileActivateProtectionsByExtendedAttributeArgs
    Activate protections by these extended attributes. activate_protections_by_extended_attributes blocks are documented below.
    ActiveProtectionsPerformanceImpact string
    Protections with this performance impact only will be activated in the profile.
    ActiveProtectionsSeverity string
    Protections with this severity only will be activated in the profile.
    AntiBot bool
    Is Anti-Bot blade activated.
    AntiVirus bool
    Is Anti-Virus blade activated.
    Color string
    Color of the object. Should be one of existing colors.
    Comments string
    Comments string.
    ConfidenceLevelHigh string
    Action for protections with high confidence level.
    ConfidenceLevelLow string
    Action for protections with low confidence level.
    ConfidenceLevelMedium string
    Action for protections with medium confidence level.
    DeactivateProtectionsByExtendedAttributes []ManagementThreatProfileDeactivateProtectionsByExtendedAttributeArgs
    Deactivate protections by these extended attributes. deactivate_protections_by_extended_attributes blocks are documented below.
    IgnoreErrors bool
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    IgnoreWarnings bool
    Apply changes ignoring warnings.
    IndicatorOverrides []ManagementThreatProfileIndicatorOverrideArgs
    Indicators whose action will be overridden in this profile. indicator_overrides blocks are documented below.
    Ips bool
    Is IPS blade activated.
    IpsSettings []ManagementThreatProfileIpsSettingArgs
    IPS blade settings. ips_settings blocks are documented below.
    MaliciousMailPolicySettings []ManagementThreatProfileMaliciousMailPolicySettingArgs
    Malicious Mail Policy for MTA Gateways. malicious_mail_policy_settings blocks are documented below.
    ManagementThreatProfileId string
    Name string
    Object name. Should be unique in the domain.
    Overrides []ManagementThreatProfileOverrideArgs
    Overrides per profile for this protection. overrides blocks are documented below.
    ScanMaliciousLinks []ManagementThreatProfileScanMaliciousLinkArgs
    Scans malicious links (URLs) inside email messages. scan_malicious_links blocks are documented below.
    Tags []string
    Collection of tag identifiers.
    ThreatEmulation bool
    Is Threat Emulation blade activated.
    ThreatExtraction bool
    Is Threat-Extraction blade activated.
    UseExtendedAttributes bool
    Whether to activate/deactivate IPS protections according to the extended attributes.
    UseIndicators bool
    Indicates whether the profile should make use of indicators.
    ZeroPhishing bool
    Is Zero-Phishing blade activated.
    activateProtectionsByExtendedAttributes List<ManagementThreatProfileActivateProtectionsByExtendedAttribute>
    Activate protections by these extended attributes. activate_protections_by_extended_attributes blocks are documented below.
    activeProtectionsPerformanceImpact String
    Protections with this performance impact only will be activated in the profile.
    activeProtectionsSeverity String
    Protections with this severity only will be activated in the profile.
    antiBot Boolean
    Is Anti-Bot blade activated.
    antiVirus Boolean
    Is Anti-Virus blade activated.
    color String
    Color of the object. Should be one of existing colors.
    comments String
    Comments string.
    confidenceLevelHigh String
    Action for protections with high confidence level.
    confidenceLevelLow String
    Action for protections with low confidence level.
    confidenceLevelMedium String
    Action for protections with medium confidence level.
    deactivateProtectionsByExtendedAttributes List<ManagementThreatProfileDeactivateProtectionsByExtendedAttribute>
    Deactivate protections by these extended attributes. deactivate_protections_by_extended_attributes blocks are documented below.
    ignoreErrors Boolean
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    ignoreWarnings Boolean
    Apply changes ignoring warnings.
    indicatorOverrides List<ManagementThreatProfileIndicatorOverride>
    Indicators whose action will be overridden in this profile. indicator_overrides blocks are documented below.
    ips Boolean
    Is IPS blade activated.
    ipsSettings List<ManagementThreatProfileIpsSetting>
    IPS blade settings. ips_settings blocks are documented below.
    maliciousMailPolicySettings List<ManagementThreatProfileMaliciousMailPolicySetting>
    Malicious Mail Policy for MTA Gateways. malicious_mail_policy_settings blocks are documented below.
    managementThreatProfileId String
    name String
    Object name. Should be unique in the domain.
    overrides List<ManagementThreatProfileOverride>
    Overrides per profile for this protection. overrides blocks are documented below.
    scanMaliciousLinks List<ManagementThreatProfileScanMaliciousLink>
    Scans malicious links (URLs) inside email messages. scan_malicious_links blocks are documented below.
    tags List<String>
    Collection of tag identifiers.
    threatEmulation Boolean
    Is Threat Emulation blade activated.
    threatExtraction Boolean
    Is Threat-Extraction blade activated.
    useExtendedAttributes Boolean
    Whether to activate/deactivate IPS protections according to the extended attributes.
    useIndicators Boolean
    Indicates whether the profile should make use of indicators.
    zeroPhishing Boolean
    Is Zero-Phishing blade activated.
    activateProtectionsByExtendedAttributes ManagementThreatProfileActivateProtectionsByExtendedAttribute[]
    Activate protections by these extended attributes. activate_protections_by_extended_attributes blocks are documented below.
    activeProtectionsPerformanceImpact string
    Protections with this performance impact only will be activated in the profile.
    activeProtectionsSeverity string
    Protections with this severity only will be activated in the profile.
    antiBot boolean
    Is Anti-Bot blade activated.
    antiVirus boolean
    Is Anti-Virus blade activated.
    color string
    Color of the object. Should be one of existing colors.
    comments string
    Comments string.
    confidenceLevelHigh string
    Action for protections with high confidence level.
    confidenceLevelLow string
    Action for protections with low confidence level.
    confidenceLevelMedium string
    Action for protections with medium confidence level.
    deactivateProtectionsByExtendedAttributes ManagementThreatProfileDeactivateProtectionsByExtendedAttribute[]
    Deactivate protections by these extended attributes. deactivate_protections_by_extended_attributes blocks are documented below.
    ignoreErrors boolean
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    ignoreWarnings boolean
    Apply changes ignoring warnings.
    indicatorOverrides ManagementThreatProfileIndicatorOverride[]
    Indicators whose action will be overridden in this profile. indicator_overrides blocks are documented below.
    ips boolean
    Is IPS blade activated.
    ipsSettings ManagementThreatProfileIpsSetting[]
    IPS blade settings. ips_settings blocks are documented below.
    maliciousMailPolicySettings ManagementThreatProfileMaliciousMailPolicySetting[]
    Malicious Mail Policy for MTA Gateways. malicious_mail_policy_settings blocks are documented below.
    managementThreatProfileId string
    name string
    Object name. Should be unique in the domain.
    overrides ManagementThreatProfileOverride[]
    Overrides per profile for this protection. overrides blocks are documented below.
    scanMaliciousLinks ManagementThreatProfileScanMaliciousLink[]
    Scans malicious links (URLs) inside email messages. scan_malicious_links blocks are documented below.
    tags string[]
    Collection of tag identifiers.
    threatEmulation boolean
    Is Threat Emulation blade activated.
    threatExtraction boolean
    Is Threat-Extraction blade activated.
    useExtendedAttributes boolean
    Whether to activate/deactivate IPS protections according to the extended attributes.
    useIndicators boolean
    Indicates whether the profile should make use of indicators.
    zeroPhishing boolean
    Is Zero-Phishing blade activated.
    activate_protections_by_extended_attributes Sequence[ManagementThreatProfileActivateProtectionsByExtendedAttributeArgs]
    Activate protections by these extended attributes. activate_protections_by_extended_attributes blocks are documented below.
    active_protections_performance_impact str
    Protections with this performance impact only will be activated in the profile.
    active_protections_severity str
    Protections with this severity only will be activated in the profile.
    anti_bot bool
    Is Anti-Bot blade activated.
    anti_virus bool
    Is Anti-Virus blade activated.
    color str
    Color of the object. Should be one of existing colors.
    comments str
    Comments string.
    confidence_level_high str
    Action for protections with high confidence level.
    confidence_level_low str
    Action for protections with low confidence level.
    confidence_level_medium str
    Action for protections with medium confidence level.
    deactivate_protections_by_extended_attributes Sequence[ManagementThreatProfileDeactivateProtectionsByExtendedAttributeArgs]
    Deactivate protections by these extended attributes. deactivate_protections_by_extended_attributes blocks are documented below.
    ignore_errors bool
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    ignore_warnings bool
    Apply changes ignoring warnings.
    indicator_overrides Sequence[ManagementThreatProfileIndicatorOverrideArgs]
    Indicators whose action will be overridden in this profile. indicator_overrides blocks are documented below.
    ips bool
    Is IPS blade activated.
    ips_settings Sequence[ManagementThreatProfileIpsSettingArgs]
    IPS blade settings. ips_settings blocks are documented below.
    malicious_mail_policy_settings Sequence[ManagementThreatProfileMaliciousMailPolicySettingArgs]
    Malicious Mail Policy for MTA Gateways. malicious_mail_policy_settings blocks are documented below.
    management_threat_profile_id str
    name str
    Object name. Should be unique in the domain.
    overrides Sequence[ManagementThreatProfileOverrideArgs]
    Overrides per profile for this protection. overrides blocks are documented below.
    scan_malicious_links Sequence[ManagementThreatProfileScanMaliciousLinkArgs]
    Scans malicious links (URLs) inside email messages. scan_malicious_links blocks are documented below.
    tags Sequence[str]
    Collection of tag identifiers.
    threat_emulation bool
    Is Threat Emulation blade activated.
    threat_extraction bool
    Is Threat-Extraction blade activated.
    use_extended_attributes bool
    Whether to activate/deactivate IPS protections according to the extended attributes.
    use_indicators bool
    Indicates whether the profile should make use of indicators.
    zero_phishing bool
    Is Zero-Phishing blade activated.
    activateProtectionsByExtendedAttributes List<Property Map>
    Activate protections by these extended attributes. activate_protections_by_extended_attributes blocks are documented below.
    activeProtectionsPerformanceImpact String
    Protections with this performance impact only will be activated in the profile.
    activeProtectionsSeverity String
    Protections with this severity only will be activated in the profile.
    antiBot Boolean
    Is Anti-Bot blade activated.
    antiVirus Boolean
    Is Anti-Virus blade activated.
    color String
    Color of the object. Should be one of existing colors.
    comments String
    Comments string.
    confidenceLevelHigh String
    Action for protections with high confidence level.
    confidenceLevelLow String
    Action for protections with low confidence level.
    confidenceLevelMedium String
    Action for protections with medium confidence level.
    deactivateProtectionsByExtendedAttributes List<Property Map>
    Deactivate protections by these extended attributes. deactivate_protections_by_extended_attributes blocks are documented below.
    ignoreErrors Boolean
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    ignoreWarnings Boolean
    Apply changes ignoring warnings.
    indicatorOverrides List<Property Map>
    Indicators whose action will be overridden in this profile. indicator_overrides blocks are documented below.
    ips Boolean
    Is IPS blade activated.
    ipsSettings List<Property Map>
    IPS blade settings. ips_settings blocks are documented below.
    maliciousMailPolicySettings List<Property Map>
    Malicious Mail Policy for MTA Gateways. malicious_mail_policy_settings blocks are documented below.
    managementThreatProfileId String
    name String
    Object name. Should be unique in the domain.
    overrides List<Property Map>
    Overrides per profile for this protection. overrides blocks are documented below.
    scanMaliciousLinks List<Property Map>
    Scans malicious links (URLs) inside email messages. scan_malicious_links blocks are documented below.
    tags List<String>
    Collection of tag identifiers.
    threatEmulation Boolean
    Is Threat Emulation blade activated.
    threatExtraction Boolean
    Is Threat-Extraction blade activated.
    useExtendedAttributes Boolean
    Whether to activate/deactivate IPS protections according to the extended attributes.
    useIndicators Boolean
    Indicates whether the profile should make use of indicators.
    zeroPhishing Boolean
    Is Zero-Phishing blade activated.

    Supporting Types

    ManagementThreatProfileActivateProtectionsByExtendedAttribute, ManagementThreatProfileActivateProtectionsByExtendedAttributeArgs

    Category string
    IPS tag category name.
    Name string
    IPS tag name.
    Uid string
    IPS tag unique identifier.
    Values List<ManagementThreatProfileActivateProtectionsByExtendedAttributeValue>
    Collection of IPS protection extended attribute values (name and uid).
    Category string
    IPS tag category name.
    Name string
    IPS tag name.
    Uid string
    IPS tag unique identifier.
    Values []ManagementThreatProfileActivateProtectionsByExtendedAttributeValue
    Collection of IPS protection extended attribute values (name and uid).
    category String
    IPS tag category name.
    name String
    IPS tag name.
    uid String
    IPS tag unique identifier.
    values List<ManagementThreatProfileActivateProtectionsByExtendedAttributeValue>
    Collection of IPS protection extended attribute values (name and uid).
    category string
    IPS tag category name.
    name string
    IPS tag name.
    uid string
    IPS tag unique identifier.
    values ManagementThreatProfileActivateProtectionsByExtendedAttributeValue[]
    Collection of IPS protection extended attribute values (name and uid).
    category str
    IPS tag category name.
    name str
    IPS tag name.
    uid str
    IPS tag unique identifier.
    values Sequence[ManagementThreatProfileActivateProtectionsByExtendedAttributeValue]
    Collection of IPS protection extended attribute values (name and uid).
    category String
    IPS tag category name.
    name String
    IPS tag name.
    uid String
    IPS tag unique identifier.
    values List<Property Map>
    Collection of IPS protection extended attribute values (name and uid).

    ManagementThreatProfileActivateProtectionsByExtendedAttributeValue, ManagementThreatProfileActivateProtectionsByExtendedAttributeValueArgs

    Name string
    Object name. Should be unique in the domain.
    Uid string
    Name string
    Object name. Should be unique in the domain.
    Uid string
    name String
    Object name. Should be unique in the domain.
    uid String
    name string
    Object name. Should be unique in the domain.
    uid string
    name str
    Object name. Should be unique in the domain.
    uid str
    name String
    Object name. Should be unique in the domain.
    uid String

    ManagementThreatProfileDeactivateProtectionsByExtendedAttribute, ManagementThreatProfileDeactivateProtectionsByExtendedAttributeArgs

    Category string
    IPS tag category name.
    Name string
    IPS tag name.
    Uid string
    IPS tag unique identifier.
    Values List<ManagementThreatProfileDeactivateProtectionsByExtendedAttributeValue>
    Collection of IPS protection extended attribute values (name and uid).
    Category string
    IPS tag category name.
    Name string
    IPS tag name.
    Uid string
    IPS tag unique identifier.
    Values []ManagementThreatProfileDeactivateProtectionsByExtendedAttributeValue
    Collection of IPS protection extended attribute values (name and uid).
    category String
    IPS tag category name.
    name String
    IPS tag name.
    uid String
    IPS tag unique identifier.
    values List<ManagementThreatProfileDeactivateProtectionsByExtendedAttributeValue>
    Collection of IPS protection extended attribute values (name and uid).
    category string
    IPS tag category name.
    name string
    IPS tag name.
    uid string
    IPS tag unique identifier.
    values ManagementThreatProfileDeactivateProtectionsByExtendedAttributeValue[]
    Collection of IPS protection extended attribute values (name and uid).
    category str
    IPS tag category name.
    name str
    IPS tag name.
    uid str
    IPS tag unique identifier.
    values Sequence[ManagementThreatProfileDeactivateProtectionsByExtendedAttributeValue]
    Collection of IPS protection extended attribute values (name and uid).
    category String
    IPS tag category name.
    name String
    IPS tag name.
    uid String
    IPS tag unique identifier.
    values List<Property Map>
    Collection of IPS protection extended attribute values (name and uid).

    ManagementThreatProfileDeactivateProtectionsByExtendedAttributeValue, ManagementThreatProfileDeactivateProtectionsByExtendedAttributeValueArgs

    Name string
    Object name. Should be unique in the domain.
    Uid string
    Name string
    Object name. Should be unique in the domain.
    Uid string
    name String
    Object name. Should be unique in the domain.
    uid String
    name string
    Object name. Should be unique in the domain.
    uid string
    name str
    Object name. Should be unique in the domain.
    uid str
    name String
    Object name. Should be unique in the domain.
    uid String

    ManagementThreatProfileIndicatorOverride, ManagementThreatProfileIndicatorOverrideArgs

    Action string
    The indicator's action in this profile.
    Indicator string
    The indicator whose action is to be overriden.
    Action string
    The indicator's action in this profile.
    Indicator string
    The indicator whose action is to be overriden.
    action String
    The indicator's action in this profile.
    indicator String
    The indicator whose action is to be overriden.
    action string
    The indicator's action in this profile.
    indicator string
    The indicator whose action is to be overriden.
    action str
    The indicator's action in this profile.
    indicator str
    The indicator whose action is to be overriden.
    action String
    The indicator's action in this profile.
    indicator String
    The indicator whose action is to be overriden.

    ManagementThreatProfileIpsSetting, ManagementThreatProfileIpsSettingArgs

    ExcludeProtectionWithPerformanceImpact bool
    Whether to exclude protections depending on their level of performance impact.
    ExcludeProtectionWithPerformanceImpactMode string
    Exclude protections with this level of performance impact.
    ExcludeProtectionWithSeverity bool
    Whether to exclude protections depending on their level of severity.
    ExcludeProtectionWithSeverityMode string
    Exclude protections with this level of severity.
    NewlyUpdatedProtections string
    Activation of newly updated protections.
    ExcludeProtectionWithPerformanceImpact bool
    Whether to exclude protections depending on their level of performance impact.
    ExcludeProtectionWithPerformanceImpactMode string
    Exclude protections with this level of performance impact.
    ExcludeProtectionWithSeverity bool
    Whether to exclude protections depending on their level of severity.
    ExcludeProtectionWithSeverityMode string
    Exclude protections with this level of severity.
    NewlyUpdatedProtections string
    Activation of newly updated protections.
    excludeProtectionWithPerformanceImpact Boolean
    Whether to exclude protections depending on their level of performance impact.
    excludeProtectionWithPerformanceImpactMode String
    Exclude protections with this level of performance impact.
    excludeProtectionWithSeverity Boolean
    Whether to exclude protections depending on their level of severity.
    excludeProtectionWithSeverityMode String
    Exclude protections with this level of severity.
    newlyUpdatedProtections String
    Activation of newly updated protections.
    excludeProtectionWithPerformanceImpact boolean
    Whether to exclude protections depending on their level of performance impact.
    excludeProtectionWithPerformanceImpactMode string
    Exclude protections with this level of performance impact.
    excludeProtectionWithSeverity boolean
    Whether to exclude protections depending on their level of severity.
    excludeProtectionWithSeverityMode string
    Exclude protections with this level of severity.
    newlyUpdatedProtections string
    Activation of newly updated protections.
    exclude_protection_with_performance_impact bool
    Whether to exclude protections depending on their level of performance impact.
    exclude_protection_with_performance_impact_mode str
    Exclude protections with this level of performance impact.
    exclude_protection_with_severity bool
    Whether to exclude protections depending on their level of severity.
    exclude_protection_with_severity_mode str
    Exclude protections with this level of severity.
    newly_updated_protections str
    Activation of newly updated protections.
    excludeProtectionWithPerformanceImpact Boolean
    Whether to exclude protections depending on their level of performance impact.
    excludeProtectionWithPerformanceImpactMode String
    Exclude protections with this level of performance impact.
    excludeProtectionWithSeverity Boolean
    Whether to exclude protections depending on their level of severity.
    excludeProtectionWithSeverityMode String
    Exclude protections with this level of severity.
    newlyUpdatedProtections String
    Activation of newly updated protections.

    ManagementThreatProfileMaliciousMailPolicySetting, ManagementThreatProfileMaliciousMailPolicySettingArgs

    AddCustomizedTextToEmailBody bool
    Add customized text to the malicious email body.
    AddEmailSubjectPrefix bool
    Add a prefix to the malicious email subject.
    AddXHeaderToEmail bool
    Add an X-Header to the malicious email.
    EmailAction string
    Block - block the entire malicious email. Allow - pass the malicious email and apply email changes (like: remove attachments and links, add x-header, etc...).
    EmailBodyCustomizedText string
    Customized text for the malicious email body. Available predefined fields: $verdicts$ - the malicious/error attachments/links verdict.
    EmailSubjectPrefixText string
    Prefix for the malicious email subject.
    FailedToScanAttachmentsText string
    Replace attachments that failed to be scanned with this text. Available predefined fields: $filename$ - the malicious file name. $md5$ - MD5 of the malicious file.
    MaliciousAttachmentsText string
    Replace malicious attachments with this text. Available predefined fields: $filename$ - the malicious file name. $md5$ - MD5 of the malicious file.
    MaliciousLinksText string
    Replace malicious links with this text. Available predefined fields: $neutralized_url$ - neutralized malicious link.
    RemoveAttachmentsAndLinks bool
    Remove attachments and links from the malicious email.
    SendCopy bool
    Send a copy of the malicious email to the recipient list.
    SendCopyLists List<string>
    Recipient list to send a copy of the malicious email.
    AddCustomizedTextToEmailBody bool
    Add customized text to the malicious email body.
    AddEmailSubjectPrefix bool
    Add a prefix to the malicious email subject.
    AddXHeaderToEmail bool
    Add an X-Header to the malicious email.
    EmailAction string
    Block - block the entire malicious email. Allow - pass the malicious email and apply email changes (like: remove attachments and links, add x-header, etc...).
    EmailBodyCustomizedText string
    Customized text for the malicious email body. Available predefined fields: $verdicts$ - the malicious/error attachments/links verdict.
    EmailSubjectPrefixText string
    Prefix for the malicious email subject.
    FailedToScanAttachmentsText string
    Replace attachments that failed to be scanned with this text. Available predefined fields: $filename$ - the malicious file name. $md5$ - MD5 of the malicious file.
    MaliciousAttachmentsText string
    Replace malicious attachments with this text. Available predefined fields: $filename$ - the malicious file name. $md5$ - MD5 of the malicious file.
    MaliciousLinksText string
    Replace malicious links with this text. Available predefined fields: $neutralized_url$ - neutralized malicious link.
    RemoveAttachmentsAndLinks bool
    Remove attachments and links from the malicious email.
    SendCopy bool
    Send a copy of the malicious email to the recipient list.
    SendCopyLists []string
    Recipient list to send a copy of the malicious email.
    addCustomizedTextToEmailBody Boolean
    Add customized text to the malicious email body.
    addEmailSubjectPrefix Boolean
    Add a prefix to the malicious email subject.
    addXHeaderToEmail Boolean
    Add an X-Header to the malicious email.
    emailAction String
    Block - block the entire malicious email. Allow - pass the malicious email and apply email changes (like: remove attachments and links, add x-header, etc...).
    emailBodyCustomizedText String
    Customized text for the malicious email body. Available predefined fields: $verdicts$ - the malicious/error attachments/links verdict.
    emailSubjectPrefixText String
    Prefix for the malicious email subject.
    failedToScanAttachmentsText String
    Replace attachments that failed to be scanned with this text. Available predefined fields: $filename$ - the malicious file name. $md5$ - MD5 of the malicious file.
    maliciousAttachmentsText String
    Replace malicious attachments with this text. Available predefined fields: $filename$ - the malicious file name. $md5$ - MD5 of the malicious file.
    maliciousLinksText String
    Replace malicious links with this text. Available predefined fields: $neutralized_url$ - neutralized malicious link.
    removeAttachmentsAndLinks Boolean
    Remove attachments and links from the malicious email.
    sendCopy Boolean
    Send a copy of the malicious email to the recipient list.
    sendCopyLists List<String>
    Recipient list to send a copy of the malicious email.
    addCustomizedTextToEmailBody boolean
    Add customized text to the malicious email body.
    addEmailSubjectPrefix boolean
    Add a prefix to the malicious email subject.
    addXHeaderToEmail boolean
    Add an X-Header to the malicious email.
    emailAction string
    Block - block the entire malicious email. Allow - pass the malicious email and apply email changes (like: remove attachments and links, add x-header, etc...).
    emailBodyCustomizedText string
    Customized text for the malicious email body. Available predefined fields: $verdicts$ - the malicious/error attachments/links verdict.
    emailSubjectPrefixText string
    Prefix for the malicious email subject.
    failedToScanAttachmentsText string
    Replace attachments that failed to be scanned with this text. Available predefined fields: $filename$ - the malicious file name. $md5$ - MD5 of the malicious file.
    maliciousAttachmentsText string
    Replace malicious attachments with this text. Available predefined fields: $filename$ - the malicious file name. $md5$ - MD5 of the malicious file.
    maliciousLinksText string
    Replace malicious links with this text. Available predefined fields: $neutralized_url$ - neutralized malicious link.
    removeAttachmentsAndLinks boolean
    Remove attachments and links from the malicious email.
    sendCopy boolean
    Send a copy of the malicious email to the recipient list.
    sendCopyLists string[]
    Recipient list to send a copy of the malicious email.
    add_customized_text_to_email_body bool
    Add customized text to the malicious email body.
    add_email_subject_prefix bool
    Add a prefix to the malicious email subject.
    add_x_header_to_email bool
    Add an X-Header to the malicious email.
    email_action str
    Block - block the entire malicious email. Allow - pass the malicious email and apply email changes (like: remove attachments and links, add x-header, etc...).
    email_body_customized_text str
    Customized text for the malicious email body. Available predefined fields: $verdicts$ - the malicious/error attachments/links verdict.
    email_subject_prefix_text str
    Prefix for the malicious email subject.
    failed_to_scan_attachments_text str
    Replace attachments that failed to be scanned with this text. Available predefined fields: $filename$ - the malicious file name. $md5$ - MD5 of the malicious file.
    malicious_attachments_text str
    Replace malicious attachments with this text. Available predefined fields: $filename$ - the malicious file name. $md5$ - MD5 of the malicious file.
    malicious_links_text str
    Replace malicious links with this text. Available predefined fields: $neutralized_url$ - neutralized malicious link.
    remove_attachments_and_links bool
    Remove attachments and links from the malicious email.
    send_copy bool
    Send a copy of the malicious email to the recipient list.
    send_copy_lists Sequence[str]
    Recipient list to send a copy of the malicious email.
    addCustomizedTextToEmailBody Boolean
    Add customized text to the malicious email body.
    addEmailSubjectPrefix Boolean
    Add a prefix to the malicious email subject.
    addXHeaderToEmail Boolean
    Add an X-Header to the malicious email.
    emailAction String
    Block - block the entire malicious email. Allow - pass the malicious email and apply email changes (like: remove attachments and links, add x-header, etc...).
    emailBodyCustomizedText String
    Customized text for the malicious email body. Available predefined fields: $verdicts$ - the malicious/error attachments/links verdict.
    emailSubjectPrefixText String
    Prefix for the malicious email subject.
    failedToScanAttachmentsText String
    Replace attachments that failed to be scanned with this text. Available predefined fields: $filename$ - the malicious file name. $md5$ - MD5 of the malicious file.
    maliciousAttachmentsText String
    Replace malicious attachments with this text. Available predefined fields: $filename$ - the malicious file name. $md5$ - MD5 of the malicious file.
    maliciousLinksText String
    Replace malicious links with this text. Available predefined fields: $neutralized_url$ - neutralized malicious link.
    removeAttachmentsAndLinks Boolean
    Remove attachments and links from the malicious email.
    sendCopy Boolean
    Send a copy of the malicious email to the recipient list.
    sendCopyLists List<String>
    Recipient list to send a copy of the malicious email.

    ManagementThreatProfileOverride, ManagementThreatProfileOverrideArgs

    Action string
    Protection action.
    Protection string
    IPS protection identified by name.
    CapturePackets bool
    Capture packets.
    Defaults List<ManagementThreatProfileOverrideDefault>
    Default settings. default blocks are documented below.
    Finals List<ManagementThreatProfileOverrideFinal>
    Final settings. final blocks are documented below.
    ProtectionExternalInfos List<string>
    Collection of industry reference (CVE).
    ProtectionUid string
    IPS protection unique identifier.
    Track string
    Tracking method for protection.
    Action string
    Protection action.
    Protection string
    IPS protection identified by name.
    CapturePackets bool
    Capture packets.
    Defaults []ManagementThreatProfileOverrideDefault
    Default settings. default blocks are documented below.
    Finals []ManagementThreatProfileOverrideFinal
    Final settings. final blocks are documented below.
    ProtectionExternalInfos []string
    Collection of industry reference (CVE).
    ProtectionUid string
    IPS protection unique identifier.
    Track string
    Tracking method for protection.
    action String
    Protection action.
    protection String
    IPS protection identified by name.
    capturePackets Boolean
    Capture packets.
    defaults List<ManagementThreatProfileOverrideDefault>
    Default settings. default blocks are documented below.
    finals List<ManagementThreatProfileOverrideFinal>
    Final settings. final blocks are documented below.
    protectionExternalInfos List<String>
    Collection of industry reference (CVE).
    protectionUid String
    IPS protection unique identifier.
    track String
    Tracking method for protection.
    action string
    Protection action.
    protection string
    IPS protection identified by name.
    capturePackets boolean
    Capture packets.
    defaults ManagementThreatProfileOverrideDefault[]
    Default settings. default blocks are documented below.
    finals ManagementThreatProfileOverrideFinal[]
    Final settings. final blocks are documented below.
    protectionExternalInfos string[]
    Collection of industry reference (CVE).
    protectionUid string
    IPS protection unique identifier.
    track string
    Tracking method for protection.
    action str
    Protection action.
    protection str
    IPS protection identified by name.
    capture_packets bool
    Capture packets.
    defaults Sequence[ManagementThreatProfileOverrideDefault]
    Default settings. default blocks are documented below.
    finals Sequence[ManagementThreatProfileOverrideFinal]
    Final settings. final blocks are documented below.
    protection_external_infos Sequence[str]
    Collection of industry reference (CVE).
    protection_uid str
    IPS protection unique identifier.
    track str
    Tracking method for protection.
    action String
    Protection action.
    protection String
    IPS protection identified by name.
    capturePackets Boolean
    Capture packets.
    defaults List<Property Map>
    Default settings. default blocks are documented below.
    finals List<Property Map>
    Final settings. final blocks are documented below.
    protectionExternalInfos List<String>
    Collection of industry reference (CVE).
    protectionUid String
    IPS protection unique identifier.
    track String
    Tracking method for protection.

    ManagementThreatProfileOverrideDefault, ManagementThreatProfileOverrideDefaultArgs

    Action string
    Protection action.
    CapturePackets bool
    Capture packets.
    Track string
    Tracking method for protection.
    Action string
    Protection action.
    CapturePackets bool
    Capture packets.
    Track string
    Tracking method for protection.
    action String
    Protection action.
    capturePackets Boolean
    Capture packets.
    track String
    Tracking method for protection.
    action string
    Protection action.
    capturePackets boolean
    Capture packets.
    track string
    Tracking method for protection.
    action str
    Protection action.
    capture_packets bool
    Capture packets.
    track str
    Tracking method for protection.
    action String
    Protection action.
    capturePackets Boolean
    Capture packets.
    track String
    Tracking method for protection.

    ManagementThreatProfileOverrideFinal, ManagementThreatProfileOverrideFinalArgs

    Action string
    Protection action.
    CapturePackets bool
    Capture packets.
    Track string
    Tracking method for protection.
    Action string
    Protection action.
    CapturePackets bool
    Capture packets.
    Track string
    Tracking method for protection.
    action String
    Protection action.
    capturePackets Boolean
    Capture packets.
    track String
    Tracking method for protection.
    action string
    Protection action.
    capturePackets boolean
    Capture packets.
    track string
    Tracking method for protection.
    action str
    Protection action.
    capture_packets bool
    Capture packets.
    track str
    Tracking method for protection.
    action String
    Protection action.
    capturePackets Boolean
    Capture packets.
    track String
    Tracking method for protection.
    MaxBytes double
    Scan links in the first bytes of the mail body.
    MaxLinks double
    Maximum links to scan in mail body.
    MaxBytes float64
    Scan links in the first bytes of the mail body.
    MaxLinks float64
    Maximum links to scan in mail body.
    maxBytes Double
    Scan links in the first bytes of the mail body.
    maxLinks Double
    Maximum links to scan in mail body.
    maxBytes number
    Scan links in the first bytes of the mail body.
    maxLinks number
    Maximum links to scan in mail body.
    max_bytes float
    Scan links in the first bytes of the mail body.
    max_links float
    Maximum links to scan in mail body.
    maxBytes Number
    Scan links in the first bytes of the mail body.
    maxLinks Number
    Maximum links to scan in mail body.

    Package Details

    Repository
    checkpoint checkpointsw/terraform-provider-checkpoint
    License
    Notes
    This Pulumi package is based on the checkpoint Terraform Provider.
    Viewing docs for checkpoint 3.0.0
    published on Monday, Mar 30, 2026 by checkpointsw
    Schema (JSON)
    checkpointsw/terraform-provider-checkpoint
      Try Pulumi Cloud free. Your team will thank you.