diff options
| author | hebingning <[email protected]> | 2022-09-27 14:04:44 +0800 |
|---|---|---|
| committer | hebingning <[email protected]> | 2022-09-27 14:04:44 +0800 |
| commit | 6baacd5482a65aff68d8f5aa097c9fedba8f23c4 (patch) | |
| tree | 898fe5c2abfe202ac943d5625b3e79df2634d416 | |
| parent | ad49b56b98e6f15cd0e668d4a2fd3f4056b82cc4 (diff) | |
提交常用VPN和app deny 动作按照子动作拆开后的yaml数据
25 files changed, 12557 insertions, 457 deletions
diff --git a/other/data/security/anonytun_vpn/anonytun_vpn-airtest-data.yaml b/other/data/security/anonytun_vpn/anonytun_vpn-airtest-data.yaml new file mode 100644 index 0000000..498d2e8 --- /dev/null +++ b/other/data/security/anonytun_vpn/anonytun_vpn-airtest-data.yaml @@ -0,0 +1,335 @@ +#注意keywordArray下的关键字必须为数组形式 +"allow-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "anonytun_vpn-allow-wholeProcess" + "policyType": "tsg_security" + "logType": "security_event" + "action": "allow" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "connectVpn": 1 + "airTestMessage": + "app_name": "anonytun_vpn" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "anonytun_vpn" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "anonytun_vpn" + "appIdObjects": + - "anonytun_vpn" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" + - + "opAction": "update" + "isEdit": 1 + "returnData": 1 + "policyName": "anonytun_vpn-allow-wholeProcess-update" + "policyType": "tsg_security" + "logType": "security_event" + "action": "allow" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "anonytun_vpn" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "anonytun_vpn" + "policyDesc": "autotest" + "effectiveRange": "default" + "userRegion": + "protocol": "anonytun_vpn" + "appIdObjects": + - "anonytun_vpn" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +#注意keywordArray下的关键字必须为数组形式 +"deny-default-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "anonytun_vpn-deny-default-visitWebsite" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "default" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "connectVpn": 1 + "airTestMessage": + "app_name": "anonytun_vpn" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "anonytun_vpn" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "anonytun_vpn" + "appIdObjects": + - "anonytun_vpn" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-drop-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "isEdit": 1 + "returnData": 1 + "policyName": "anonytun_vpn-deny-drop-visitWebsite" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "drop" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "anonytun_vpn" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "anonytun_vpn" + "policyDesc": "autotest" + "effectiveRange": "default" + "logCapture": 1 + "captureDepth": 40000 + "userRegion": + "protocol": "anonytun_vpn" + "appIdObjects": + - "anonytun_vpn" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-rate_limit-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "anonytun_vpn-deny-rate-visitWebsite" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "rate_limit" + "bps": 26 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "anonytun_vpn" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "anonytun_vpn" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "anonytun_vpn" + "appIdObjects": + - "anonytun_vpn" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-tamper-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "isEdit": 1 + "returnData": 1 + "policyName": "anonytun_vpn-deny-tamper-visitWebsite" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "tamper" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "anonytun_vpn" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "anonytun_vpn" + "policyDesc": "autotest" + "effectiveRange": "default" + "logCapture": 1 + "captureDepth": 47816 + "userRegion": + "protocol": "anonytun_vpn" + "appIdObjects": + - "anonytun_vpn" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +#注意keywordArray下的关键字必须为数组形式 +"monitor-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "anonytun_vpn-monitor-visitWebsite" + "policyType": "tsg_security" + "logType": "security_event" + "action": "monitor" + "packet_mirror": + "enable": 0 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "connectVpn": 1 + "airTestMessage": + "app_name": "anonytun_vpn" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "anonytun_vpn" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "anonytun_vpn" + "appIdObjects": + - "anonytun_vpn" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" + - + "opAction": "update" + "isEdit": 1 + "returnData": 1 + "policyName": "anonytun_vpn-monitor-visitWebsite-update" + "policyType": "tsg_security" + "logType": "security_event" + "action": "monitor" + "packet_mirror": + "enable": 0 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "anonytun_vpn" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "anonytun_vpn" + "policyDesc": "autotest" + "effectiveRange": "default" + "logCapture": 1 + "captureDepth": 46510 + "userRegion": + "protocol": "anonytun_vpn" + "appIdObjects": + - "anonytun_vpn" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535"
\ No newline at end of file diff --git a/other/data/security/baidu/baidu-airTest-data.yaml b/other/data/security/baidu/baidu-airTest-data.yaml new file mode 100644 index 0000000..4bdea11 --- /dev/null +++ b/other/data/security/baidu/baidu-airTest-data.yaml @@ -0,0 +1,746 @@ +#注意keywordArray下的关键字必须为数组形式 +"allow-only-IpAndApplication-search-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "baidu-allow-search" + "policyType": "tsg_security" + "logType": "security_event" + "action": "allow" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "baidu" + "app_operation": "search" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "baidu" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "baidu" + "appIdObjects": + - "baidu" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-default-only-IpAndApplication-search-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "baidu-deny-search" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "default" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "baidu" + "app_operation": "search" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "baidu" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "baidu" + "appIdObjects": + - "baidu" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-drop-only-IpAndApplication-search-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "baidu-deny-drop-search" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "drop" + "isGre": 0 + "logCapture": 1 + "captureDepth": 49900 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "baidu" + "app_operation": "search" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "baidu" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "baidu" + "appIdObjects": + - "baidu" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-rate_limit-only-IpAndApplication-search-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "baidu-deny-rate-search" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "rate_limit" + "bps": 28 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "baidu" + "app_operation": "search" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "baidu" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "baidu" + "appIdObjects": + - "baidu" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-tamper-only-IpAndApplication-search-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "baidu-deny-tamper-search" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "tamper" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "baidu" + "app_operation": "search" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "baidu" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "baidu" + "appIdObjects": + - "baidu" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"monitor-only-IpAndApplication-search-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "baidu-monitor-search" + "policyType": "tsg_security" + "logType": "security_event" + "action": "monitor" + "packet_mirror": + "enable": 0 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "logCapture": 1 + "captureDepth": 50005 + "airTestMessage": + "app_name": "baidu" + "app_operation": "search" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "baidu" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "baidu" + "appIdObjects": + - "baidu" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"allow-only-IpAndApplication-video-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "baidu-allow-video" + "policyType": "tsg_security" + "logType": "security_event" + "action": "allow" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "baidu" + "app_operation": "video" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "baidu" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "baidu" + "appIdObjects": + - "baidu" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-default-only-IpAndApplication-video-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "baidu-deny-default-video" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "default" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "baidu" + "app_operation": "video" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "baidu" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "baidu" + "appIdObjects": + - "baidu" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-drop-only-IpAndApplication-video-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "baidu-deny-drop-video" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "drop" + "isGre": 0 + "logCapture": 1 + "captureDepth": 39999 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "baidu" + "app_operation": "video" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "baidu" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "baidu" + "appIdObjects": + - "baidu" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-rate_limit-only-IpAndApplication-video-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "baidu-deny-rate-video" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "rate_limit" + "bps": 34 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "baidu" + "app_operation": "video" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "baidu" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "baidu" + "appIdObjects": + - "baidu" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-tamper-only-IpAndApplication-video-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "baidu-deny-tamper-video" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "tamper" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "baidu" + "app_operation": "video" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "baidu" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "baidu" + "appIdObjects": + - "baidu" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"monitor-only-IpAndApplication-video-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "baidu-monitor-video" + "policyType": "tsg_security" + "logType": "security_event" + "action": "monitor" + "packet_mirror": + "enable": 0 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "logCapture": 1 + "captureDepth": 40658 + "airTestMessage": + "app_name": "baidu" + "app_operation": "video" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "baidu" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "baidu" + "appIdObjects": + - "baidu" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"allow-only-IpAndApplication-frontPage-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "baidu-allow-frontPage" + "policyType": "tsg_security" + "logType": "security_event" + "action": "allow" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "baidu" + "app_operation": "frontPage" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "baidu" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "baidu" + "appIdObjects": + - "baidu" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-default-only-IpAndApplication-frontPage-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "baidu-deny-default-frontPage" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "default" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "baidu" + "app_operation": "frontPage" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "baidu" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "baidu" + "appIdObjects": + - "baidu" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-drop-only-IpAndApplication-frontPage-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "baidu-deny-drop-frontPage" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "drop" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "baidu" + "app_operation": "frontPage" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "baidu" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "baidu" + "appIdObjects": + - "baidu" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-rate_limit-only-IpAndApplication-frontPage-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "baidu-deny-rate-frontPage" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "rate_limit" + "bps": 69 + "isGre": 0 + "logCapture": 1 + "captureDepth": 45680 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "baidu" + "app_operation": "frontPage" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "baidu" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "baidu" + "appIdObjects": + - "baidu" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-tamper-only-IpAndApplication-frontPage-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "baidu-deny-tamper-frontPage" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "tamper" + "isGre": 0 + "logCapture": 1 + "captureDepth": 46050 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "baidu" + "app_operation": "frontPage" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "baidu" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "baidu" + "appIdObjects": + - "baidu" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"monitor-only-IpAndApplication-frontPage-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "baidu-monitor-frontPage" + "policyType": "tsg_security" + "logType": "security_event" + "action": "monitor" + "packet_mirror": + "enable": 0 + "isGre": 0 + "logCapture": 1 + "captureDepth": 36410 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "baidu" + "app_operation": "frontPage" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "baidu" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "baidu" + "appIdObjects": + - "baidu" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535"
\ No newline at end of file diff --git a/other/data/security/bilibili/bilibili-airTest-data.yaml b/other/data/security/bilibili/bilibili-airTest-data.yaml new file mode 100644 index 0000000..e1ab2e3 --- /dev/null +++ b/other/data/security/bilibili/bilibili-airTest-data.yaml @@ -0,0 +1,987 @@ +#注意keywordArray下的关键字必须为数组形式 +"allow-only-IpAndApplication-search-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "bilibili-allow-search" + "policyType": "tsg_security" + "logType": "security_event" + "action": "allow" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "bilibili" + "app_operation": "search" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "bilibili" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "bilibili" + "appIdObjects": + - "bilibili" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-default-only-IpAndApplication-search-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "bilibili-deny-default-search" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "default" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "bilibili" + "app_operation": "search" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "bilibili" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "bilibili" + "appIdObjects": + - "bilibili" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-drop-only-IpAndApplication-search-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "bilibili-deny-drop-search" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "drop" + "isGre": 0 + "logCapture": 1 + "captureDepth": 38534 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "bilibili" + "app_operation": "search" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "bilibili" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "bilibili" + "appIdObjects": + - "bilibili" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-rate_limit-only-IpAndApplication-search-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "bilibili-deny-rate-search" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "rate_limit" + "bps": 30 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "bilibili" + "app_operation": "search" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "bilibili" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "bilibili" + "appIdObjects": + - "bilibili" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-tamper-only-IpAndApplication-search-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "bilibili-deny-tamper-search" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "tamper" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "bilibili" + "app_operation": "search" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "bilibili" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "bilibili" + "appIdObjects": + - "bilibili" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"monitor-only-IpAndApplication-search-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "bilibili-monitor-search" + "policyType": "tsg_security" + "logType": "security_event" + "action": "monitor" + "packet_mirror": + "enable": 0 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "logCapture": 1 + "captureDepth": 48242 + "airTestMessage": + "app_name": "bilibili" + "app_operation": "search" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "bilibili" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "bilibili" + "appIdObjects": + - "bilibili" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"allow-only-IpAndApplication-MemberPurchase-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "bilibili-allow-MemberPurchase" + "policyType": "tsg_security" + "logType": "security_event" + "action": "allow" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "bilibili" + "app_operation": "MemberPurchase" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "bilibili" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "bilibili" + "appIdObjects": + - "bilibili" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-only-IpAndApplication-MemberPurchase-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "bilibili-deny-MemberPurchase" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "default" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "bilibili" + "app_operation": "MemberPurchase" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "bilibili" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "bilibili" + "appIdObjects": + - "bilibili" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" + - + "opAction": "update" + "returnData": 1 + "policyName": "bilibili-deny-MemberPurchase" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "drop" + "isGre": 0 + "isEdit": 1 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "bilibili" + "app_operation": "MemberPurchase" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "bilibili" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "bilibili" + "appIdObjects": + - "bilibili" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" + - + "opAction": "add" + "returnData": 1 + "policyName": "bilibili-deny-MemberPurchase" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "rate_limit" + "bps": 42 + "isGre": 0 + "logCapture": 1 + "captureDepth": 50010 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "bilibili" + "app_operation": "MemberPurchase" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "bilibili" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "bilibili" + "appIdObjects": + - "bilibili" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" + - + "opAction": "add" + "returnData": 1 + "policyName": "bilibili-deny-MemberPurchase" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "tamper" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "bilibili" + "app_operation": "MemberPurchase" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "bilibili" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "bilibili" + "appIdObjects": + - "bilibili" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"monitor-only-IpAndApplication-MemberPurchase-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "bilibili-monitor-MemberPurchase" + "policyType": "tsg_security" + "logType": "security_event" + "action": "monitor" + "packet_mirror": + "enable": 0 + "isGre": 0 + "logCapture": 1 + "captureDepth": 47985 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "bilibili" + "app_operation": "MemberPurchase" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "bilibili" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "bilibili" + "appIdObjects": + - "bilibili" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"allow-only-IpAndApplication-video-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "bilibili-allow-video" + "policyType": "tsg_security" + "logType": "security_event" + "action": "allow" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "bilibili" + "app_operation": "video" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "bilibili" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "bilibili" + "appIdObjects": + - "bilibili" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-only-IpAndApplication-video-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "bilibili-deny-video" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "default" + "isGre": 0 + "logCapture": 1 + "captureDepth": 45495 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "bilibili" + "app_operation": "video" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "bilibili" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "bilibili" + "appIdObjects": + - "bilibili" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" + - + "opAction": "update" + "returnData": 1 + "policyName": "bilibili-deny-video" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "drop" + "isGre": 0 + "isEdit": 1 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "bilibili" + "app_operation": "video" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "bilibili" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "bilibili" + "appIdObjects": + - "bilibili" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" + - + "opAction": "add" + "returnData": 1 + "policyName": "bilibili-deny-video" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "rate_limit" + "bps": 25 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "bilibili" + "app_operation": "video" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "bilibili" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "bilibili" + "appIdObjects": + - "bilibili" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" + - + "opAction": "add" + "returnData": 1 + "policyName": "bilibili-deny-video" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "tamper" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "bilibili" + "app_operation": "video" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "bilibili" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "bilibili" + "appIdObjects": + - "bilibili" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"monitor-only-IpAndApplication-video-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "bilibili-monitor-video" + "policyType": "tsg_security" + "logType": "security_event" + "action": "monitor" + "packet_mirror": + "enable": 0 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "logCapture": 1 + "captureDepth": 39991 + "airTestMessage": + "app_name": "bilibili" + "app_operation": "video" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "bilibili" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "bilibili" + "appIdObjects": + - "bilibili" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"allow-only-IpAndApplication-frontPage-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "bilibili-allow-frontPage" + "policyType": "tsg_security" + "logType": "security_event" + "action": "allow" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "bilibili" + "app_operation": "frontPage" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "bilibili" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "bilibili" + "appIdObjects": + - "bilibili" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-only-IpAndApplication-frontPage-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "bilibili-deny-frontPage" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "default" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "bilibili" + "app_operation": "frontPage" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "bilibili" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "bilibili" + "appIdObjects": + - "bilibili" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" + - + "opAction": "update" + "returnData": 1 + "policyName": "bilibili-deny-frontPage" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "drop" + "isGre": 0 + "isEdit": 1 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "bilibili" + "app_operation": "frontPage" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "bilibili" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "bilibili" + "appIdObjects": + - "bilibili" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" + - + "opAction": "add" + "returnData": 1 + "policyName": "bilibili-deny-frontPage" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "rate_limit" + "bps": 45 + "isGre": 0 + "logCapture": 1 + "captureDepth": 37592 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "bilibili" + "app_operation": "frontPage" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "bilibili" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "bilibili" + "appIdObjects": + - "bilibili" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" + - + "opAction": "add" + "returnData": 1 + "policyName": "bilibili-deny-frontPage" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "tamper" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "bilibili" + "app_operation": "frontPage" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "bilibili" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "bilibili" + "appIdObjects": + - "bilibili" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"monitor-only-IpAndApplication-frontPage-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "bilibili-monitor-frontPage" + "policyType": "tsg_security" + "logType": "security_event" + "action": "monitor" + "packet_mirror": + "enable": 0 + "isGre": 0 + "logCapture": 1 + "captureDepth": 43956 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "bilibili" + "app_operation": "frontPage" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "bilibili" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "bilibili" + "appIdObjects": + - "bilibili" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535"
\ No newline at end of file diff --git a/other/data/security/facebook/facebook-airTest-data.yaml b/other/data/security/facebook/facebook-airTest-data.yaml new file mode 100644 index 0000000..0e2d2bb --- /dev/null +++ b/other/data/security/facebook/facebook-airTest-data.yaml @@ -0,0 +1,748 @@ +#注意keywordArray下的关键字必须为数组形式 +"allow-only-IpAndApplication-sendMessage-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "facebook-allow-sendMessage-001" + "policyType": "tsg_security" + "logType": "security_event" + "action": "allow" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "facebook" + "app_operation": "sendMessage" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "facebook" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "facebook" + "appIdObjects": + - "facebook" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-default-only-IpAndApplication-sendMessage-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "facebook-deny-default-sendMessage" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "default" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "facebook" + "app_operation": "sendMessage" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "facebook" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "facebook" + "appIdObjects": + - "facebook" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-drop-only-IpAndApplication-sendMessage-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "facebook-deny-drop-sendMessage" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "drop" + "isGre": 0 + "logCapture": 1 + "captureDepth": 32450 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "facebook" + "app_operation": "sendMessage" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "facebook" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "facebook" + "appIdObjects": + - "facebook" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-rate_limit-only-IpAndApplication-sendMessage-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "facebook-rate-deny-sendMessage" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "rate_limit" + "bps": 16 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "facebook" + "app_operation": "sendMessage" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "facebook" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "facebook" + "appIdObjects": + - "facebook" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-tamper-only-IpAndApplication-sendMessage-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "facebook-deny-tamper-sendMessage" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "tamper" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "facebook" + "app_operation": "sendMessage" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "facebook" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "facebook" + "appIdObjects": + - "facebook" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"monitor-only-IpAndApplication-sendMessage-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "facebook-monitor-sendMessage-001" + "policyType": "tsg_security" + "logType": "security_event" + "action": "monitor" + "packet_mirror": + "enable": 0 + "isGre": 0 + "logCapture": 1 + "captureDepth": 22001 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "facebook" + "app_operation": "sendMessage" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "facebook" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "facebook" + "appIdObjects": + - "facebook" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"allow-only-IpAndApplication-sendDynamic-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "facebook-allow-sendDynamic-001" + "policyType": "tsg_security" + "logType": "security_event" + "action": "allow" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "facebook" + "app_operation": "sendDynamic" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "facebook" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "facebook" + "appIdObjects": + - "facebook" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-default-only-IpAndApplication-sendDynamic-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "facebook-deny-default-sendDynamic" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "default" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "facebook" + "app_operation": "sendDynamic" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "facebook" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "facebook" + "appIdObjects": + - "facebook" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-drop-only-IpAndApplication-sendDynamic-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "facebook-deny-drop-sendDynamic" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "drop" + "isGre": 0 + "logCapture": 1 + "captureDepth": 40000 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "facebook" + "app_operation": "sendDynamic" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "facebook" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "facebook" + "appIdObjects": + - "facebook" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-rate_limit-only-IpAndApplication-sendDynamic-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "facebook-deny-rate-sendDynamic" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "rate_limit" + "bps": 48 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "facebook" + "app_operation": "sendDynamic" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "facebook" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "facebook" + "appIdObjects": + - "facebook" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-tamper-only-IpAndApplication-sendDynamic-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "facebook-deny-tamper-sendDynamic" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "tamper" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "facebook" + "app_operation": "sendDynamic" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "facebook" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "facebook" + "appIdObjects": + - "facebook" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"monitor-only-IpAndApplication-sendDynamic-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "facebook-monitor-sendDynamic-001" + "policyType": "tsg_security" + "logType": "security_event" + "action": "monitor" + "packet_mirror": + "enable": 0 + "isGre": 0 + "logCapture": 1 + "captureDepth": 26579 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "facebook" + "app_operation": "sendDynamic" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "facebook" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "facebook" + "appIdObjects": + - "facebook" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"allow-only-IpAndApplication-video-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "facebook-allow-video-001" + "policyType": "tsg_security" + "logType": "security_event" + "action": "allow" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "facebook" + "app_operation": "video" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "facebook" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "facebook" + "appIdObjects": + - "facebook" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-default-only-IpAndApplication-video-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "facebook-deny-video-001" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "default" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "facebook" + "app_operation": "video" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "facebook" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "facebook" + "appIdObjects": + - "facebook" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-drop-only-IpAndApplication-video-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "facebook-deny-video-002" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "drop" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "facebook" + "app_operation": "video" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "facebook" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "facebook" + "appIdObjects": + - "facebook" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-rate_limit-only-IpAndApplication-video-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "facebook-deny-video-003" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "rate_limit" + "bps": 63 + "isGre": 0 + "logCapture": 1 + "captureDepth": 49165 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "facebook" + "app_operation": "video" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "facebook" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "facebook" + "appIdObjects": + - "facebook" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-tamper-only-IpAndApplication-video-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "facebook-deny-tamper-video" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "tamper" + "isGre": 0 + "logCapture": 1 + "captureDepth": 34805 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "facebook" + "app_operation": "video" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "facebook" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "facebook" + "appIdObjects": + - "facebook" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"monitor-only-IpAndApplication-video-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "facebook-monitor-video-001" + "policyType": "tsg_security" + "logType": "security_event" + "action": "monitor" + "packet_mirror": + "enable": 0 + "isGre": 0 + "logCapture": 1 + "captureDepth": 17935 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "facebook" + "app_operation": "video" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "facebook" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "facebook" + "appIdObjects": + - "facebook" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +
\ No newline at end of file diff --git a/other/data/security/flashvpn/flashvpn-airtest-data.yaml b/other/data/security/flashvpn/flashvpn-airtest-data.yaml new file mode 100644 index 0000000..48236b3 --- /dev/null +++ b/other/data/security/flashvpn/flashvpn-airtest-data.yaml @@ -0,0 +1,333 @@ +#注意keywordArray下的关键字必须为数组形式 +"allow-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "flashvpn-allow-wholeProcess" + "policyType": "tsg_security" + "logType": "security_event" + "action": "allow" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "connectVpn": 1 + "airTestMessage": + "app_name": "FlashVPN" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "FlashVPN" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "flashvpn" + "appIdObjects": + - "flashvpn" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" + - + "opAction": "update" + "isEdit": 1 + "returnData": 1 + "policyName": "flashvpn-allow-wholeProcess-update" + "policyType": "tsg_security" + "logType": "security_event" + "action": "allow" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "FlashVPN" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "FlashVPN" + "policyDesc": "autotest" + "effectiveRange": "default" + "userRegion": + "protocol": "flashvpn" + "appIdObjects": + - "flashvpn" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +#注意keywordArray下的关键字必须为数组形式 +"deny-default-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "flashvpn-deny-default-visitWebsite" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "default" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "connectVpn": 1 + "airTestMessage": + "app_name": "FlashVPN" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "FlashVPN" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "flashvpn" + "appIdObjects": + - "flashvpn" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-drop-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "flashvpn-deny-drop-visitWebsite" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "drop" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "FlashVPN" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "FlashVPN" + "policyDesc": "autotest" + "effectiveRange": "default" + "logCapture": 1 + "captureDepth": 40100 + "userRegion": + "protocol": "flashvpn" + "appIdObjects": + - "flashvpn" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-rate_limit-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "flashvpn-deny-rate-visitWebsite" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "rate_limit" + "bps": 36 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "FlashVPN" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "FlashVPN" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "flashvpn" + "appIdObjects": + - "flashvpn" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-tamper-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "flashvpn-deny-tamper-visitWebsite" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "tamper" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "FlashVPN" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "FlashVPN" + "policyDesc": "autotest" + "effectiveRange": "default" + "logCapture": 1 + "captureDepth": 40400 + "userRegion": + "protocol": "flashvpn" + "appIdObjects": + - "flashvpn" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +#注意keywordArray下的关键字必须为数组形式 +"monitor-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "flashvpn-monitor-visitWebsite" + "policyType": "tsg_security" + "logType": "security_event" + "action": "monitor" + "packet_mirror": + "enable": 0 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "connectVpn": 1 + "airTestMessage": + "app_name": "FlashVPN" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "FlashVPN" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "flashvpn" + "appIdObjects": + - "flashvpn" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" + - + "opAction": "update" + "isEdit": 1 + "returnData": 1 + "policyName": "flashvpn-monitor-visitWebsite-update" + "policyType": "tsg_security" + "logType": "security_event" + "action": "monitor" + "packet_mirror": + "enable": 0 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "FlashVPN" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "FlashVPN" + "policyDesc": "autotest" + "effectiveRange": "default" + "logCapture": 1 + "captureDepth": 41300 + "userRegion": + "protocol": "flashvpn" + "appIdObjects": + - "flashvpn" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535"
\ No newline at end of file diff --git a/other/data/security/freegate/freegate-airtest-data.yaml b/other/data/security/freegate/freegate-airtest-data.yaml new file mode 100644 index 0000000..fd52503 --- /dev/null +++ b/other/data/security/freegate/freegate-airtest-data.yaml @@ -0,0 +1,340 @@ +#注意keywordArray下的关键字必须为数组形式 +"allow-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "freegate-allow-wholeProcess" + "policyType": "tsg_security" + "logType": "security_event" + "action": "allow" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "connectVpn": 1 + "airTestMessage": + "app_name": "Freegate" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "Freegate" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "freegate" + "appIdObjects": + - "freegate" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" + - + "opAction": "update" + "isEdit": 1 + "returnData": 1 + "policyName": "freegate-allow-wholeProcess-update" + "policyType": "tsg_security" + "logType": "security_event" + "action": "allow" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "connectVpn": 1 + "airTestMessage": + "app_name": "Freegate" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "Freegate" + "policyDesc": "autotest" + "effectiveRange": "default" + "userRegion": + "protocol": "freegate" + "appIdObjects": + - "freegate" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +#注意keywordArray下的关键字必须为数组形式 +"deny-default-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "freegate-deny-default-visitWebsite-001" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "default" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "connectVpn": 1 + "airTestMessage": + "app_name": "Freegate" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "Freegate" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "freegate" + "appIdObjects": + - "freegate" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-drop-only-IpAndApplication-visitWebsite_data": + - + "opAction": "update" + "isEdit": 1 + "returnData": 1 + "policyName": "freegate-deny-drop-visitWebsite-002" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "drop" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "connectVpn": 1 + "airTestMessage": + "app_name": "Freegate" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "Freegate" + "policyDesc": "autotest" + "effectiveRange": "default" + "logCapture": 1 + "captureDepth": 47165 + "userRegion": + "protocol": "freegate" + "appIdObjects": + - "freegate" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-rate_limit-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "freegate-deny-rate-visitWebsite-003" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "rate_limit" + "bps": 28 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "connectVpn": 1 + "airTestMessage": + "app_name": "Freegate" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "Freegate" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "freegate" + "appIdObjects": + - "freegate" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-tamper-only-IpAndApplication-visitWebsite_data": + - + "opAction": "update" + "isEdit": 1 + "returnData": 1 + "policyName": "freegate-deny-tamper-visitWebsite" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "tamper" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "connectVpn": 1 + "airTestMessage": + "app_name": "Freegate" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "Freegate" + "policyDesc": "autotest" + "effectiveRange": "default" + "logCapture": 1 + "captureDepth": 46850 + "userRegion": + "protocol": "freegate" + "appIdObjects": + - "freegate" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +#注意keywordArray下的关键字必须为数组形式 +"monitor-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "freegate-monitor-visitWebsite" + "policyType": "tsg_security" + "logType": "security_event" + "action": "monitor" + "packet_mirror": + "enable": 0 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "connectVpn": 1 + "airTestMessage": + "app_name": "Freegate" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "Freegate" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "freegate" + "appIdObjects": + - "freegate" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" + - + "opAction": "update" + "isEdit": 1 + "returnData": 1 + "policyName": "freegate-monitor-visitWebsite-update" + "policyType": "tsg_security" + "logType": "security_event" + "action": "monitor" + "packet_mirror": + "enable": 0 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "connectVpn": 1 + "airTestMessage": + "app_name": "Freegate" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "Freegate" + "policyDesc": "autotest" + "effectiveRange": "default" + "logCapture": 1 + "captureDepth": 41450 + "userRegion": + "protocol": "freegate" + "appIdObjects": + - "freegate" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535"
\ No newline at end of file diff --git a/other/data/security/gmail/gmail-airTest-data.yaml b/other/data/security/gmail/gmail-airTest-data.yaml index 0e5f4e0..8baf4b2 100644 --- a/other/data/security/gmail/gmail-airTest-data.yaml +++ b/other/data/security/gmail/gmail-airTest-data.yaml @@ -3,7 +3,7 @@ - "opAction": "add" "returnData": 1 - "policyName": "security-gmail-allow-only-IpAndApplication-sendEmail-airTest-001" + "policyName": "gmail-allow-sendEmail-001" "policyType": "tsg_security" "logType": "security_event" "action": "allow" @@ -39,11 +39,11 @@ - "ip": "1.1.1.1" "port": "0-65535" -"deny-only-IpAndApplication-sendEmail-airTest_data": +"deny-default-only-IpAndApplication-sendEmail-airTest_data": - "opAction": "add" "returnData": 1 - "policyName": "security-gmail-deny-only-IpAndApplication-sendEmail-airTest-001" + "policyName": "gmail-deny-default-sendEmail" "policyType": "tsg_security" "logType": "security_event" "action": "deny" @@ -83,7 +83,7 @@ - "opAction": "update" "returnData": 1 - "policyName": "security-gmail-deny-only-IpAndApplication-sendEmail-airTest-002" + "policyName": "gmail-deny-drop-sendEmail" "policyType": "tsg_security" "logType": "security_event" "action": "deny" @@ -123,10 +123,54 @@ - "ip": "1.1.1.1" "port": "0-65535" +"deny-drop-only-IpAndApplication-sendEmail-airTest_data": - "opAction": "add" "returnData": 1 - "policyName": "security-gmail-deny-only-IpAndApplication-sendEmail-airTest-003" + "policyName": "gmail-deny-drop-sendEmail" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "drop" + "isGre": 0 + "logCapture": 1 + "captureDepth": 19590 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "gmail" + "app_operation": "sendEmail" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "gmail" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "gmail" + "appIdObjects": + - "gmail" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-rate_limit-only-IpAndApplication-sendEmail-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "gmail-deny-rate-sendEmail" "policyType": "tsg_security" "logType": "security_event" "action": "deny" @@ -164,10 +208,11 @@ - "ip": "1.1.1.1" "port": "0-65535" +"deny-tamper-only-IpAndApplication-sendEmail-airTest_data": - "opAction": "add" "returnData": 1 - "policyName": "security-gmail-deny-only-IpAndApplication-sendEmail-airTest-004" + "policyName": "gmail-deny-tamper-sendEmail" "policyType": "tsg_security" "logType": "security_event" "action": "deny" @@ -205,12 +250,12 @@ - "addItemList": - "ip": "1.1.1.1" - "port": "0-65535" + "port": "0-65535" "monitor-only-IpAndApplication-sendEmail-airTest_data": - "opAction": "add" "returnData": 1 - "policyName": "security-gmail-monitor-only-IpAndApplication-sendEmail-airTest-001" + "policyName": "gmail-monitor-sendEmail-001" "policyType": "tsg_security" "logType": "security_event" "action": "monitor" @@ -254,7 +299,7 @@ - "opAction": "add" "returnData": 1 - "policyName": "security-gmail-allow-only-IpAndApplication-Meeting-airTest-001" + "policyName": "gmail-allow-Meeting-001" "policyType": "tsg_security" "logType": "security_event" "action": "allow" @@ -290,11 +335,11 @@ - "ip": "1.1.1.1" "port": "0-65535" -"deny-only-IpAndApplication-Meeting-airTest_data": +"deny-default-only-IpAndApplication-Meeting-airTest_data": - "opAction": "add" "returnData": 1 - "policyName": "security-gmail-deny-only-IpAndApplication-Meeting-airTest-001" + "policyName": "gmail-deny-default-Meeting" "policyType": "tsg_security" "logType": "security_event" "action": "deny" @@ -334,16 +379,16 @@ - "ip": "1.1.1.1" "port": "0-65535" +"deny-drop-only-IpAndApplication-Meeting-airTest_data": - - "opAction": "update" + "opAction": "add" "returnData": 1 - "policyName": "security-gmail-deny-only-IpAndApplication-Meeting-airTest-002" + "policyName": "gmail-deny-drop-Meeting" "policyType": "tsg_security" "logType": "security_event" "action": "deny" "method": "drop" "isGre": 0 - "isEdit": 1 "userTags": "" "doBlacklist": 0 "doLog": 1 @@ -374,11 +419,12 @@ - "addItemList": - "ip": "1.1.1.1" - "port": "0-65535" + "port": "0-65535" +"deny-rate_limit-only-IpAndApplication-Meeting-airTest_data": - "opAction": "add" "returnData": 1 - "policyName": "security-gmail-deny-only-IpAndApplication-Meeting-airTest-003" + "policyName": "gmail-deny-rate-Meeting-003" "policyType": "tsg_security" "logType": "security_event" "action": "deny" @@ -418,11 +464,12 @@ - "addItemList": - "ip": "1.1.1.1" - "port": "0-65535" + "port": "0-65535" +"deny-tamper-only-IpAndApplication-Meeting-airTest_data": - "opAction": "add" "returnData": 1 - "policyName": "security-gmail-deny-only-IpAndApplication-Meeting-airTest-004" + "policyName": "gmail-deny-tamper-Meeting" "policyType": "tsg_security" "logType": "security_event" "action": "deny" @@ -459,12 +506,12 @@ - "addItemList": - "ip": "1.1.1.1" - "port": "0-65535" + "port": "0-65535" "monitor-only-IpAndApplication-Meeting-airTest_data": - "opAction": "add" "returnData": 1 - "policyName": "security-gmail-monitor-only-IpAndApplication-Meeting-airTest-001" + "policyName": "gmail-monitor-Meeting-001" "policyType": "tsg_security" "logType": "security_event" "action": "monitor" diff --git a/other/data/security/instagram/instagram-airTest-data.yaml b/other/data/security/instagram/instagram-airTest-data.yaml new file mode 100644 index 0000000..a2863ae --- /dev/null +++ b/other/data/security/instagram/instagram-airTest-data.yaml @@ -0,0 +1,1241 @@ +#注意keywordArray下的关键字必须为数组形式 +"allow-only-IpAndApplication-sendMessage-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "instagram-allow-sendMessage" + "policyType": "tsg_security" + "logType": "security_event" + "action": "allow" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "instagram" + "app_operation": "sendMessage" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "instagram" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "instagram" + "appIdObjects": + - "instagram" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-default-only-IpAndApplication-sendMessage-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "instagram-deny-default-sendMessage" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "default" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "instagram" + "app_operation": "sendMessage" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "instagram" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "instagram" + "appIdObjects": + - "instagram" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-drop-only-IpAndApplication-sendMessage-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "instagram-deny-drop-sendMessage" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "drop" + "isGre": 0 + "logCapture": 1 + "captureDepth": 19520 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "instagram" + "app_operation": "sendMessage" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "instagram" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "instagram" + "appIdObjects": + - "instagram" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-rate_limit-only-IpAndApplication-sendMessage-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "instagram-deny-rate-sendMessage" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "rate_limit" + "bps": 85 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "instagram" + "app_operation": "sendMessage" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "instagram" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "instagram" + "appIdObjects": + - "instagram" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-tamper-only-IpAndApplication-sendMessage-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "instagram-deny-tamper-sendMessage" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "tamper" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "instagram" + "app_operation": "sendMessage" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "instagram" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "instagram" + "appIdObjects": + - "instagram" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"monitor-only-IpAndApplication-sendMessage-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "instagram-monitor-sendMessage" + "policyType": "tsg_security" + "logType": "security_event" + "action": "monitor" + "packet_mirror": + "enable": 0 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "logCapture": 1 + "captureDepth": 20002 + "airTestMessage": + "app_name": "instagram" + "app_operation": "sendMessage" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "instagram" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "instagram" + "appIdObjects": + - "instagram" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"allow-only-IpAndApplication-sendDynamic-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "instagram-allow-sendDynamic" + "policyType": "tsg_security" + "logType": "security_event" + "action": "allow" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "instagram" + "app_operation": "sendDynamic" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "instagram" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "instagram" + "appIdObjects": + - "instagram" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-default-only-IpAndApplication-sendDynamic-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "instagram-deny-default-sendDynamic" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "default" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "instagram" + "app_operation": "sendDynamic" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "instagram" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "instagram" + "appIdObjects": + - "instagram" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-drop-only-IpAndApplication-sendDynamic-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "instagram-deny-drop-sendDynamic" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "drop" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "instagram" + "app_operation": "sendDynamic" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "instagram" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "instagram" + "appIdObjects": + - "instagram" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-rate_limit-only-IpAndApplication-sendDynamic-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "instagram-deny-rate-sendDynamic" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "rate_limit" + "bps": 46 + "isGre": 0 + "logCapture": 1 + "captureDepth": 40100 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "instagram" + "app_operation": "sendDynamic" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "instagram" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "instagram" + "appIdObjects": + - "instagram" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-tamper-only-IpAndApplication-sendDynamic-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "instagram-deny-tamper-sendDynamic" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "tamper" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "instagram" + "app_operation": "sendDynamic" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "instagram" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "instagram" + "appIdObjects": + - "instagram" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"monitor-only-IpAndApplication-sendDynamic-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "instagram-monitor-sendDynamic" + "policyType": "tsg_security" + "logType": "security_event" + "action": "monitor" + "packet_mirror": + "enable": 0 + "isGre": 0 + "logCapture": 1 + "captureDepth": 31520 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "instagram" + "app_operation": "sendDynamic" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "instagram" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "instagram" + "appIdObjects": + - "instagram" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"allow-only-IpAndApplication-search-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "instagram-allow-search" + "policyType": "tsg_security" + "logType": "security_event" + "action": "allow" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "instagram" + "app_operation": "search" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "instagram" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "instagram" + "appIdObjects": + - "instagram" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-default-only-IpAndApplication-search-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "instagram-deny-default-search" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "default" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "instagram" + "app_operation": "search" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "instagram" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "instagram" + "appIdObjects": + - "instagram" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-drop-only-IpAndApplication-search-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "instagram-deny-drop-search" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "drop" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "instagram" + "app_operation": "search" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "instagram" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "instagram" + "appIdObjects": + - "instagram" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-rate_limit-only-IpAndApplication-search-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "instagram-deny-rate-search" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "rate_limit" + "bps": 10 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "instagram" + "app_operation": "search" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "instagram" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "instagram" + "appIdObjects": + - "instagram" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-tamper-only-IpAndApplication-search-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "instagram-deny-tamper-search" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "tamper" + "isGre": 0 + "logCapture": 1 + "captureDepth": 48630 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "instagram" + "app_operation": "search" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "instagram" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "instagram" + "appIdObjects": + - "instagram" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"monitor-only-IpAndApplication-search-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "instagram-monitor-search" + "policyType": "tsg_security" + "logType": "security_event" + "action": "monitor" + "packet_mirror": + "enable": 0 + "isGre": 0 + "logCapture": 1 + "captureDepth": 34080 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "instagram" + "app_operation": "search" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "instagram" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "instagram" + "appIdObjects": + - "instagram" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"allow-only-IpAndApplication-voiceCalls-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "instagram-allow-voiceCalls" + "policyType": "tsg_security" + "logType": "security_event" + "action": "allow" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "instagram" + "app_operation": "voiceCalls" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "instagram" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "instagram" + "appIdObjects": + - "instagram" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-default-only-IpAndApplication-voiceCalls-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "instagram-deny-default-voiceCalls" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "default" + "isGre": 0 + "logCapture": 1 + "captureDepth": 59975 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "instagram" + "app_operation": "voiceCalls" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "instagram" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "instagram" + "appIdObjects": + - "instagram" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-drop-only-IpAndApplication-voiceCalls-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "instagram-deny-drop-voiceCalls" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "drop" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "instagram" + "app_operation": "voiceCalls" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "instagram" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "instagram" + "appIdObjects": + - "instagram" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-rate_limit-only-IpAndApplication-voiceCalls-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "instagram-deny-rate-voiceCalls" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "rate_limit" + "bps": 27 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "instagram" + "app_operation": "voiceCalls" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "instagram" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "instagram" + "appIdObjects": + - "instagram" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-tamper-only-IpAndApplication-voiceCalls-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "instagram-deny-tamper-voiceCalls" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "tamper" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "instagram" + "app_operation": "voiceCalls" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "instagram" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "instagram" + "appIdObjects": + - "instagram" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"monitor-only-IpAndApplication-voiceCalls-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "instagram-monitor-voiceCalls" + "policyType": "tsg_security" + "logType": "security_event" + "action": "monitor" + "packet_mirror": + "enable": 0 + "isGre": 0 + "logCapture": 1 + "captureDepth": 28600 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "instagram" + "app_operation": "voiceCalls" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "instagram" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "instagram" + "appIdObjects": + - "instagram" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"allow-only-IpAndApplication-videoCall-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "instagram-allow-videoCall" + "policyType": "tsg_security" + "logType": "security_event" + "action": "allow" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "instagram" + "app_operation": "videoCall" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "instagram" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "instagram" + "appIdObjects": + - "instagram" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-default-only-IpAndApplication-videoCall-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "instagram-deny-default-videoCall" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "default" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "instagram" + "app_operation": "videoCall" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "instagram" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "instagram" + "appIdObjects": + - "instagram" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-drop-only-IpAndApplication-videoCall-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "instagram-deny-drop-videoCall" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "drop" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "instagram" + "app_operation": "videoCall" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "instagram" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "instagram" + "appIdObjects": + - "instagram" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-rate_limit-only-IpAndApplication-videoCall-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "instagram-deny-rate-videoCall" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "rate_limit" + "bps": 30 + "isGre": 0 + "logCapture": 1 + "captureDepth": 30150 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "instagram" + "app_operation": "videoCall" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "instagram" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "instagram" + "appIdObjects": + - "instagram" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-tamper-only-IpAndApplication-videoCall-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "instagram-deny-tamper-videoCall" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "tamper" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "instagram" + "app_operation": "videoCall" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "instagram" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "instagram" + "appIdObjects": + - "instagram" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"monitor-only-IpAndApplication-videoCall-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "instagram-monitor-videoCall" + "policyType": "tsg_security" + "logType": "security_event" + "action": "monitor" + "packet_mirror": + "enable": 0 + "isGre": 0 + "logCapture": 1 + "captureDepth": 26340 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "instagram" + "app_operation": "videoCall" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "instagram" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "instagram" + "appIdObjects": + - "instagram" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535"
\ No newline at end of file diff --git a/other/data/security/protonvpn/protonvpn-airtest-data.yaml b/other/data/security/protonvpn/protonvpn-airtest-data.yaml new file mode 100644 index 0000000..31eb2b4 --- /dev/null +++ b/other/data/security/protonvpn/protonvpn-airtest-data.yaml @@ -0,0 +1,341 @@ +#注意keywordArray下的关键字必须为数组形式 +"allow-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "protonvpn-allow-wholeProcess" + "policyType": "tsg_security" + "logType": "security_event" + "action": "allow" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "connectVpn": 1 + "airTestMessage": + "app_name": "ProtonVPN" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "ProtonVPN" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "openvpn" + "appIdObjects": + - "openvpn" + - "wireguard" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" + - + "opAction": "update" + "isEdit": 1 + "returnData": 1 + "policyName": "protonvpn-allow-wholeProcess-update" + "policyType": "tsg_security" + "logType": "security_event" + "action": "allow" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "ProtonVPN" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "ProtonVPN" + "policyDesc": "autotest" + "effectiveRange": "default" + "userRegion": + "protocol": "openvpn" + "appIdObjects": + - "openvpn" + - "wireguard" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +#注意keywordArray下的关键字必须为数组形式 +"deny-default-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "protonvpn-deny-default-visitWebsite" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "default" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "connectVpn": 1 + "airTestMessage": + "app_name": "ProtonVPN" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "ProtonVPN" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "openvpn" + "appIdObjects": + - "openvpn" + - "wireguard" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-drop-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "protonvpn-deny-drop-visitWebsite" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "drop" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "ProtonVPN" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "ProtonVPN" + "policyDesc": "autotest" + "effectiveRange": "default" + "logCapture": 1 + "captureDepth": 42350 + "userRegion": + "protocol": "openvpn" + "appIdObjects": + - "openvpn" + - "wireguard" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-rate_limit-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "protonvpn-deny-rate-visitWebsite" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "rate_limit" + "bps": 48 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "ProtonVPN" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "ProtonVPN" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "openvpn" + "appIdObjects": + - "openvpn" + - "wireguard" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-tamper-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "protonvpn-deny-tamper-visitWebsite" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "tamper" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "ProtonVPN" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "ProtonVPN" + "policyDesc": "autotest" + "effectiveRange": "default" + "logCapture": 1 + "captureDepth": 45200 + "userRegion": + "protocol": "openvpn" + "appIdObjects": + - "openvpn" + - "wireguard" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +#注意keywordArray下的关键字必须为数组形式 +"monitor-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "protonvpn-monitor-visitWebsite" + "policyType": "tsg_security" + "logType": "security_event" + "action": "monitor" + "packet_mirror": + "enable": 0 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "connectVpn": 1 + "airTestMessage": + "app_name": "ProtonVPN" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "ProtonVPN" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "openvpn" + "appIdObjects": + - "openvpn" + - "wireguard" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" + - + "opAction": "update" + "isEdit": 1 + "returnData": 1 + "policyName": "protonvpn-monitor-visitWebsite-update" + "policyType": "tsg_security" + "logType": "security_event" + "action": "monitor" + "packet_mirror": + "enable": 0 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "ProtonVPN" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "ProtonVPN" + "policyDesc": "autotest" + "effectiveRange": "default" + "logCapture": 1 + "captureDepth": 43940 + "userRegion": + "protocol": "openvpn" + "appIdObjects": + - "openvpn" + - "wireguard" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535"
\ No newline at end of file diff --git a/other/data/security/psiphon3/psiphon3-airtest-data.yaml b/other/data/security/psiphon3/psiphon3-airtest-data.yaml new file mode 100644 index 0000000..b2f2302 --- /dev/null +++ b/other/data/security/psiphon3/psiphon3-airtest-data.yaml @@ -0,0 +1,337 @@ +#注意keywordArray下的关键字必须为数组形式 +"allow-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "psiphon3-allow-wholeProcess" + "policyType": "tsg_security" + "logType": "security_event" + "action": "allow" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "connectVpn": 1 + "airTestMessage": + "app_name": "psiphon3" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "psiphon3" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "psiphon3" + "appIdObjects": + - "psiphon3" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" + - + "opAction": "update" + "isEdit": 1 + "returnData": 1 + "policyName": "psiphon3-allow-wholeProcess-update" + "policyType": "tsg_security" + "logType": "security_event" + "action": "allow" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "psiphon3" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "psiphon3" + "policyDesc": "autotest" + "effectiveRange": "default" + "userRegion": + "protocol": "psiphon3" + "appIdObjects": + - "psiphon3" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +#注意keywordArray下的关键字必须为数组形式 +"deny-default-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "psiphon3-deny-default-visitWebsite" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "default" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "connectVpn": 1 + "airTestMessage": + "app_name": "psiphon3" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "psiphon3" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "psiphon3" + "appIdObjects": + - "psiphon3" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-drop-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "psiphon3-deny-drop-visitWebsite" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "drop" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "connectVpn": 1 + "airTestMessage": + "app_name": "psiphon3" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "psiphon3" + "policyDesc": "autotest" + "effectiveRange": "default" + "logCapture": 1 + "captureDepth": 47165 + "userRegion": + "protocol": "psiphon3" + "appIdObjects": + - "psiphon3" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-rate_limit-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "psiphon3-deny-rate-visitWebsite" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "rate_limit" + "bps": 28 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "connectVpn": 1 + "airTestMessage": + "app_name": "psiphon3" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "psiphon3" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "psiphon3" + "appIdObjects": + - "psiphon3" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-tamper-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "psiphon3-deny-tamper-visitWebsite" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "tamper" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "connectVpn": 1 + "airTestMessage": + "app_name": "psiphon3" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "psiphon3" + "policyDesc": "autotest" + "effectiveRange": "default" + "logCapture": 1 + "captureDepth": 46850 + "userRegion": + "protocol": "psiphon3" + "appIdObjects": + - "psiphon3" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +#注意keywordArray下的关键字必须为数组形式 +"monitor-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "psiphon3-monitor-visitWebsite" + "policyType": "tsg_security" + "logType": "security_event" + "action": "monitor" + "packet_mirror": + "enable": 0 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "connectVpn": 1 + "airTestMessage": + "app_name": "psiphon3" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "psiphon3" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "psiphon3" + "appIdObjects": + - "psiphon3" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" + - + "opAction": "update" + "isEdit": 1 + "returnData": 1 + "policyName": "psiphon3-monitor-visitWebsite-update" + "policyType": "tsg_security" + "logType": "security_event" + "action": "monitor" + "packet_mirror": + "enable": 0 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "connectVpn": 1 + "airTestMessage": + "app_name": "psiphon3" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "psiphon3" + "policyDesc": "autotest" + "effectiveRange": "default" + "logCapture": 1 + "captureDepth": 41450 + "userRegion": + "protocol": "psiphon3" + "appIdObjects": + - "psiphon3" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535"
\ No newline at end of file diff --git a/other/data/security/qq/qq-airTest-data.yaml b/other/data/security/qq/qq-airTest-data.yaml new file mode 100644 index 0000000..72f04fd --- /dev/null +++ b/other/data/security/qq/qq-airTest-data.yaml @@ -0,0 +1,1241 @@ +#注意keywordArray下的关键字必须为数组形式 +"allow-only-IpAndApplication-sendMessage-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "qq-allow-sendMessage" + "policyType": "tsg_security" + "logType": "security_event" + "action": "allow" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "qq" + "app_operation": "sendMessage" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "qq" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "qq" + "appIdObjects": + - "qq" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-default-only-IpAndApplication-sendMessage-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "qq-deny-default-sendMessage" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "default" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "qq" + "app_operation": "sendMessage" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "qq" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "qq" + "appIdObjects": + - "qq" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-drop-only-IpAndApplication-sendMessage-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "qq-deny-drop-sendMessage" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "drop" + "isGre": 0 + "logCapture": 1 + "captureDepth": 49520 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "qq" + "app_operation": "sendMessage" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "qq" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "qq" + "appIdObjects": + - "qq" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-rate_limit-only-IpAndApplication-sendMessage-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "qq-deny-rate-sendMessage" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "rate_limit" + "bps": 85 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "qq" + "app_operation": "sendMessage" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "qq" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "qq" + "appIdObjects": + - "qq" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-tamper-only-IpAndApplication-sendMessage-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "qq-deny-tamper-sendMessage" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "tamper" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "qq" + "app_operation": "sendMessage" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "qq" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "qq" + "appIdObjects": + - "qq" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"monitor-only-IpAndApplication-sendMessage-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "qq-monitor-sendMessage" + "policyType": "tsg_security" + "logType": "security_event" + "action": "monitor" + "packet_mirror": + "enable": 0 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "logCapture": 1 + "captureDepth": 40002 + "airTestMessage": + "app_name": "qq" + "app_operation": "sendMessage" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "qq" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "qq" + "appIdObjects": + - "qq" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"allow-only-IpAndApplication-sendDynamic-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "qq-allow-sendDynamic" + "policyType": "tsg_security" + "logType": "security_event" + "action": "allow" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "qq" + "app_operation": "sendDynamic" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "qq" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "qq" + "appIdObjects": + - "qq" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-default-only-IpAndApplication-sendDynamic-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "qq-deny-default-sendDynamic" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "default" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "qq" + "app_operation": "sendDynamic" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "qq" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "qq" + "appIdObjects": + - "qq" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-drop-only-IpAndApplication-sendDynamic-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "qq-deny-drop-sendDynamic" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "drop" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "qq" + "app_operation": "sendDynamic" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "qq" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "qq" + "appIdObjects": + - "qq" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-rate_limit-only-IpAndApplication-sendDynamic-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "qq-deny-rate-sendDynamic" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "rate_limit" + "bps": 46 + "isGre": 0 + "logCapture": 1 + "captureDepth": 40100 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "qq" + "app_operation": "sendDynamic" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "qq" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "qq" + "appIdObjects": + - "qq" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-tamper-only-IpAndApplication-sendDynamic-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "qq-deny-tamper-sendDynamic" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "tamper" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "qq" + "app_operation": "sendDynamic" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "qq" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "qq" + "appIdObjects": + - "qq" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"monitor-only-IpAndApplication-sendDynamic-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "qq-monitor-sendDynamic" + "policyType": "tsg_security" + "logType": "security_event" + "action": "monitor" + "packet_mirror": + "enable": 0 + "isGre": 0 + "logCapture": 1 + "captureDepth": 41520 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "qq" + "app_operation": "sendDynamic" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "qq" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "qq" + "appIdObjects": + - "qq" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"allow-only-IpAndApplication-video-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "qq-allow-video" + "policyType": "tsg_security" + "logType": "security_event" + "action": "allow" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "qq" + "app_operation": "video" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "qq" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "qq" + "appIdObjects": + - "qq" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-default-only-IpAndApplication-video-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "qq-deny-default-video" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "default" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "qq" + "app_operation": "video" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "qq" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "qq" + "appIdObjects": + - "qq" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-drop-only-IpAndApplication-video-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "qq-deny-drop-video" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "drop" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "qq" + "app_operation": "video" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "qq" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "qq" + "appIdObjects": + - "qq" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-rate_limit-only-IpAndApplication-video-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "qq-deny-video" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "rate_limit" + "bps": 10 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "qq" + "app_operation": "video" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "qq" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "qq" + "appIdObjects": + - "qq" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-tamper-only-IpAndApplication-video-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "qq-deny-tamper-video" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "tamper" + "isGre": 0 + "logCapture": 1 + "captureDepth": 48630 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "qq" + "app_operation": "video" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "qq" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "qq" + "appIdObjects": + - "qq" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"monitor-only-IpAndApplication-video-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "qq-monitor-video" + "policyType": "tsg_security" + "logType": "security_event" + "action": "monitor" + "packet_mirror": + "enable": 0 + "isGre": 0 + "logCapture": 1 + "captureDepth": 34080 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "qq" + "app_operation": "video" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "qq" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "qq" + "appIdObjects": + - "qq" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"allow-only-IpAndApplication-voiceCalls-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "qq-allow-voiceCalls" + "policyType": "tsg_security" + "logType": "security_event" + "action": "allow" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "qq" + "app_operation": "voiceCalls" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "qq" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "qq" + "appIdObjects": + - "qq" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-default-only-IpAndApplication-voiceCalls-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "qq-deny-default-voiceCalls" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "default" + "isGre": 0 + "logCapture": 1 + "captureDepth": 49975 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "qq" + "app_operation": "voiceCalls" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "qq" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "qq" + "appIdObjects": + - "qq" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-drop-only-IpAndApplication-voiceCalls-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "qq-deny-drop-voiceCalls" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "drop" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "qq" + "app_operation": "voiceCalls" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "qq" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "qq" + "appIdObjects": + - "qq" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-rate_limit-only-IpAndApplication-voiceCalls-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "qq-deny-rate-voiceCalls" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "rate_limit" + "bps": 27 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "qq" + "app_operation": "voiceCalls" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "qq" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "qq" + "appIdObjects": + - "qq" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-tamper-only-IpAndApplication-voiceCalls-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "qq-deny-tamper-voiceCalls" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "tamper" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "qq" + "app_operation": "voiceCalls" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "qq" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "qq" + "appIdObjects": + - "qq" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"monitor-only-IpAndApplication-voiceCalls-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "qq-monitor-voiceCalls" + "policyType": "tsg_security" + "logType": "security_event" + "action": "monitor" + "packet_mirror": + "enable": 0 + "isGre": 0 + "logCapture": 1 + "captureDepth": 38600 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "qq" + "app_operation": "voiceCalls" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "qq" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "qq" + "appIdObjects": + - "qq" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"allow-only-IpAndApplication-videoCall-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "qq-allow-videoCall" + "policyType": "tsg_security" + "logType": "security_event" + "action": "allow" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "qq" + "app_operation": "videoCall" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "qq" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "qq" + "appIdObjects": + - "qq" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-default-only-IpAndApplication-videoCall-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "qq-deny-default-videoCall" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "default" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "qq" + "app_operation": "videoCall" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "qq" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "qq" + "appIdObjects": + - "qq" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-drop-only-IpAndApplication-videoCall-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "qq-deny-drop-videoCall" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "drop" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "qq" + "app_operation": "videoCall" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "qq" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "qq" + "appIdObjects": + - "qq" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-rate_limit-only-IpAndApplication-videoCall-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "qq-deny-rate-videoCall" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "rate_limit" + "bps": 30 + "isGre": 0 + "logCapture": 1 + "captureDepth": 40150 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "qq" + "app_operation": "videoCall" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "qq" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "qq" + "appIdObjects": + - "qq" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-tamper-only-IpAndApplication-videoCall-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "qq-deny-tamper-videoCall" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "tamper" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "qq" + "app_operation": "videoCall" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "qq" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "qq" + "appIdObjects": + - "qq" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"monitor-only-IpAndApplication-videoCall-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "qq-monitor-videoCall" + "policyType": "tsg_security" + "logType": "security_event" + "action": "monitor" + "packet_mirror": + "enable": 0 + "isGre": 0 + "logCapture": 1 + "captureDepth": 46340 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "qq" + "app_operation": "videoCall" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "qq" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "qq" + "appIdObjects": + - "qq" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535"
\ No newline at end of file diff --git a/other/data/security/skype/skype-airTest-data.yaml b/other/data/security/skype/skype-airTest-data.yaml new file mode 100644 index 0000000..f8c79db --- /dev/null +++ b/other/data/security/skype/skype-airTest-data.yaml @@ -0,0 +1,746 @@ +#注意keywordArray下的关键字必须为数组形式 +"allow-only-IpAndApplication-sendMessage-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "skype-allow-sendMessage" + "policyType": "tsg_security" + "logType": "security_event" + "action": "allow" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "skype" + "app_operation": "sendMessage" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "skype" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "skype" + "appIdObjects": + - "skype" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-default-only-IpAndApplication-sendMessage-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "skype-deny-default-sendMessage" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "default" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "skype" + "app_operation": "sendMessage" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "skype" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "skype" + "appIdObjects": + - "skype" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-drop-only-IpAndApplication-sendMessage-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "skype-deny-drop-sendMessage" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "drop" + "isGre": 0 + "logCapture": 1 + "captureDepth": 19900 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "skype" + "app_operation": "sendMessage" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "skype" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "skype" + "appIdObjects": + - "skype" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-rate_limit-only-IpAndApplication-sendMessage-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "skype-deny-rate-sendMessage" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "rate_limit" + "bps": 28 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "skype" + "app_operation": "sendMessage" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "skype" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "skype" + "appIdObjects": + - "skype" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-tamper-only-IpAndApplication-sendMessage-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "skype-deny-tamper-sendMessage" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "tamper" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "skype" + "app_operation": "sendMessage" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "skype" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "skype" + "appIdObjects": + - "skype" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"monitor-only-IpAndApplication-sendMessage-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "skype-monitor-sendMessage" + "policyType": "tsg_security" + "logType": "security_event" + "action": "monitor" + "packet_mirror": + "enable": 0 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "logCapture": 1 + "captureDepth": 50005 + "airTestMessage": + "app_name": "skype" + "app_operation": "sendMessage" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "skype" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "skype" + "appIdObjects": + - "skype" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"allow-only-IpAndApplication-voiceCalls-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "skype-allow-voiceCalls" + "policyType": "tsg_security" + "logType": "security_event" + "action": "allow" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "skype" + "app_operation": "voiceCalls" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "skype" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "skype" + "appIdObjects": + - "skype" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-default-only-IpAndApplication-voiceCalls-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "skype-deny-default-voiceCalls" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "default" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "skype" + "app_operation": "voiceCalls" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "skype" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "skype" + "appIdObjects": + - "skype" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-drop-only-IpAndApplication-voiceCalls-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "skype-deny-drop-voiceCalls" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "drop" + "isGre": 0 + "logCapture": 1 + "captureDepth": 39999 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "skype" + "app_operation": "voiceCalls" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "skype" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "skype" + "appIdObjects": + - "skype" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-rate_limit-only-IpAndApplication-voiceCalls-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "skype-deny-rate-voiceCalls" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "bps": 34 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "skype" + "app_operation": "voiceCalls" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "skype" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "skype" + "appIdObjects": + - "skype" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-tamper-only-IpAndApplication-voiceCalls-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "skype-deny-tamper-voiceCalls" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "tamper" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "skype" + "app_operation": "voiceCalls" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "skype" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "skype" + "appIdObjects": + - "skype" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"monitor-only-IpAndApplication-voiceCalls-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "skype-monitor-voiceCalls" + "policyType": "tsg_security" + "logType": "security_event" + "action": "monitor" + "packet_mirror": + "enable": 0 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "logCapture": 1 + "captureDepth": 40658 + "airTestMessage": + "app_name": "skype" + "app_operation": "voiceCalls" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "skype" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "skype" + "appIdObjects": + - "skype" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"allow-only-IpAndApplication-videoCall-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "skype-allow-videoCall" + "policyType": "tsg_security" + "logType": "security_event" + "action": "allow" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "skype" + "app_operation": "videoCall" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "skype" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "skype" + "appIdObjects": + - "skype" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-default-only-IpAndApplication-videoCall-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "skype-deny-default-videoCall" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "default" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "skype" + "app_operation": "videoCall" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "skype" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "skype" + "appIdObjects": + - "skype" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-drop-only-IpAndApplication-videoCall-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "skype-deny-drop-videoCall" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "drop" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "skype" + "app_operation": "videoCall" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "skype" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "skype" + "appIdObjects": + - "skype" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-rate_limit-only-IpAndApplication-videoCall-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "skype-deny-rate-videoCall" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "rate_limit" + "bps": 69 + "isGre": 0 + "logCapture": 1 + "captureDepth": 35680 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "skype" + "app_operation": "videoCall" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "skype" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "skype" + "appIdObjects": + - "skype" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-tamper-only-IpAndApplication-videoCall-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "skype-deny-tamper-videoCall" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "tamper" + "isGre": 0 + "logCapture": 1 + "captureDepth": 26050 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "skype" + "app_operation": "videoCall" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "skype" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "skype" + "appIdObjects": + - "skype" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"monitor-only-IpAndApplication-videoCall-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "skype-monitor-videoCall" + "policyType": "tsg_security" + "logType": "security_event" + "action": "monitor" + "packet_mirror": + "enable": 0 + "isGre": 0 + "logCapture": 1 + "captureDepth": 26410 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "skype" + "app_operation": "videoCall" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "skype" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "skype" + "appIdObjects": + - "skype" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535"
\ No newline at end of file diff --git a/other/data/security/tachyonvpn/tachyonvpn-airtest-data.yaml b/other/data/security/tachyonvpn/tachyonvpn-airtest-data.yaml new file mode 100644 index 0000000..67f598f --- /dev/null +++ b/other/data/security/tachyonvpn/tachyonvpn-airtest-data.yaml @@ -0,0 +1,332 @@ +#注意keywordArray下的关键字必须为数组形式 +"allow-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "security-tachyonvpn-allow-wholeProcess" + "policyType": "tsg_security" + "logType": "security_event" + "action": "allow" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "connectVpn": 1 + "airTestMessage": + "app_name": "TachyonVPN" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "TachyonVPN" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "tachyonvpn" + "appIdObjects": + - "tachyonvpn" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" + - + "opAction": "update" + "isEdit": 1 + "returnData": 1 + "policyName": "security-tachyonvpn-allow-wholeProcess-update" + "policyType": "tsg_security" + "logType": "security_event" + "action": "allow" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "TachyonVPN" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "TachyonVPN" + "policyDesc": "autotest" + "effectiveRange": "default" + "userRegion": + "protocol": "tachyonvpn" + "appIdObjects": + - "tachyonvpn" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +#注意keywordArray下的关键字必须为数组形式 +"deny-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "security-tachyonvpn-deny-visitWebsite-001" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "default" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "connectVpn": 1 + "airTestMessage": + "app_name": "TachyonVPN" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "TachyonVPN" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "tachyonvpn" + "appIdObjects": + - "tachyonvpn" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" + - + "opAction": "update" + "isEdit": 1 + "returnData": 1 + "policyName": "security-tachyonvpn-deny-visitWebsite-002" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "drop" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "TachyonVPN" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "TachyonVPN" + "policyDesc": "autotest" + "effectiveRange": "default" + "logCapture": 1 + "captureDepth": 47165 + "userRegion": + "protocol": "tachyonvpn" + "appIdObjects": + - "tachyonvpn" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" + - + "opAction": "add" + "returnData": 1 + "policyName": "security-tachyonvpn-deny-visitWebsite-003" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "rate_limit" + "bps": 28 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "TachyonVPN" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "TachyonVPN" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "tachyonvpn" + "appIdObjects": + - "tachyonvpn" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" + - + "opAction": "update" + "isEdit": 1 + "returnData": 1 + "policyName": "security-tachyonvpn-deny-visitWebsite-004" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "tamper" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "TachyonVPN" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "TachyonVPN" + "policyDesc": "autotest" + "effectiveRange": "default" + "logCapture": 1 + "captureDepth": 46850 + "userRegion": + "protocol": "tachyonvpn" + "appIdObjects": + - "tachyonvpn" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +#注意keywordArray下的关键字必须为数组形式 +"monitor-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "security-tachyonvpn-monitor-visitWebsite" + "policyType": "tsg_security" + "logType": "security_event" + "action": "monitor" + "packet_mirror": + "enable": 0 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "connectVpn": 1 + "airTestMessage": + "app_name": "TachyonVPN" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "TachyonVPN" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "tachyonvpn" + "appIdObjects": + - "tachyonvpn" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" + - + "opAction": "update" + "isEdit": 1 + "returnData": 1 + "policyName": "security-tachyonvpn-monitor-visitWebsite-update" + "policyType": "tsg_security" + "logType": "security_event" + "action": "monitor" + "packet_mirror": + "enable": 0 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "TachyonVPN" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "TachyonVPN" + "policyDesc": "autotest" + "effectiveRange": "default" + "logCapture": 1 + "captureDepth": 41450 + "userRegion": + "protocol": "tachyonvpn" + "appIdObjects": + - "tachyonvpn" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535"
\ No newline at end of file diff --git a/other/data/security/taobao/taobao-airTest-data.yaml b/other/data/security/taobao/taobao-airTest-data.yaml new file mode 100644 index 0000000..bfa787e --- /dev/null +++ b/other/data/security/taobao/taobao-airTest-data.yaml @@ -0,0 +1,748 @@ +#注意keywordArray下的关键字必须为数组形式 +"allow-only-IpAndApplication-sendMessage-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "taobao-allow-sendMessage" + "policyType": "tsg_security" + "logType": "security_event" + "action": "allow" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "taobao" + "app_operation": "sendMessage" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "taobao" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "taobao" + "appIdObjects": + - "taobao" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-default-only-IpAndApplication-sendMessage-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "taobao-deny-default-sendMessage" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "default" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "taobao" + "app_operation": "sendMessage" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "taobao" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "taobao" + "appIdObjects": + - "taobao" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-drop-only-IpAndApplication-sendMessage-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "taobao-deny-drop-sendMessage" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "drop" + "isGre": 0 + "logCapture": 1 + "captureDepth": 44450 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "taobao" + "app_operation": "sendMessage" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "taobao" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "taobao" + "appIdObjects": + - "taobao" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-rate_limit-only-IpAndApplication-sendMessage-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "taobao-deny-rate-sendMessage" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "rate_limit" + "bps": 16 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "taobao" + "app_operation": "sendMessage" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "taobao" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "taobao" + "appIdObjects": + - "taobao" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-tamper-only-IpAndApplication-sendMessage-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "taobao-deny-tamper-sendMessage" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "tamper" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "taobao" + "app_operation": "sendMessage" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "taobao" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "taobao" + "appIdObjects": + - "taobao" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"monitor-only-IpAndApplication-sendMessage-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "taobao-monitor-sendMessage" + "policyType": "tsg_security" + "logType": "security_event" + "action": "monitor" + "packet_mirror": + "enable": 0 + "isGre": 0 + "logCapture": 1 + "captureDepth": 42051 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "taobao" + "app_operation": "sendMessage" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "taobao" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "taobao" + "appIdObjects": + - "taobao" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"allow-only-IpAndApplication-search-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "taobao-allow-search" + "policyType": "tsg_security" + "logType": "security_event" + "action": "allow" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "taobao" + "app_operation": "search" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "taobao" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "taobao" + "appIdObjects": + - "taobao" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-default-only-IpAndApplication-search-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "taobao-deny-default-search" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "default" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "taobao" + "app_operation": "search" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "taobao" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "taobao" + "appIdObjects": + - "taobao" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-drop-only-IpAndApplication-search-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "taobao-deny-drop-search" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "drop" + "isGre": 0 + "logCapture": 1 + "captureDepth": 50000 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "taobao" + "app_operation": "search" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "taobao" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "taobao" + "appIdObjects": + - "taobao" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-rate_limit-only-IpAndApplication-search-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "taobao-deny-rate-search" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "rate_limit" + "bps": 48 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "taobao" + "app_operation": "search" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "taobao" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "taobao" + "appIdObjects": + - "taobao" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-tamper-only-IpAndApplication-search-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "taobao-deny-tamper-search" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "tamper" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "taobao" + "app_operation": "search" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "taobao" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "taobao" + "appIdObjects": + - "taobao" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"monitor-only-IpAndApplication-search-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "taobao-monitor-search" + "policyType": "tsg_security" + "logType": "security_event" + "action": "monitor" + "packet_mirror": + "enable": 0 + "isGre": 0 + "logCapture": 1 + "captureDepth": 46579 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "taobao" + "app_operation": "search" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "taobao" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "taobao" + "appIdObjects": + - "taobao" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"allow-only-IpAndApplication-find-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "taobao-allow-find" + "policyType": "tsg_security" + "logType": "security_event" + "action": "allow" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "taobao" + "app_operation": "Find" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "taobao" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "taobao" + "appIdObjects": + - "taobao" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-default-only-IpAndApplication-find-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "taobao-deny-default-find" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "default" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "taobao" + "app_operation": "Find" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "taobao" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "taobao" + "appIdObjects": + - "taobao" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-drop-only-IpAndApplication-find-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "taobao-deny-drop-find" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "drop" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "taobao" + "app_operation": "Find" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "taobao" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "taobao" + "appIdObjects": + - "taobao" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-rate_limit-only-IpAndApplication-find-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "taobao-deny-rate-find" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "rate_limit" + "bps": 63 + "isGre": 0 + "logCapture": 1 + "captureDepth": 49165 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "taobao" + "app_operation": "Find" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "taobao" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "taobao" + "appIdObjects": + - "taobao" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-tamper-only-IpAndApplication-find-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "taobao-deny-tamper-find" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "tamper" + "isGre": 0 + "logCapture": 1 + "captureDepth": 34895 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "taobao" + "app_operation": "Find" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "taobao" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "taobao" + "appIdObjects": + - "taobao" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"monitor-only-IpAndApplication-find-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "taobao-monitor-find" + "policyType": "tsg_security" + "logType": "security_event" + "action": "monitor" + "packet_mirror": + "enable": 0 + "isGre": 0 + "logCapture": 1 + "captureDepth": 37535 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "taobao" + "app_operation": "Find" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "taobao" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "taobao" + "appIdObjects": + - "taobao" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +
\ No newline at end of file diff --git a/other/data/security/telegram/telegram-airTest-data.yaml b/other/data/security/telegram/telegram-airTest-data.yaml index 390b55c..50b5dc6 100644 --- a/other/data/security/telegram/telegram-airTest-data.yaml +++ b/other/data/security/telegram/telegram-airTest-data.yaml @@ -3,7 +3,7 @@ - "opAction": "add" "returnData": 1 - "policyName": "security-telegram-allow-only-IpAndApplication-sendMessage-airTest-001" + "policyName": "telegram-allow-sendMessage" "policyType": "tsg_security" "logType": "security_event" "action": "allow" @@ -12,7 +12,6 @@ "doBlacklist": 0 "doLog": 1 "isApp": 1 - "isOpen": 1 "airTestMessage": "app_name": "telegram" "app_operation": "sendMessage" @@ -39,11 +38,11 @@ - "ip": "1.1.1.1" "port": "0-65535" -"deny-only-IpAndApplication-sendMessage-airTest_data": +"deny-default-only-IpAndApplication-sendMessage-airTest_data": - "opAction": "add" "returnData": 1 - "policyName": "security-telegram-deny-only-IpAndApplication-sendMessage-airTest-001" + "policyName": "telegram-deny-default-sendMessage" "policyType": "tsg_security" "logType": "security_event" "action": "deny" @@ -53,7 +52,6 @@ "doBlacklist": 0 "doLog": 1 "isApp": 1 - "isOpen": 1 "airTestMessage": "app_name": "telegram" "app_operation": "sendMessage" @@ -80,16 +78,16 @@ - "ip": "1.1.1.1" "port": "0-65535" +"deny-drop-only-IpAndApplication-sendMessage-airTest_data": - - "opAction": "update" + "opAction": "add" "returnData": 1 - "policyName": "security-telegram-deny-only-IpAndApplication-sendMessage-airTest-002" + "policyName": "telegram-deny-drop-sendMessage" "policyType": "tsg_security" "logType": "security_event" "action": "deny" "method": "drop" "isGre": 0 - "isEdit": 1 "logCapture": 1 "captureDepth": 19999 "userTags": "" @@ -121,11 +119,12 @@ - "addItemList": - "ip": "1.1.1.1" - "port": "0-65535" + "port": "0-65535" +"deny-rate_limit-only-IpAndApplication-sendMessage-airTest_data": - "opAction": "add" "returnData": 1 - "policyName": "security-telegram-deny-only-IpAndApplication-sendMessage-airTest-003" + "policyName": "telegram-deny-rate-sendMessage" "policyType": "tsg_security" "logType": "security_event" "action": "deny" @@ -161,11 +160,12 @@ - "addItemList": - "ip": "1.1.1.1" - "port": "0-65535" + "port": "0-65535" +"deny-tamper-only-IpAndApplication-sendMessage-airTest_data": - "opAction": "add" "returnData": 1 - "policyName": "security-telegram-deny-only-IpAndApplication-sendMessage-airTest-004" + "policyName": "telegram-deny-tamper-sendMessage" "policyType": "tsg_security" "logType": "security_event" "action": "deny" @@ -205,7 +205,7 @@ - "opAction": "add" "returnData": 1 - "policyName": "security-telegram-monitor-only-IpAndApplication-sendMessage-airTest-001" + "policyName": "telegram-monitor-sendMessage" "policyType": "tsg_security" "logType": "security_event" "action": "monitor" @@ -216,7 +216,6 @@ "doBlacklist": 0 "doLog": 1 "isApp": 1 - "isOpen": 1 "logCapture": 1 "captureDepth": 33981 "airTestMessage": @@ -245,257 +244,11 @@ - "ip": "1.1.1.1" "port": "0-65535" -"allow-only-IpAndApplication-closeProxy-airTest_data": - - - "opAction": "add" - "returnData": 1 - "policyName": "security-telegram-allow-only-IpAndApplication-closeProxy-airTest-001" - "policyType": "tsg_security" - "logType": "security_event" - "action": "allow" - "isGre": 0 - "userTags": "" - "doBlacklist": 0 - "doLog": 1 - "isApp": 1 - "isOpen": 1 - "airTestMessage": - "app_name": "telegram" - "app_operation": "closeProxy" - "logQueryParam": - - - "queryFiledKey": "common_app_label" - "queryValue": "telegram" - "policyDesc": "autotest" - "effectiveRange": - "userRegion": - "protocol": "telegram" - "appIdObjects": - - "telegram" - "appSelectorObjects": - "isValid": 1 - "scheduleId": - "condation": - - - "protocolField": "TSG_SECURITY_SOURCE_ADDR" - "objectType": "ip" - "objectSubType": "endpoint" - "objectList": - - "addItemList": - - - "ip": "1.1.1.1" - "port": "0-65535" -"deny-only-IpAndApplication-closeProxy-airTest_data": - - - "opAction": "add" - "returnData": 1 - "policyName": "security-telegram-deny-only-IpAndApplication-closeProxy-airTest-001" - "policyType": "tsg_security" - "logType": "security_event" - "action": "deny" - "method": "default" - "isGre": 0 - "userTags": "" - "doBlacklist": 0 - "doLog": 1 - "isApp": 1 - "isOpen": 1 - "airTestMessage": - "app_name": "telegram" - "app_operation": "closeProxy" - "logQueryParam": - - - "queryFiledKey": "common_app_label" - "queryValue": "telegram" - "policyDesc": "autotest" - "effectiveRange": - "userRegion": - "protocol": "telegram" - "appIdObjects": - - "telegram" - "appSelectorObjects": - "isValid": 1 - "scheduleId": - "condation": - - - "protocolField": "TSG_SECURITY_SOURCE_ADDR" - "objectType": "ip" - "objectSubType": "endpoint" - "objectList": - - "addItemList": - - - "ip": "1.1.1.1" - "port": "0-65535" - - - "opAction": "update" - "returnData": 1 - "policyName": "security-telegram-deny-only-IpAndApplication-closeProxy-airTest-002" - "policyType": "tsg_security" - "logType": "security_event" - "action": "deny" - "method": "drop" - "isGre": 0 - "isEdit": 1 - "userTags": "" - "doBlacklist": 0 - "doLog": 1 - "isApp": 1 - "airTestMessage": - "app_name": "telegram" - "app_operation": "closeProxy" - "logQueryParam": - - - "queryFiledKey": "common_app_label" - "queryValue": "telegram" - "policyDesc": "autotest" - "effectiveRange": - "userRegion": - "protocol": "telegram" - "appIdObjects": - - "telegram" - "appSelectorObjects": - "isValid": 1 - "scheduleId": - "condation": - - - "protocolField": "TSG_SECURITY_SOURCE_ADDR" - "objectType": "ip" - "objectSubType": "endpoint" - "objectList": - - "addItemList": - - - "ip": "1.1.1.1" - "port": "0-65535" - - - "opAction": "add" - "returnData": 1 - "policyName": "security-telegram-deny-only-IpAndApplication-closeProxy-airTest-003" - "policyType": "tsg_security" - "logType": "security_event" - "action": "deny" - "method": "rate_limit" - "bps": 50 - "isGre": 0 - "logCapture": 1 - "captureDepth": 40000 - "userTags": "" - "doBlacklist": 0 - "doLog": 1 - "isApp": 1 - "airTestMessage": - "app_name": "telegram" - "app_operation": "closeProxy" - "logQueryParam": - - - "queryFiledKey": "common_app_label" - "queryValue": "telegram" - "policyDesc": "autotest" - "effectiveRange": - "userRegion": - "protocol": "telegram" - "appIdObjects": - - "telegram" - "appSelectorObjects": - "isValid": 1 - "scheduleId": - "condation": - - - "protocolField": "TSG_SECURITY_SOURCE_ADDR" - "objectType": "ip" - "objectSubType": "endpoint" - "objectList": - - "addItemList": - - - "ip": "1.1.1.1" - "port": "0-65535" - - - "opAction": "add" - "returnData": 1 - "policyName": "security-telegram-deny-only-IpAndApplication-closeProxy-airTest-004" - "policyType": "tsg_security" - "logType": "security_event" - "action": "deny" - "method": "tamper" - "isGre": 0 - "userTags": "" - "doBlacklist": 0 - "doLog": 1 - "isApp": 1 - "airTestMessage": - "app_name": "telegram" - "app_operation": "closeProxy" - "logQueryParam": - - - "queryFiledKey": "common_app_label" - "queryValue": "telegram" - "policyDesc": "autotest" - "effectiveRange": - "userRegion": - "protocol": "telegram" - "appIdObjects": - - "telegram" - "appSelectorObjects": - "isValid": 1 - "scheduleId": - "condation": - - - "protocolField": "TSG_SECURITY_SOURCE_ADDR" - "objectType": "ip" - "objectSubType": "endpoint" - "objectList": - - "addItemList": - - - "ip": "1.1.1.1" - "port": "0-65535" -"monitor-only-IpAndApplication-closeProxy-airTest_data": - - - "opAction": "add" - "returnData": 1 - "policyName": "security-telegram-monitor-only-IpAndApplication-closeProxy-airTest-001" - "policyType": "tsg_security" - "logType": "security_event" - "action": "monitor" - "packet_mirror": - "enable": 0 - "isGre": 0 - "logCapture": 1 - "captureDepth": 36502 - "userTags": "" - "doBlacklist": 0 - "doLog": 1 - "isApp": 1 - "isOpen": 1 - "airTestMessage": - "app_name": "telegram" - "app_operation": "closeProxy" - "logQueryParam": - - - "queryFiledKey": "common_app_label" - "queryValue": "telegram" - "policyDesc": "autotest" - "effectiveRange": - "userRegion": - "protocol": "telegram" - "appIdObjects": - - "telegram" - "appSelectorObjects": - "isValid": 1 - "scheduleId": - "condation": - - - "protocolField": "TSG_SECURITY_SOURCE_ADDR" - "objectType": "ip" - "objectSubType": "endpoint" - "objectList": - - "addItemList": - - - "ip": "1.1.1.1" - "port": "0-65535" "allow-only-IpAndApplication-voiceCalls-airTest_data": - "opAction": "add" "returnData": 1 - "policyName": "security-telegram-allow-only-IpAndApplication-voiceCalls-airTest-001" + "policyName": "telegram-allow-voiceCalls" "policyType": "tsg_security" "logType": "security_event" "action": "allow" @@ -504,7 +257,6 @@ "doBlacklist": 0 "doLog": 1 "isApp": 1 - "isOpen": 1 "airTestMessage": "app_name": "telegram" "app_operation": "voiceCalls" @@ -531,11 +283,11 @@ - "ip": "1.1.1.1" "port": "0-65535" -"deny-only-IpAndApplication-voiceCalls-airTest_data": +"deny-default-only-IpAndApplication-voiceCalls-airTest_data": - "opAction": "add" "returnData": 1 - "policyName": "security-telegram-deny-only-IpAndApplication-voiceCalls-airTest-001" + "policyName": "telegram-deny-default-voiceCalls" "policyType": "tsg_security" "logType": "security_event" "action": "deny" @@ -545,7 +297,6 @@ "doBlacklist": 0 "doLog": 1 "isApp": 1 - "isOpen": 1 "airTestMessage": "app_name": "telegram" "app_operation": "voiceCalls" @@ -571,11 +322,12 @@ - "addItemList": - "ip": "1.1.1.1" - "port": "0-65535" + "port": "0-65535" +"deny-drop-only-IpAndApplication-voiceCalls-airTest_data": - "opAction": "add" "returnData": 1 - "policyName": "security-telegram-deny-only-IpAndApplication-voiceCalls-airTest-002" + "policyName": "telegram-deny-drop-voiceCalls" "policyType": "tsg_security" "logType": "security_event" "action": "deny" @@ -610,18 +362,18 @@ - "addItemList": - "ip": "1.1.1.1" - "port": "0-65535" + "port": "0-65535" +"deny-rate_limit-only-IpAndApplication-voiceCalls-airTest_data": - - "opAction": "update" + "opAction": "add" "returnData": 1 - "policyName": "security-telegram-deny-only-IpAndApplication-voiceCalls-airTest-003" + "policyName": "telegram-deny-rate-voiceCalls" "policyType": "tsg_security" "logType": "security_event" "action": "deny" "method": "rate_limit" "bps": 72 "isGre": 0 - "isEdit": 1 "logCapture": 1 "captureDepth": 24805 "userTags": "" @@ -653,11 +405,12 @@ - "addItemList": - "ip": "1.1.1.1" - "port": "0-65535" + "port": "0-65535" +"deny-tamper-only-IpAndApplication-voiceCalls-airTest_data": - "opAction": "add" "returnData": 1 - "policyName": "security-telegram-deny-only-IpAndApplication-voiceCalls-airTest-004" + "policyName": "telegram-deny-tamper-voiceCalls" "policyType": "tsg_security" "logType": "security_event" "action": "deny" @@ -697,7 +450,7 @@ - "opAction": "add" "returnData": 1 - "policyName": "security-telegram-monitor-only-IpAndApplication-voiceCalls-airTest-001" + "policyName": "telegram-monitor-voiceCalls" "policyType": "tsg_security" "logType": "security_event" "action": "monitor" @@ -710,7 +463,6 @@ "doBlacklist": 0 "doLog": 1 "isApp": 1 - "isOpen": 1 "airTestMessage": "app_name": "telegram" "app_operation": "voiceCalls" @@ -741,7 +493,7 @@ - "opAction": "add" "returnData": 1 - "policyName": "security-telegram-allow-only-IpAndApplication-socks5-airTest-001" + "policyName": "telegram-allow-socks5" "policyType": "tsg_security" "logType": "security_event" "action": "allow" @@ -750,7 +502,6 @@ "doBlacklist": 0 "doLog": 1 "isApp": 1 - "isOpen": 1 "airTestMessage": "app_name": "telegram" "app_operation": "socks5" @@ -777,11 +528,11 @@ - "ip": "1.1.1.1" "port": "0-65535" -"deny-only-IpAndApplication-socks5-airTest_data": +"deny-default-only-IpAndApplication-socks5-airTest_data": - "opAction": "add" "returnData": 1 - "policyName": "security-telegram-deny-only-IpAndApplication-socks5-airTest-001" + "policyName": "telegram-deny-default-socks5" "policyType": "tsg_security" "logType": "security_event" "action": "deny" @@ -791,7 +542,6 @@ "doBlacklist": 0 "doLog": 1 "isApp": 1 - "isOpen": 1 "airTestMessage": "app_name": "telegram" "app_operation": "socks5" @@ -817,11 +567,12 @@ - "addItemList": - "ip": "1.1.1.1" - "port": "0-65535" + "port": "0-65535" +"deny-drop-only-IpAndApplication-socks5-airTest_data": - "opAction": "add" "returnData": 1 - "policyName": "security-telegram-deny-only-IpAndApplication-socks5-airTest-002" + "policyName": "telegram-deny-drop-socks5" "policyType": "tsg_security" "logType": "security_event" "action": "deny" @@ -856,11 +607,12 @@ - "addItemList": - "ip": "1.1.1.1" - "port": "0-65535" + "port": "0-65535" +"deny-rate_limit-only-IpAndApplication-socks5-airTest_data": - "opAction": "add" "returnData": 1 - "policyName": "security-telegram-deny-only-IpAndApplication-socks5-airTest-003" + "policyName": "telegram-deny-rate-socks5" "policyType": "tsg_security" "logType": "security_event" "action": "deny" @@ -896,17 +648,17 @@ - "addItemList": - "ip": "1.1.1.1" - "port": "0-65535" + "port": "0-65535" +"deny-tamper-only-IpAndApplication-socks5-airTest_data": - - "opAction": "update" + "opAction": "add" "returnData": 1 - "policyName": "security-telegram-deny-only-IpAndApplication-socks5-airTest-004" + "policyName": "telegram-deny-tamper-socks5" "policyType": "tsg_security" "logType": "security_event" "action": "deny" "method": "tamper" "isGre": 0 - "isEdit": 1 "logCapture": 1 "captureDepth": 28709 "userTags": "" @@ -943,7 +695,7 @@ - "opAction": "add" "returnData": 1 - "policyName": "security-telegram-monitor-only-IpAndApplication-socks5-airTest-001" + "policyName": "telegram-monitor-socks5" "policyType": "tsg_security" "logType": "security_event" "action": "monitor" @@ -956,7 +708,6 @@ "doBlacklist": 0 "doLog": 1 "isApp": 1 - "isOpen": 1 "airTestMessage": "app_name": "telegram" "app_operation": "socks5" @@ -987,7 +738,7 @@ - "opAction": "add" "returnData": 1 - "policyName": "security-telegram-allow-only-IpAndApplication-MTPROTO-airTest-001" + "policyName": "telegram-allow-MTPROTO" "policyType": "tsg_security" "logType": "security_event" "action": "allow" @@ -996,7 +747,6 @@ "doBlacklist": 0 "doLog": 1 "isApp": 1 - "isOpen": 1 "airTestMessage": "app_name": "telegram" "app_operation": "MTPROTO" @@ -1023,11 +773,11 @@ - "ip": "1.1.1.1" "port": "0-65535" -"deny-only-IpAndApplication-MTPROTO-airTest_data": +"deny-default-only-IpAndApplication-MTPROTO-airTest_data": - "opAction": "add" "returnData": 1 - "policyName": "security-telegram-deny-only-IpAndApplication-MTPROTO-airTest-001" + "policyName": "telegram-deny-default-MTPROTO" "policyType": "tsg_security" "logType": "security_event" "action": "deny" @@ -1037,7 +787,6 @@ "doBlacklist": 0 "doLog": 1 "isApp": 1 - "isOpen": 1 "logCapture": 1 "captureDepth": 33592 "airTestMessage": @@ -1065,17 +814,17 @@ - "addItemList": - "ip": "1.1.1.1" - "port": "0-65535" + "port": "0-65535" +"deny-drop-only-IpAndApplication-MTPROTO-airTest_data": - - "opAction": "update" + "opAction": "add" "returnData": 1 - "policyName": "security-telegram-deny-only-IpAndApplication-MTPROTO-airTest-002" + "policyName": "telegram-deny-drop-MTPROTO" "policyType": "tsg_security" "logType": "security_event" "action": "deny" "method": "drop" "isGre": 0 - "isEdit": 1 "userTags": "" "doBlacklist": 0 "doLog": 1 @@ -1105,11 +854,12 @@ - "addItemList": - "ip": "1.1.1.1" - "port": "0-65535" + "port": "0-65535" +"deny-rate_limit-only-IpAndApplication-MTPROTO-airTest_data": - "opAction": "add" "returnData": 1 - "policyName": "security-telegram-deny-only-IpAndApplication-MTPROTO-airTest-003" + "policyName": "telegram-deny-rate-MTPROTO" "policyType": "tsg_security" "logType": "security_event" "action": "deny" @@ -1145,11 +895,12 @@ - "addItemList": - "ip": "1.1.1.1" - "port": "0-65535" + "port": "0-65535" +"deny-tamper-only-IpAndApplication-MTPROTO-airTest_data": - "opAction": "add" "returnData": 1 - "policyName": "security-telegram-deny-only-IpAndApplication-MTPROTO-airTest-004" + "policyName": "telegram-deny-tamper-MTPROTO" "policyType": "tsg_security" "logType": "security_event" "action": "deny" @@ -1189,7 +940,7 @@ - "opAction": "add" "returnData": 1 - "policyName": "security-telegram-monitor-only-IpAndApplication-MTPROTO-airTest-001" + "policyName": "telegram-monitor-MTPROTO" "policyType": "tsg_security" "logType": "security_event" "action": "monitor" @@ -1202,7 +953,6 @@ "doBlacklist": 0 "doLog": 1 "isApp": 1 - "isOpen": 1 "airTestMessage": "app_name": "telegram" "app_operation": "MTPROTO" diff --git a/other/data/security/tor/tor-airtest-data.yaml b/other/data/security/tor/tor-airtest-data.yaml new file mode 100644 index 0000000..6ce031d --- /dev/null +++ b/other/data/security/tor/tor-airtest-data.yaml @@ -0,0 +1,332 @@ +#注意keywordArray下的关键字必须为数组形式 +"allow-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "security-torvpn-allow-wholeProcess" + "policyType": "tsg_security" + "logType": "security_event" + "action": "allow" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "connectVpn": 1 + "airTestMessage": + "app_name": "tor" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "tor" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "tor" + "appIdObjects": + - "tor" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" + - + "opAction": "update" + "isEdit": 1 + "returnData": 1 + "policyName": "security-torvpn-allow-wholeProcess-update" + "policyType": "tsg_security" + "logType": "security_event" + "action": "allow" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "tor" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "tor" + "policyDesc": "autotest" + "effectiveRange": "default" + "userRegion": + "protocol": "tor" + "appIdObjects": + - "tor" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +#注意keywordArray下的关键字必须为数组形式 +"deny-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "security-torvpn-deny-visitWebsite-001" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "default" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "connectVpn": 1 + "airTestMessage": + "app_name": "tor" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "tor" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "tor" + "appIdObjects": + - "tor" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" + - + "opAction": "update" + "isEdit": 1 + "returnData": 1 + "policyName": "security-torvpn-deny-visitWebsite-002" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "drop" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "tor" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "tor" + "policyDesc": "autotest" + "effectiveRange": "default" + "logCapture": 1 + "captureDepth": 47165 + "userRegion": + "protocol": "tor" + "appIdObjects": + - "tor" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" + - + "opAction": "add" + "returnData": 1 + "policyName": "security-torvpn-deny-visitWebsite-003" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "rate_limit" + "bps": 28 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "tor" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "tor" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "tor" + "appIdObjects": + - "tor" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" + - + "opAction": "update" + "isEdit": 1 + "returnData": 1 + "policyName": "security-torvpn-deny-visitWebsite-004" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "tamper" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "tor" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "tor" + "policyDesc": "autotest" + "effectiveRange": "default" + "logCapture": 1 + "captureDepth": 46850 + "userRegion": + "protocol": "tor" + "appIdObjects": + - "tor" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +#注意keywordArray下的关键字必须为数组形式 +"monitor-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "security-torvpn-monitor-visitWebsite" + "policyType": "tsg_security" + "logType": "security_event" + "action": "monitor" + "packet_mirror": + "enable": 0 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "connectVpn": 1 + "airTestMessage": + "app_name": "tor" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "tor" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "tor" + "appIdObjects": + - "tor" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" + - + "opAction": "update" + "isEdit": 1 + "returnData": 1 + "policyName": "security-torvpn-monitor-visitWebsite-update" + "policyType": "tsg_security" + "logType": "security_event" + "action": "monitor" + "packet_mirror": + "enable": 0 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "tor" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "tor" + "policyDesc": "autotest" + "effectiveRange": "default" + "logCapture": 1 + "captureDepth": 41450 + "userRegion": + "protocol": "tor" + "appIdObjects": + - "tor" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535"
\ No newline at end of file diff --git a/other/data/security/turbovpn_mm/turbovpn_mm-airtest-data.yaml b/other/data/security/turbovpn_mm/turbovpn_mm-airtest-data.yaml new file mode 100644 index 0000000..90038a6 --- /dev/null +++ b/other/data/security/turbovpn_mm/turbovpn_mm-airtest-data.yaml @@ -0,0 +1,338 @@ +#注意keywordArray下的关键字必须为数组形式 +"allow-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "turbovpn-allow-visitWebsite" + "policyType": "tsg_security" + "logType": "security_event" + "action": "allow" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "connectVpn": 1 + "airTestMessage": + "app_name": "TurboVPN_mm" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "TurboVPN_mm" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "turbovpn_mm" + "appIdObjects": + - "turbovpn_mm" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" + - + "opAction": "update" + "isEdit": 1 + "returnData": 1 + "policyName": "turbovpn-allow-visitWebsite" + "policyType": "tsg_security" + "logType": "security_event" + "action": "allow" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "connectVpn": 1 + "airTestMessage": + "app_name": "TurboVPN_mm" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "TurboVPN_mm" + "policyDesc": "autotest" + "effectiveRange": "default" + "userRegion": + "protocol": "turbovpn_mm" + "appIdObjects": + - "turbovpn_mm" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +#注意keywordArray下的关键字必须为数组形式 +"deny-default-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "turbovpn-deny-default-visitWebsite" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "default" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "connectVpn": 1 + "airTestMessage": + "app_name": "TurboVPN_mm" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "TurboVPN_mm" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "turbovpn_mm" + "appIdObjects": + - "turbovpn_mm" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-drop-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "turbovpn-deny-drop-visitWebsite" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "drop" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "connectVpn": 1 + "airTestMessage": + "app_name": "TurboVPN_mm" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "TurboVPN_mm" + "policyDesc": "autotest" + "effectiveRange": "default" + "logCapture": 1 + "captureDepth": 41656 + "userRegion": + "protocol": "turbovpn_mm" + "appIdObjects": + - "turbovpn_mm" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-rate_limit-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "turbovpn-deny-rate-visitWebsite" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "rate_limit" + "bps": 32 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "connectVpn": 1 + "airTestMessage": + "app_name": "TurboVPN_mm" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "TurboVPN_mm" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "turbovpn_mm" + "appIdObjects": + - "turbovpn_mm" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-tamper-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "turbovpn-deny-tamper-visitWebsite" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "tamper" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "connectVpn": 1 + "airTestMessage": + "app_name": "TurboVPN_mm" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "TurboVPN_mm" + "policyDesc": "autotest" + "effectiveRange": "default" + "logCapture": 1 + "captureDepth": 49865 + "userRegion": + "protocol": "turbovpn_mm" + "appIdObjects": + - "turbovpn_mm" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +#注意keywordArray下的关键字必须为数组形式 +"monitor-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "turbovpn_mm-monitor-visitWebsite" + "policyType": "tsg_security" + "logType": "security_event" + "action": "monitor" + "packet_mirror": + "enable": 0 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "connectVpn": 1 + "airTestMessage": + "app_name": "TurboVPN_mm" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "TurboVPN_mm" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "turbovpn_mm" + "appIdObjects": + - "turbovpn_mm" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" + - + "opAction": "update" + "isEdit": 1 + "returnData": 1 + "policyName": "turbovpn_mm-monitor-visitWebsite" + "policyType": "tsg_security" + "logType": "security_event" + "action": "monitor" + "packet_mirror": + "enable": 0 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "connectVpn": 1 + "isApp": 1 + "airTestMessage": + "app_name": "TurboVPN_mm" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "TurboVPN_mm" + "policyDesc": "autotest" + "effectiveRange": "default" + "logCapture": 1 + "captureDepth": 47810 + "userRegion": + "protocol": "turbovpn_mm" + "appIdObjects": + - "turbovpn_mm" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535"
\ No newline at end of file diff --git a/other/data/security/twitter/twitter-airTest-data.yaml b/other/data/security/twitter/twitter-airTest-data.yaml new file mode 100644 index 0000000..136a9b4 --- /dev/null +++ b/other/data/security/twitter/twitter-airTest-data.yaml @@ -0,0 +1,747 @@ +#注意keywordArray下的关键字必须为数组形式 +"allow-only-IpAndApplication-sendMessage-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "twitter-allow-sendMessage" + "policyType": "tsg_security" + "logType": "security_event" + "action": "allow" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "twitter" + "app_operation": "sendMessage" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "twitter" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "twitter" + "appIdObjects": + - "twitter" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-default-only-IpAndApplication-sendMessage-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "twitter-deny-default-sendMessage" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "default" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "twitter" + "app_operation": "sendMessage" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "twitter" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "twitter" + "appIdObjects": + - "twitter" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-drop-only-IpAndApplication-sendMessage-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "twitter-deny-sendMessage" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "drop" + "isGre": 0 + "logCapture": 1 + "captureDepth": 25802 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "twitter" + "app_operation": "sendMessage" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "twitter" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "twitter" + "appIdObjects": + - "twitter" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-rate_limit-only-IpAndApplication-sendMessage-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "twitter-deny-rate-sendMessage" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "rate_limit" + "bps": 40 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "twitter" + "app_operation": "sendMessage" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "twitter" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "twitter" + "appIdObjects": + - "twitter" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-tamper-only-IpAndApplication-sendMessage-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "twitter-deny-tamper-sendMessage" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "tamper" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "twitter" + "app_operation": "sendMessage" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "twitter" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "twitter" + "appIdObjects": + - "twitter" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"monitor-only-IpAndApplication-sendMessage-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "twitter-monitor-sendMessage" + "policyType": "tsg_security" + "logType": "security_event" + "action": "monitor" + "packet_mirror": + "enable": 0 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "logCapture": 1 + "captureDepth": 29851 + "airTestMessage": + "app_name": "twitter" + "app_operation": "sendMessage" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "twitter" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "twitter" + "appIdObjects": + - "twitter" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"allow-only-IpAndApplication-sendDynamic-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "twitter-allow-sendDynamic" + "policyType": "tsg_security" + "logType": "security_event" + "action": "allow" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "twitter" + "app_operation": "sendDynamic" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "twitter" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "twitter" + "appIdObjects": + - "twitter" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-default-only-IpAndApplication-sendDynamic-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "twitter-deny-default-sendDynamic" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "default" + "isGre": 0 + "logCapture": 1 + "captureDepth": 41567 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "twitter" + "app_operation": "sendDynamic" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "twitter" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "twitter" + "appIdObjects": + - "twitter" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-drop-only-IpAndApplication-sendDynamic-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "twitter-deny-drop-sendDynamic" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "drop" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "twitter" + "app_operation": "sendDynamic" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "twitter" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "twitter" + "appIdObjects": + - "twitter" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-rate_limit-only-IpAndApplication-sendDynamic-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "twitter-deny-rate-sendDynamic" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "rate_limit" + "bps": 30 + "isGre": 0 + "logCapture": 1 + "captureDepth": 39856 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "twitter" + "app_operation": "sendDynamic" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "twitter" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "twitter" + "appIdObjects": + - "twitter" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-tamper-only-IpAndApplication-sendDynamic-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "twitter-deny-tamper-sendDynamic" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "tamper" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "twitter" + "app_operation": "sendDynamic" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "twitter" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "twitter" + "appIdObjects": + - "twitter" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"monitor-only-IpAndApplication-sendDynamic-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "twitter-monitor-sendDynamic" + "policyType": "tsg_security" + "logType": "security_event" + "action": "monitor" + "packet_mirror": + "enable": 0 + "isGre": 0 + "logCapture": 1 + "captureDepth": 25698 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "twitter" + "app_operation": "sendDynamic" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "twitter" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "twitter" + "appIdObjects": + - "twitter" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"allow-only-IpAndApplication-search-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "twitter-allow-search" + "policyType": "tsg_security" + "logType": "security_event" + "action": "allow" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "twitter" + "app_operation": "search" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "twitter" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "twitter" + "appIdObjects": + - "twitter" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-default-only-IpAndApplication-search-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "twitter-deny-default-search" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "default" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "twitter" + "app_operation": "search" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "twitter" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "twitter" + "appIdObjects": + - "twitter" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-default-only-IpAndApplication-search-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "twitter-deny-search" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "drop" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "twitter" + "app_operation": "search" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "twitter" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "twitter" + "appIdObjects": + - "twitter" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-default-only-IpAndApplication-search-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "twitter-deny-search" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "rate_limit" + "bps": 65 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "twitter" + "app_operation": "search" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "twitter" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "twitter" + "appIdObjects": + - "twitter" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-tamper-only-IpAndApplication-search-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "twitter-deny-search" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "tamper" + "isGre": 0 + "logCapture": 1 + "captureDepth": 29854 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "twitter" + "app_operation": "search" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "twitter" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "twitter" + "appIdObjects": + - "twitter" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"monitor-only-IpAndApplication-search-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "twitter-monitor-search" + "policyType": "tsg_security" + "logType": "security_event" + "action": "monitor" + "packet_mirror": + "enable": 0 + "isGre": 0 + "logCapture": 1 + "captureDepth": 39865 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "isLogin": 1 + "airTestMessage": + "app_name": "twitter" + "app_operation": "search" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "twitter" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "twitter" + "appIdObjects": + - "twitter" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535"
\ No newline at end of file diff --git a/other/data/security/ugvpn/ugvpn-airtest-data.yaml b/other/data/security/ugvpn/ugvpn-airtest-data.yaml new file mode 100644 index 0000000..27ef1ff --- /dev/null +++ b/other/data/security/ugvpn/ugvpn-airtest-data.yaml @@ -0,0 +1,333 @@ +#注意keywordArray下的关键字必须为数组形式 +"allow-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "ugvpn-allow-wholeProcess" + "policyType": "tsg_security" + "logType": "security_event" + "action": "allow" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "connectVpn": 1 + "airTestMessage": + "app_name": "UGVPN" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "UGVPN" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "ugvpn" + "appIdObjects": + - "ugvpn" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" + - + "opAction": "update" + "isEdit": 1 + "returnData": 1 + "policyName": "ugvpn-allow-wholeProcess-update" + "policyType": "tsg_security" + "logType": "security_event" + "action": "allow" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "UGVPN" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "UGVPN" + "policyDesc": "autotest" + "effectiveRange": "default" + "userRegion": + "protocol": "ugvpn" + "appIdObjects": + - "ugvpn" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +#注意keywordArray下的关键字必须为数组形式 +"deny-default-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "ugvpn-deny-default-visitWebsite" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "default" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "connectVpn": 1 + "airTestMessage": + "app_name": "UGVPN" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "UGVPN" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "ugvpn" + "appIdObjects": + - "ugvpn" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-drop-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "ugvpn-deny-drop-visitWebsite" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "drop" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "UGVPN" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "UGVPN" + "policyDesc": "autotest" + "effectiveRange": "default" + "logCapture": 1 + "captureDepth": 46315 + "userRegion": + "protocol": "ugvpn" + "appIdObjects": + - "ugvpn" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-rate_limit-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "ugvpn-deny-rate-visitWebsite" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "rate_limit" + "bps": 55 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "UGVPN" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "UGVPN" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "ugvpn" + "appIdObjects": + - "ugvpn" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-tamper-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "ugvpn-deny-tamper-visitWebsite" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "tamper" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "UGVPN" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "UGVPN" + "policyDesc": "autotest" + "effectiveRange": "default" + "logCapture": 1 + "captureDepth": 41245 + "userRegion": + "protocol": "ugvpn" + "appIdObjects": + - "ugvpn" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +#注意keywordArray下的关键字必须为数组形式 +"monitor-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "ugvpn-monitor-visitWebsite" + "policyType": "tsg_security" + "logType": "security_event" + "action": "monitor" + "packet_mirror": + "enable": 0 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "connectVpn": 1 + "airTestMessage": + "app_name": "UGVPN" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "UGVPN" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "ugvpn" + "appIdObjects": + - "ugvpn" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" + - + "opAction": "update" + "isEdit": 1 + "returnData": 1 + "policyName": "ugvpn-monitor-visitWebsite-update" + "policyType": "tsg_security" + "logType": "security_event" + "action": "monitor" + "packet_mirror": + "enable": 0 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "UGVPN" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "UGVPN" + "policyDesc": "autotest" + "effectiveRange": "default" + "logCapture": 1 + "captureDepth": 49850 + "userRegion": + "protocol": "ugvpn" + "appIdObjects": + - "ugvpn" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535"
\ No newline at end of file diff --git a/other/data/security/urbanvpn/urbanvpn-airtest-data.yaml b/other/data/security/urbanvpn/urbanvpn-airtest-data.yaml new file mode 100644 index 0000000..51d11c1 --- /dev/null +++ b/other/data/security/urbanvpn/urbanvpn-airtest-data.yaml @@ -0,0 +1,338 @@ +#注意keywordArray下的关键字必须为数组形式 +"allow-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "urbanvpn-allow-wholeProcess" + "policyType": "tsg_security" + "logType": "security_event" + "action": "allow" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "connectVpn": 1 + "airTestMessage": + "app_name": "urbanVPN" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "urbanVPN" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "urbanvpn" + "appIdObjects": + - "urbanvpn" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" + - + "opAction": "update" + "isEdit": 1 + "returnData": 1 + "policyName": "urbanvpn-allow-wholeProcess-update" + "policyType": "tsg_security" + "logType": "security_event" + "action": "allow" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "connectVpn": 1 + "airTestMessage": + "app_name": "urbanVPN" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "urbanVPN" + "policyDesc": "autotest" + "effectiveRange": "default" + "userRegion": + "protocol": "urbanvpn" + "appIdObjects": + - "urbanvpn" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +#注意keywordArray下的关键字必须为数组形式 +"deny-default-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "urbanvpn-deny-default-visitWebsite" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "default" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "connectVpn": 1 + "airTestMessage": + "app_name": "urbanVPN" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "urbanVPN" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "urbanvpn" + "appIdObjects": + - "urbanvpn" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-drop-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "urbanvpn-deny-drop-visitWebsite" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "drop" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "connectVpn": 1 + "airTestMessage": + "app_name": "urbanVPN" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "urbanVPN" + "policyDesc": "autotest" + "effectiveRange": "default" + "logCapture": 1 + "captureDepth": 48465 + "userRegion": + "protocol": "urbanvpn" + "appIdObjects": + - "urbanvpn" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-rate_limit-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "urbanvpn-deny-rate-visitWebsite" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "rate_limit" + "bps": 70 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "connectVpn": 1 + "airTestMessage": + "app_name": "urbanVPN" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "urbanVPN" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "urbanvpn" + "appIdObjects": + - "urbanvpn" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-tamper-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "urbanvpn-deny-tamper-visitWebsite" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "tamper" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "connectVpn": 1 + "airTestMessage": + "app_name": "urbanVPN" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "urbanVPN" + "policyDesc": "autotest" + "effectiveRange": "default" + "logCapture": 1 + "captureDepth": 46550 + "userRegion": + "protocol": "urbanvpn" + "appIdObjects": + - "urbanvpn" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +#注意keywordArray下的关键字必须为数组形式 +"monitor-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "urbanvpn-monitor-visitWebsite" + "policyType": "tsg_security" + "logType": "security_event" + "action": "monitor" + "packet_mirror": + "enable": 0 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "connectVpn": 1 + "airTestMessage": + "app_name": "urbanVPN" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "urbanVPN" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "urbanvpn" + "appIdObjects": + - "urbanvpn" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" + - + "opAction": "update" + "isEdit": 1 + "returnData": 1 + "policyName": "urbanvpn-monitor-visitWebsite-update" + "policyType": "tsg_security" + "logType": "security_event" + "action": "monitor" + "packet_mirror": + "enable": 0 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "connectVpn": 1 + "airTestMessage": + "app_name": "urbanVPN" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "urbanVPN" + "policyDesc": "autotest" + "effectiveRange": "default" + "logCapture": 1 + "captureDepth": 46845 + "userRegion": + "protocol": "urbanvpn" + "appIdObjects": + - "urbanvpn" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535"
\ No newline at end of file diff --git a/other/data/security/v4c/v4c-airtest-data.yaml b/other/data/security/v4c/v4c-airtest-data.yaml new file mode 100644 index 0000000..bbbebe5 --- /dev/null +++ b/other/data/security/v4c/v4c-airtest-data.yaml @@ -0,0 +1,333 @@ +#注意keywordArray下的关键字必须为数组形式 +"allow-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "v4c-allow-wholeProcess" + "policyType": "tsg_security" + "logType": "security_event" + "action": "allow" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "connectVpn": 1 + "airTestMessage": + "app_name": "V4C" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "V4C" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "v4c" + "appIdObjects": + - "v4c" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" + - + "opAction": "update" + "isEdit": 1 + "returnData": 1 + "policyName": "v4c-allow-wholeProcess-update" + "policyType": "tsg_security" + "logType": "security_event" + "action": "allow" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "V4C" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "V4C" + "policyDesc": "autotest" + "effectiveRange": "default" + "userRegion": + "protocol": "v4c" + "appIdObjects": + - "v4c" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +#注意keywordArray下的关键字必须为数组形式 +"deny-default-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "v4c-deny-default-visitWebsite-001" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "default" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "connectVpn": 1 + "airTestMessage": + "app_name": "V4C" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "V4C" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "v4c" + "appIdObjects": + - "v4c" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-drop-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "v4c-deny-drop-visitWebsite" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "drop" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "V4C" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "V4C" + "policyDesc": "autotest" + "effectiveRange": "default" + "logCapture": 1 + "captureDepth": 47165 + "userRegion": + "protocol": "v4c" + "appIdObjects": + - "v4c" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-rate_limit-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "v4c-deny-rate-visitWebsite" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "rate_limit" + "bps": 28 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "V4C" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "V4C" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "v4c" + "appIdObjects": + - "v4c" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-tamper-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "v4c-deny--tampervisitWebsite" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "tamper" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "V4C" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "V4C" + "policyDesc": "autotest" + "effectiveRange": "default" + "logCapture": 1 + "captureDepth": 46850 + "userRegion": + "protocol": "v4c" + "appIdObjects": + - "v4c" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +#注意keywordArray下的关键字必须为数组形式 +"monitor-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "v4c-monitor-visitWebsite" + "policyType": "tsg_security" + "logType": "security_event" + "action": "monitor" + "packet_mirror": + "enable": 0 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "connectVpn": 1 + "airTestMessage": + "app_name": "V4C" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "V4C" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "v4c" + "appIdObjects": + - "v4c" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" + - + "opAction": "update" + "isEdit": 1 + "returnData": 1 + "policyName": "v4c-monitor-visitWebsite-update" + "policyType": "tsg_security" + "logType": "security_event" + "action": "monitor" + "packet_mirror": + "enable": 0 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "V4C" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "V4C" + "policyDesc": "autotest" + "effectiveRange": "default" + "logCapture": 1 + "captureDepth": 41450 + "userRegion": + "protocol": "v4c" + "appIdObjects": + - "v4c" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535"
\ No newline at end of file diff --git a/other/data/security/vpnlat/vpnlat-airtest-data.yaml b/other/data/security/vpnlat/vpnlat-airtest-data.yaml new file mode 100644 index 0000000..1c668df --- /dev/null +++ b/other/data/security/vpnlat/vpnlat-airtest-data.yaml @@ -0,0 +1,333 @@ +#注意keywordArray下的关键字必须为数组形式 +"allow-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "vpnlat-allow-wholeProcess" + "policyType": "tsg_security" + "logType": "security_event" + "action": "allow" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "connectVpn": 1 + "airTestMessage": + "app_name": "VPNlat" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "VPNlat" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "vpnlat" + "appIdObjects": + - "vpnlat" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" + - + "opAction": "update" + "isEdit": 1 + "returnData": 1 + "policyName": "vpnlat-allow-wholeProcess-update" + "policyType": "tsg_security" + "logType": "security_event" + "action": "allow" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "VPNlat" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "VPNlat" + "policyDesc": "autotest" + "effectiveRange": "default" + "userRegion": + "protocol": "vpnlat" + "appIdObjects": + - "vpnlat" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +#注意keywordArray下的关键字必须为数组形式 +"deny-default-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "vpnlat-deny-default-visitWebsite" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "default" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "connectVpn": 1 + "airTestMessage": + "app_name": "VPNlat" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "VPNlat" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "vpnlat" + "appIdObjects": + - "vpnlat" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-drop-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "vpnlat-deny-drop-visitWebsite" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "drop" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "VPNlat" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "VPNlat" + "policyDesc": "autotest" + "effectiveRange": "default" + "logCapture": 1 + "captureDepth": 47650 + "userRegion": + "protocol": "vpnlat" + "appIdObjects": + - "vpnlat" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-rate_limit-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "vpnlat-deny-rate-visitWebsite" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "rate_limit" + "bps": 47 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "VPNlat" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "VPNlat" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "vpnlat" + "appIdObjects": + - "vpnlat" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-tamper-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "vpnlat-deny-tamper-visitWebsite" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "tamper" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "VPNlat" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "VPNlat" + "policyDesc": "autotest" + "effectiveRange": "default" + "logCapture": 1 + "captureDepth": 46855 + "userRegion": + "protocol": "vpnlat" + "appIdObjects": + - "vpnlat" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +#注意keywordArray下的关键字必须为数组形式 +"monitor-only-IpAndApplication-visitWebsite_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "vpnlat-monitor-visitWebsite" + "policyType": "tsg_security" + "logType": "security_event" + "action": "monitor" + "packet_mirror": + "enable": 0 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "connectVpn": 1 + "airTestMessage": + "app_name": "VPNlat" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "VPNlat" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "vpnlat" + "appIdObjects": + - "vpnlat" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" + - + "opAction": "update" + "isEdit": 1 + "returnData": 1 + "policyName": "vpnlat-monitor-visitWebsite-update" + "policyType": "tsg_security" + "logType": "security_event" + "action": "monitor" + "packet_mirror": + "enable": 0 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "VPNlat" + "app_operation": "visitWebsite" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "VPNlat" + "policyDesc": "autotest" + "effectiveRange": "default" + "logCapture": 1 + "captureDepth": 48260 + "userRegion": + "protocol": "vpnlat" + "appIdObjects": + - "vpnlat" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535"
\ No newline at end of file diff --git a/other/data/security/wechat/wechat-airTest-data.yaml b/other/data/security/wechat/wechat-airTest-data.yaml index ce3c39b..d66baa3 100644 --- a/other/data/security/wechat/wechat-airTest-data.yaml +++ b/other/data/security/wechat/wechat-airTest-data.yaml @@ -3,7 +3,7 @@ - "opAction": "add" "returnData": 1 - "policyName": "security-wechat-allow-only-IpAndApplication-sendMessage-airTest-001" + "policyName": "wechat-allow-sendMessage" "policyType": "tsg_security" "logType": "security_event" "action": "allow" @@ -39,11 +39,11 @@ - "ip": "1.1.1.1" "port": "0-65535" -"deny-only-IpAndApplication-sendMessage-airTest_data": +"deny-default-only-IpAndApplication-sendMessage-airTest_data": - "opAction": "add" "returnData": 1 - "policyName": "security-wechat-deny-only-IpAndApplication-sendMessage-airTest-001" + "policyName": "wechat-deny-default-sendMessage" "policyType": "tsg_security" "logType": "security_event" "action": "deny" @@ -80,16 +80,16 @@ - "ip": "1.1.1.1" "port": "0-65535" +"deny-drop-only-IpAndApplication-sendMessage-airTest_data": - - "opAction": "update" + "opAction": "add" "returnData": 1 - "policyName": "security-wechat-deny-only-IpAndApplication-sendMessage-airTest-002" + "policyName": "wechat-deny-drop-sendMessage" "policyType": "tsg_security" "logType": "security_event" "action": "deny" "method": "drop" "isGre": 0 - "isEdit": 1 "logCapture": 1 "captureDepth": 29526 "userTags": "" @@ -121,11 +121,12 @@ - "addItemList": - "ip": "1.1.1.1" - "port": "0-65535" + "port": "0-65535" +"deny-rate_limit-only-IpAndApplication-sendMessage-airTest_data": - "opAction": "add" "returnData": 1 - "policyName": "security-wechat-deny-only-IpAndApplication-sendMessage-airTest-003" + "policyName": "wechat-deny-rate-sendMessage" "policyType": "tsg_security" "logType": "security_event" "action": "deny" @@ -161,11 +162,12 @@ - "addItemList": - "ip": "1.1.1.1" - "port": "0-65535" + "port": "0-65535" +"deny-tamper-only-IpAndApplication-sendMessage-airTest_data": - "opAction": "add" "returnData": 1 - "policyName": "security-wechat-deny-only-IpAndApplication-sendMessage-airTest-004" + "policyName": "wechat-deny-tamper-sendMessage" "policyType": "tsg_security" "logType": "security_event" "action": "deny" @@ -205,7 +207,7 @@ - "opAction": "add" "returnData": 1 - "policyName": "security-wechat-monitor-only-IpAndApplication-sendMessage-airTest-001" + "policyName": "wechat-monitor-sendMessage" "policyType": "tsg_security" "logType": "security_event" "action": "monitor" @@ -249,7 +251,7 @@ - "opAction": "add" "returnData": 1 - "policyName": "security-wechat-allow-only-IpAndApplication-sendDynamic-airTest-001" + "policyName": "wechat-allow-sendDynamic" "policyType": "tsg_security" "logType": "security_event" "action": "allow" @@ -285,11 +287,11 @@ - "ip": "1.1.1.1" "port": "0-65535" -"deny-only-IpAndApplication-sendDynamic-airTest_data": +"deny-default-only-IpAndApplication-sendDynamic-airTest_data": - "opAction": "add" "returnData": 1 - "policyName": "security-wechat-deny-only-IpAndApplication-sendDynamic-airTest-001" + "policyName": "wechat-deny-default-sendDynamic" "policyType": "tsg_security" "logType": "security_event" "action": "deny" @@ -326,16 +328,16 @@ - "ip": "1.1.1.1" "port": "0-65535" +"deny-drop-only-IpAndApplication-sendDynamic-airTest_data": - - "opAction": "update" + "opAction": "add" "returnData": 1 - "policyName": "security-wechat-deny-only-IpAndApplication-sendDynamic-airTest-002" + "policyName": "wechat-deny-drop-sendDynamic" "policyType": "tsg_security" "logType": "security_event" "action": "deny" "method": "drop" "isGre": 0 - "isEdit": 1 "userTags": "" "doBlacklist": 0 "doLog": 1 @@ -365,11 +367,12 @@ - "addItemList": - "ip": "1.1.1.1" - "port": "0-65535" + "port": "0-65535" +"deny-rate_limit-only-IpAndApplication-sendDynamic-airTest_data": - "opAction": "add" "returnData": 1 - "policyName": "security-wechat-deny-only-IpAndApplication-sendDynamic-airTest-003" + "policyName": "wechat-deny-rate-sendDynamic" "policyType": "tsg_security" "logType": "security_event" "action": "deny" @@ -408,10 +411,11 @@ - "ip": "1.1.1.1" "port": "0-65535" +"deny-tamper-only-IpAndApplication-sendDynamic-airTest_data": - "opAction": "add" "returnData": 1 - "policyName": "security-wechat-deny-only-IpAndApplication-sendDynamic-airTest-004" + "policyName": "wechat-deny-tamper-sendDynamic" "policyType": "tsg_security" "logType": "security_event" "action": "deny" @@ -451,7 +455,7 @@ - "opAction": "add" "returnData": 1 - "policyName": "security-wechat-monitor-only-IpAndApplication-sendDynamic-airTest-001" + "policyName": "wechat-monitor-sendDynamic" "policyType": "tsg_security" "logType": "security_event" "action": "monitor" @@ -495,7 +499,7 @@ - "opAction": "add" "returnData": 1 - "policyName": "security-wechat-allow-only-IpAndApplication-video-airTest-001" + "policyName": "wechat-allow-video" "policyType": "tsg_security" "logType": "security_event" "action": "allow" @@ -531,11 +535,11 @@ - "ip": "1.1.1.1" "port": "0-65535" -"deny-only-IpAndApplication-video-airTest_data": +"deny-default-only-IpAndApplication-video-airTest_data": - "opAction": "add" "returnData": 1 - "policyName": "security-wechat-deny-only-IpAndApplication-video-airTest-001" + "policyName": "wechat-deny-default-video" "policyType": "tsg_security" "logType": "security_event" "action": "deny" @@ -571,11 +575,12 @@ - "addItemList": - "ip": "1.1.1.1" - "port": "0-65535" + "port": "0-65535" +"deny-drop-only-IpAndApplication-video-airTest_data": - "opAction": "add" "returnData": 1 - "policyName": "security-wechat-deny-only-IpAndApplication-video-airTest-002" + "policyName": "wechat-deny-drop-video" "policyType": "tsg_security" "logType": "security_event" "action": "deny" @@ -610,18 +615,18 @@ - "addItemList": - "ip": "1.1.1.1" - "port": "0-65535" + "port": "0-65535" +"deny-rate_limit-only-IpAndApplication-video-airTest_data": - - "opAction": "update" + "opAction": "add" "returnData": 1 - "policyName": "security-wechat-deny-only-IpAndApplication-video-airTest-003" + "policyName": "wechat-deny-rate-video" "policyType": "tsg_security" "logType": "security_event" "action": "deny" "method": "rate_limit" "bps": 41 "isGre": 0 - "isEdit": 1 "logCapture": 1 "captureDepth": 48415 "userTags": "" @@ -654,10 +659,11 @@ - "ip": "1.1.1.1" "port": "0-65535" +"deny-tamper-only-IpAndApplication-video-airTest_data": - "opAction": "add" "returnData": 1 - "policyName": "security-wechat-deny-only-IpAndApplication-video-airTest-004" + "policyName": "wechat-deny-tamper-video" "policyType": "tsg_security" "logType": "security_event" "action": "deny" @@ -697,7 +703,7 @@ - "opAction": "add" "returnData": 1 - "policyName": "security-wechat-monitor-only-IpAndApplication-video-airTest-001" + "policyName": "wechat-monitor-video" "policyType": "tsg_security" "logType": "security_event" "action": "monitor" @@ -741,7 +747,7 @@ - "opAction": "add" "returnData": 1 - "policyName": "security-wechat-allow-only-IpAndApplication-search-airTest-001" + "policyName": "wechat-allow-search" "policyType": "tsg_security" "logType": "security_event" "action": "allow" @@ -777,11 +783,11 @@ - "ip": "1.1.1.1" "port": "0-65535" -"deny-only-IpAndApplication-search-airTest_data": +"deny-default-only-IpAndApplication-search-airTest_data": - "opAction": "add" "returnData": 1 - "policyName": "security-wechat-deny-only-IpAndApplication-search-airTest-001" + "policyName": "wechat-deny-default-search" "policyType": "tsg_security" "logType": "security_event" "action": "deny" @@ -817,11 +823,12 @@ - "addItemList": - "ip": "1.1.1.1" - "port": "0-65535" + "port": "0-65535" +"deny-drop-only-IpAndApplication-search-airTest_data": - "opAction": "add" "returnData": 1 - "policyName": "security-wechat-deny-only-IpAndApplication-search-airTest-002" + "policyName": "wechat-deny-drop-search" "policyType": "tsg_security" "logType": "security_event" "action": "deny" @@ -856,11 +863,12 @@ - "addItemList": - "ip": "1.1.1.1" - "port": "0-65535" + "port": "0-65535" +"deny-rate_limit-only-IpAndApplication-search-airTest_data": - "opAction": "add" "returnData": 1 - "policyName": "security-wechat-deny-only-IpAndApplication-search-airTest-003" + "policyName": "wechat-deny-rate-search" "policyType": "tsg_security" "logType": "security_event" "action": "deny" @@ -896,17 +904,17 @@ - "addItemList": - "ip": "1.1.1.1" - "port": "0-65535" + "port": "0-65535" +"deny-tamper-only-IpAndApplication-search-airTest_data": - - "opAction": "update" + "opAction": "add" "returnData": 1 - "policyName": "security-wechat-deny-only-IpAndApplication-search-airTest-004" + "policyName": "wechat-deny-tamper-search" "policyType": "tsg_security" "logType": "security_event" "action": "deny" "method": "tamper" "isGre": 0 - "isEdit": 1 "logCapture": 1 "captureDepth": 38710 "userTags": "" @@ -943,7 +951,7 @@ - "opAction": "add" "returnData": 1 - "policyName": "security-wechat-monitor-only-IpAndApplication-search-airTest-001" + "policyName": "wechat-monitor-search" "policyType": "tsg_security" "logType": "security_event" "action": "monitor" @@ -987,7 +995,7 @@ - "opAction": "add" "returnData": 1 - "policyName": "security-wechat-allow-only-IpAndApplication-talkLook-airTest-001" + "policyName": "wechat-allow-talkLook" "policyType": "tsg_security" "logType": "security_event" "action": "allow" @@ -1023,11 +1031,11 @@ - "ip": "1.1.1.1" "port": "0-65535" -"deny-only-IpAndApplication-talkLook-airTest_data": +"deny-default-only-IpAndApplication-talkLook-airTest_data": - "opAction": "add" "returnData": 1 - "policyName": "security-wechat-deny-only-IpAndApplication-talkLook-airTest-001" + "policyName": "wechat-deny-default-talkLook" "policyType": "tsg_security" "logType": "security_event" "action": "deny" @@ -1066,16 +1074,16 @@ - "ip": "1.1.1.1" "port": "0-65535" +"deny-drop-only-IpAndApplication-talkLook-airTest_data": - - "opAction": "update" + "opAction": "add" "returnData": 1 - "policyName": "security-wechat-deny-only-IpAndApplication-talkLook-airTest-002" + "policyName": "wechat-deny-drop-talkLook" "policyType": "tsg_security" "logType": "security_event" "action": "deny" "method": "drop" "isGre": 0 - "isEdit": 1 "userTags": "" "doBlacklist": 0 "doLog": 1 @@ -1105,11 +1113,53 @@ - "addItemList": - "ip": "1.1.1.1" - "port": "0-65535" + "port": "0-65535" +"deny-rate_limit-only-IpAndApplication-talkLook-airTest_data": - "opAction": "add" "returnData": 1 - "policyName": "security-wechat-deny-only-IpAndApplication-talkLook-airTest-004" + "policyName": "wechat-deny-rate_limit-talkLook" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "rate_limit" + "bps": 55 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "wechat" + "app_operation": "talkLook" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "wechat" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "wechat" + "appIdObjects": + - "wechat" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-tamper-only-IpAndApplication-talkLook-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "wechat-deny-rate-talkLook" "policyType": "tsg_security" "logType": "security_event" "action": "deny" @@ -1144,12 +1194,12 @@ - "addItemList": - "ip": "1.1.1.1" - "port": "0-65535" + "port": "0-65535" "monitor-only-IpAndApplication-talkLook-airTest_data": - "opAction": "add" "returnData": 1 - "policyName": "security-wechat-monitor-only-IpAndApplication-talkLook-airTest-001" + "policyName": "wechat-monitor-talkLook" "policyType": "tsg_security" "logType": "security_event" "action": "monitor" @@ -1193,7 +1243,7 @@ - "opAction": "add" "returnData": 1 - "policyName": "security-wechat-allow-only-IpAndApplication-voiceCalls-airTest-001" + "policyName": "wechat-allow-voiceCalls" "policyType": "tsg_security" "logType": "security_event" "action": "allow" @@ -1229,11 +1279,11 @@ - "ip": "1.1.1.1" "port": "0-65535" -"deny-only-IpAndApplication-voiceCalls-airTest_data": +"deny-default-only-IpAndApplication-voiceCalls-airTest_data": - "opAction": "add" "returnData": 1 - "policyName": "security-wechat-deny-only-IpAndApplication-voiceCalls-airTest-001" + "policyName": "wechat-deny-default-voiceCalls" "policyType": "tsg_security" "logType": "security_event" "action": "deny" @@ -1270,16 +1320,16 @@ - "ip": "1.1.1.1" "port": "0-65535" +"deny-drop-only-IpAndApplication-voiceCalls-airTest_data": - - "opAction": "update" + "opAction": "add" "returnData": 1 - "policyName": "security-wechat-deny-only-IpAndApplication-voiceCalls-airTest-002" + "policyName": "wechat-deny-drop-voiceCalls" "policyType": "tsg_security" "logType": "security_event" "action": "deny" "method": "drop" "isGre": 0 - "isEdit": 1 "logCapture": 1 "captureDepth": 29988 "userTags": "" @@ -1311,11 +1361,12 @@ - "addItemList": - "ip": "1.1.1.1" - "port": "0-65535" + "port": "0-65535" +"deny-rate_limit-only-IpAndApplication-voiceCalls-airTest_data": - "opAction": "add" "returnData": 1 - "policyName": "security-wechat-deny-only-IpAndApplication-voiceCalls-airTest-003" + "policyName": "wechat-deny-rate-voiceCalls" "policyType": "tsg_security" "logType": "security_event" "action": "deny" @@ -1351,11 +1402,12 @@ - "addItemList": - "ip": "1.1.1.1" - "port": "0-65535" + "port": "0-65535" +"deny-tamper-only-IpAndApplication-voiceCalls-airTest_data": - "opAction": "add" "returnData": 1 - "policyName": "security-wechat-deny-only-IpAndApplication-voiceCalls-airTest-004" + "policyName": "wechat-deny-tamper-voiceCalls" "policyType": "tsg_security" "logType": "security_event" "action": "deny" @@ -1395,7 +1447,7 @@ - "opAction": "add" "returnData": 1 - "policyName": "security-wechat-monitor-only-IpAndApplication-voiceCalls-airTest-001" + "policyName": "wechat-monitor-voiceCalls" "policyType": "tsg_security" "logType": "security_event" "action": "monitor" @@ -1439,7 +1491,7 @@ - "opAction": "add" "returnData": 1 - "policyName": "security-wechat-allow-only-IpAndApplication-videoCall-airTest-001" + "policyName": "wechat-allow-videoCall" "policyType": "tsg_security" "logType": "security_event" "action": "allow" @@ -1475,11 +1527,11 @@ - "ip": "1.1.1.1" "port": "0-65535" -"deny-only-IpAndApplication-videoCall-airTest_data": +"deny-default-only-IpAndApplication-videoCall-airTest_data": - "opAction": "add" "returnData": 1 - "policyName": "security-wechat-deny-only-IpAndApplication-videoCall-airTest-001" + "policyName": "wechat-deny-default-videoCall" "policyType": "tsg_security" "logType": "security_event" "action": "deny" @@ -1515,17 +1567,17 @@ - "addItemList": - "ip": "1.1.1.1" - "port": "0-65535" + "port": "0-65535" +"deny-drop-only-IpAndApplication-videoCall-airTest_data": - - "opAction": "update" + "opAction": "add" "returnData": 1 - "policyName": "security-wechat-deny-only-IpAndApplication-videoCall-airTest-002" + "policyName": "wechat-deny-drop-videoCall" "policyType": "tsg_security" "logType": "security_event" "action": "deny" "method": "drop" "isGre": 0 - "isEdit": 1 "userTags": "" "doBlacklist": 0 "doLog": 1 @@ -1555,11 +1607,12 @@ - "addItemList": - "ip": "1.1.1.1" - "port": "0-65535" + "port": "0-65535" +"deny-rate_limit-only-IpAndApplication-videoCall-airTest_data": - "opAction": "add" "returnData": 1 - "policyName": "security-wechat-deny-only-IpAndApplication-videoCall-airTest-003" + "policyName": "wechat-deny-rate-videoCall" "policyType": "tsg_security" "logType": "security_event" "action": "deny" @@ -1597,11 +1650,12 @@ - "addItemList": - "ip": "1.1.1.1" - "port": "0-65535" + "port": "0-65535" +"deny-tamper-only-IpAndApplication-videoCall-airTest_data": - "opAction": "add" "returnData": 1 - "policyName": "security-wechat-deny-only-IpAndApplication-videoCall-airTest-004" + "policyName": "wechat-deny-tamper-videoCall" "policyType": "tsg_security" "logType": "security_event" "action": "deny" @@ -1641,7 +1695,7 @@ - "opAction": "add" "returnData": 1 - "policyName": "security-wechat-monitor-only-IpAndApplication-videoCall-airTest-001" + "policyName": "wechat-monitor-videoCall" "policyType": "tsg_security" "logType": "security_event" "action": "monitor" diff --git a/other/data/security/whatsapp/whatsapp-airTest-data.yaml b/other/data/security/whatsapp/whatsapp-airTest-data.yaml new file mode 100644 index 0000000..ab90174 --- /dev/null +++ b/other/data/security/whatsapp/whatsapp-airTest-data.yaml @@ -0,0 +1,981 @@ +#注意keywordArray下的关键字必须为数组形式 +"allow-only-IpAndApplication-sendMessage-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "whatsapp-allow-sendMessage-001" + "policyType": "tsg_security" + "logType": "security_event" + "action": "allow" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "whatsapp" + "app_operation": "sendMessage" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "whatsapp" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "whatsapp" + "appIdObjects": + - "whatsapp" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-default-only-IpAndApplication-sendMessage-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "whatsapp-deny-default-sendMessage" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "default" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "whatsapp" + "app_operation": "sendMessage" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "whatsapp" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "whatsapp" + "appIdObjects": + - "whatsapp" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-drop-only-IpAndApplication-sendMessage-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "whatsapp-deny-drop-sendMessage" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "drop" + "isGre": 0 + "logCapture": 1 + "captureDepth": 16534 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "whatsapp" + "app_operation": "sendMessage" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "whatsapp" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "whatsapp" + "appIdObjects": + - "whatsapp" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-rate_limit-only-IpAndApplication-sendMessage-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "whatsapp-deny-rate-sendMessage" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "rate_limit" + "bps": 30 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "whatsapp" + "app_operation": "sendMessage" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "whatsapp" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "whatsapp" + "appIdObjects": + - "whatsapp" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-tamper-only-IpAndApplication-sendMessage-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "whatsapp-deny-tamper-sendMessage" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "tamper" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "whatsapp" + "app_operation": "sendMessage" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "whatsapp" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "whatsapp" + "appIdObjects": + - "whatsapp" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"monitor-only-IpAndApplication-sendMessage-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "whatsapp-monitor-sendMessage-001" + "policyType": "tsg_security" + "logType": "security_event" + "action": "monitor" + "packet_mirror": + "enable": 0 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "logCapture": 1 + "captureDepth": 28512 + "airTestMessage": + "app_name": "whatsapp" + "app_operation": "sendMessage" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "whatsapp" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "whatsapp" + "appIdObjects": + - "whatsapp" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"allow-only-IpAndApplication-sendDynamic-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "whatsapp-allow-sendDynamic-001" + "policyType": "tsg_security" + "logType": "security_event" + "action": "allow" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "whatsapp" + "app_operation": "sendDynamic" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "whatsapp" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "whatsapp" + "appIdObjects": + - "whatsapp" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-default-only-IpAndApplication-sendDynamic-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "whatsapp-deny-default-sendDynamic" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "default" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "whatsapp" + "app_operation": "sendDynamic" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "whatsapp" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "whatsapp" + "appIdObjects": + - "whatsapp" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-drop-only-IpAndApplication-sendDynamic-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "whatsapp-deny-drop-sendDynamic" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "drop" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "whatsapp" + "app_operation": "sendDynamic" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "whatsapp" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "whatsapp" + "appIdObjects": + - "whatsapp" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-rate_limit-only-IpAndApplication-sendDynamic-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "whatsapp-deny-rate-sendDynamic" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "rate_limit" + "bps": 42 + "isGre": 0 + "logCapture": 1 + "captureDepth": 30001 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "whatsapp" + "app_operation": "sendDynamic" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "whatsapp" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "whatsapp" + "appIdObjects": + - "whatsapp" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-tamper-only-IpAndApplication-sendDynamic-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "whatsapp-deny-tamper-sendDynamic" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "tamper" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "whatsapp" + "app_operation": "sendDynamic" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "whatsapp" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "whatsapp" + "appIdObjects": + - "whatsapp" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"monitor-only-IpAndApplication-sendDynamic-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "whatsapp-monitor-sendDynamic-001" + "policyType": "tsg_security" + "logType": "security_event" + "action": "monitor" + "packet_mirror": + "enable": 0 + "isGre": 0 + "logCapture": 1 + "captureDepth": 24985 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "whatsapp" + "app_operation": "sendDynamic" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "whatsapp" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "whatsapp" + "appIdObjects": + - "whatsapp" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"allow-only-IpAndApplication-voiceCalls-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "whatsapp-allow-voiceCalls-001" + "policyType": "tsg_security" + "logType": "security_event" + "action": "allow" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "whatsapp" + "app_operation": "voiceCalls" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "whatsapp" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "whatsapp" + "appIdObjects": + - "whatsapp" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-default-only-IpAndApplication-voiceCalls-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "whatsapp-deny-default-voiceCalls" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "default" + "isGre": 0 + "logCapture": 1 + "captureDepth": 38495 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "whatsapp" + "app_operation": "voiceCalls" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "whatsapp" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "whatsapp" + "appIdObjects": + - "whatsapp" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-drop-only-IpAndApplication-voiceCalls-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "whatsapp-deny-drop-voiceCalls" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "drop" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "whatsapp" + "app_operation": "voiceCalls" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "whatsapp" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "whatsapp" + "appIdObjects": + - "whatsapp" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-rate_limit-only-IpAndApplication-voiceCalls-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "whatsapp-deny-rate-voiceCalls" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "rate_limit" + "bps": 25 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "whatsapp" + "app_operation": "voiceCalls" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "whatsapp" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "whatsapp" + "appIdObjects": + - "whatsapp" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-tamper-only-IpAndApplication-voiceCalls-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "whatsapp-deny-tamper-voiceCalls" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "tamper" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "whatsapp" + "app_operation": "voiceCalls" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "whatsapp" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "whatsapp" + "appIdObjects": + - "whatsapp" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"monitor-only-IpAndApplication-voiceCalls-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "whatsapp-monitor-voiceCalls-001" + "policyType": "tsg_security" + "logType": "security_event" + "action": "monitor" + "packet_mirror": + "enable": 0 + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "logCapture": 1 + "captureDepth": 39990 + "airTestMessage": + "app_name": "whatsapp" + "app_operation": "voiceCalls" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "whatsapp" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "whatsapp" + "appIdObjects": + - "whatsapp" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"allow-only-IpAndApplication-videoCall-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "whatsapp-allow-videoCall-001" + "policyType": "tsg_security" + "logType": "security_event" + "action": "allow" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "whatsapp" + "app_operation": "videoCall" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "whatsapp" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "whatsapp" + "appIdObjects": + - "whatsapp" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-default-only-IpAndApplication-videoCall-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "whatsapp-deny-default-videoCall" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "default" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "whatsapp" + "app_operation": "videoCall" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "whatsapp" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "whatsapp" + "appIdObjects": + - "whatsapp" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-drop-only-IpAndApplication-videoCall-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "whatsapp-deny-drop-videoCall" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "drop" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "whatsapp" + "app_operation": "videoCall" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "whatsapp" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "whatsapp" + "appIdObjects": + - "whatsapp" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-rate_limit-only-IpAndApplication-videoCall-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "whatsapp-deny-rate-videoCall" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "rate_limit" + "bps": 45 + "isGre": 0 + "logCapture": 1 + "captureDepth": 37816 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "whatsapp" + "app_operation": "videoCall" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "whatsapp" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "whatsapp" + "appIdObjects": + - "whatsapp" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-tamper-only-IpAndApplication-videoCall-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "whatsapp-deny-tamper-videoCall" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "tamper" + "isGre": 0 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "whatsapp" + "app_operation": "videoCall" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "whatsapp" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "whatsapp" + "appIdObjects": + - "whatsapp" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"monitor-only-IpAndApplication-videoCall-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "whatsapp-monitor-videoCall-001" + "policyType": "tsg_security" + "logType": "security_event" + "action": "monitor" + "packet_mirror": + "enable": 0 + "isGre": 0 + "logCapture": 1 + "captureDepth": 21956 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "whatsapp" + "app_operation": "videoCall" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "whatsapp" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "whatsapp" + "appIdObjects": + - "whatsapp" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535"
\ No newline at end of file diff --git a/other/data/security/youtube/youtube-airTest-data.yaml b/other/data/security/youtube/youtube-airTest-data.yaml index cba105f..43149db 100644 --- a/other/data/security/youtube/youtube-airTest-data.yaml +++ b/other/data/security/youtube/youtube-airTest-data.yaml @@ -3,7 +3,7 @@ - "opAction": "add" "returnData": 1 - "policyName": "security-youtube-allow-only-IpAndApplication-search-airTest-001" + "policyName": "youtube-allow-search-001" "policyType": "tsg_security" "logType": "security_event" "action": "allow" @@ -12,7 +12,6 @@ "doBlacklist": 0 "doLog": 1 "isApp": 1 - "isOpen": 1 "airTestMessage": "app_name": "youtube" "app_operation": "search" @@ -39,11 +38,11 @@ - "ip": "1.1.1.1" "port": "0-65535" -"deny-only-IpAndApplication-search-airTest_data": +"deny-default-only-IpAndApplication-search-airTest_data": - "opAction": "add" "returnData": 1 - "policyName": "security-youtube-deny-only-IpAndApplication-search-airTest-001" + "policyName": "youtube-deny-default-search" "policyType": "tsg_security" "logType": "security_event" "action": "deny" @@ -53,7 +52,6 @@ "doBlacklist": 0 "doLog": 1 "isApp": 1 - "isOpen": 1 "airTestMessage": "app_name": "youtube" "app_operation": "search" @@ -83,7 +81,7 @@ - "opAction": "update" "returnData": 1 - "policyName": "security-youtube-deny-only-IpAndApplication-search-airTest-002" + "policyName": "youtube-deny-search-002" "policyType": "tsg_security" "logType": "security_event" "action": "deny" @@ -122,10 +120,53 @@ - "ip": "1.1.1.1" "port": "0-65535" +"deny-drop-only-IpAndApplication-search-airTest_data": - "opAction": "add" "returnData": 1 - "policyName": "security-youtube-deny-only-IpAndApplication-search-airTest-003" + "policyName": "youtube-deny-drop-search" + "policyType": "tsg_security" + "logType": "security_event" + "action": "deny" + "method": "drop" + "isGre": 0 + "logCapture": 1 + "captureDepth": 49999 + "userTags": "" + "doBlacklist": 0 + "doLog": 1 + "isApp": 1 + "airTestMessage": + "app_name": "youtube" + "app_operation": "search" + "logQueryParam": + - + "queryFiledKey": "common_app_label" + "queryValue": "youtube" + "policyDesc": "autotest" + "effectiveRange": + "userRegion": + "protocol": "youtube" + "appIdObjects": + - "youtube" + "appSelectorObjects": + "isValid": 1 + "scheduleId": + "condation": + - + "protocolField": "TSG_SECURITY_SOURCE_ADDR" + "objectType": "ip" + "objectSubType": "endpoint" + "objectList": + - "addItemList": + - + "ip": "1.1.1.1" + "port": "0-65535" +"deny-rate_limit-only-IpAndApplication-search-airTest_data": + - + "opAction": "add" + "returnData": 1 + "policyName": "youtube-deny-rate-search" "policyType": "tsg_security" "logType": "security_event" "action": "deny" @@ -162,10 +203,12 @@ - "ip": "1.1.1.1" "port": "0-65535" + +"deny-tamper-only-IpAndApplication-search-airTest_data": - "opAction": "add" "returnData": 1 - "policyName": "security-youtube-deny-only-IpAndApplication-search-airTest-004" + "policyName": "youtube-deny-tamper-search" "policyType": "tsg_security" "logType": "security_event" "action": "deny" @@ -200,12 +243,12 @@ - "addItemList": - "ip": "1.1.1.1" - "port": "0-65535" + "port": "0-65535" "monitor-only-IpAndApplication-search-airTest_data": - "opAction": "add" "returnData": 1 - "policyName": "security-youtube-monitor-only-IpAndApplication-search-airTest-001" + "policyName": "youtube-monitor-search-001" "policyType": "tsg_security" "logType": "security_event" "action": "monitor" @@ -216,7 +259,6 @@ "doBlacklist": 0 "doLog": 1 "isApp": 1 - "isOpen": 1 "logCapture": 1 "captureDepth": 49815 "airTestMessage": @@ -249,7 +291,7 @@ - "opAction": "add" "returnData": 1 - "policyName": "security-youtube-allow-only-IpAndApplication-shorts-airTest-001" + "policyName": "youtube-allow-shorts-001" "policyType": "tsg_security" "logType": "security_event" "action": "allow" @@ -258,7 +300,6 @@ "doBlacklist": 0 "doLog": 1 "isApp": 1 - "isOpen": 1 "airTestMessage": "app_name": "youtube" "app_operation": "shorts" @@ -285,11 +326,11 @@ - "ip": "1.1.1.1" "port": "0-65535" -"deny-only-IpAndApplication-shorts-airTest_data": +"deny-default-only-IpAndApplication-shorts-airTest_data": - "opAction": "add" "returnData": 1 - "policyName": "security-youtube-deny-only-IpAndApplication-shorts-airTest-001" + "policyName": "youtube-deny-shorts-001" "policyType": "tsg_security" "logType": "security_event" "action": "deny" @@ -299,7 +340,6 @@ "doBlacklist": 0 "doLog": 1 "isApp": 1 - "isOpen": 1 "airTestMessage": "app_name": "youtube" "app_operation": "shorts" @@ -326,16 +366,16 @@ - "ip": "1.1.1.1" "port": "0-65535" - - - "opAction": "update" +"deny-drop-only-IpAndApplication-shorts-airTest_data": +- + "opAction": "add" "returnData": 1 - "policyName": "security-youtube-deny-only-IpAndApplication-shorts-airTest-002" + "policyName": "youtube-deny-shorts-002" "policyType": "tsg_security" "logType": "security_event" "action": "deny" "method": "drop" "isGre": 0 - "isEdit": 1 "userTags": "" "doBlacklist": 0 "doLog": 1 @@ -365,11 +405,12 @@ - "addItemList": - "ip": "1.1.1.1" - "port": "0-65535" + "port": "0-65535" +"deny-rate_limit-only-IpAndApplication-shorts-airTest_data": - "opAction": "add" "returnData": 1 - "policyName": "security-youtube-deny-only-IpAndApplication-shorts-airTest-003" + "policyName": "youtube-deny-shorts-003" "policyType": "tsg_security" "logType": "security_event" "action": "deny" @@ -408,10 +449,11 @@ - "ip": "1.1.1.1" "port": "0-65535" +"deny-tamper-only-IpAndApplication-shorts-airTest_data": - "opAction": "add" "returnData": 1 - "policyName": "security-youtube-deny-only-IpAndApplication-shorts-airTest-004" + "policyName": "youtube-deny-shorts-004" "policyType": "tsg_security" "logType": "security_event" "action": "deny" @@ -446,12 +488,12 @@ - "addItemList": - "ip": "1.1.1.1" - "port": "0-65535" + "port": "0-65535" "monitor-only-IpAndApplication-shorts-airTest_data": - "opAction": "add" "returnData": 1 - "policyName": "security-youtube-monitor-only-IpAndApplication-shorts-airTest-001" + "policyName": "youtube-monitor-shorts-001" "policyType": "tsg_security" "logType": "security_event" "action": "monitor" @@ -464,7 +506,6 @@ "doBlacklist": 0 "doLog": 1 "isApp": 1 - "isOpen": 1 "airTestMessage": "app_name": "youtube" "app_operation": "shorts" @@ -495,7 +536,7 @@ - "opAction": "add" "returnData": 1 - "policyName": "security-youtube-allow-only-IpAndApplication-frontPage-airTest-001" + "policyName": "youtube-allow-frontPage-001" "policyType": "tsg_security" "logType": "security_event" "action": "allow" @@ -504,7 +545,6 @@ "doBlacklist": 0 "doLog": 1 "isApp": 1 - "isOpen": 1 "airTestMessage": "app_name": "youtube" "app_operation": "frontPage" @@ -531,11 +571,11 @@ - "ip": "1.1.1.1" "port": "0-65535" -"deny-only-IpAndApplication-frontPage-airTest_data": +"deny-default-only-IpAndApplication-frontPage-airTest_data": - "opAction": "add" "returnData": 1 - "policyName": "security-youtube-deny-only-IpAndApplication-frontPage-airTest-001" + "policyName": "youtube-deny-frontPage-001" "policyType": "tsg_security" "logType": "security_event" "action": "deny" @@ -545,7 +585,6 @@ "doBlacklist": 0 "doLog": 1 "isApp": 1 - "isOpen": 1 "airTestMessage": "app_name": "youtube" "app_operation": "frontPage" @@ -572,10 +611,11 @@ - "ip": "1.1.1.1" "port": "0-65535" +"deny-drop-only-IpAndApplication-frontPage-airTest_data": - "opAction": "add" "returnData": 1 - "policyName": "security-youtube-deny-only-IpAndApplication-frontPage-airTest-002" + "policyName": "youtube-deny-frontPage-002" "policyType": "tsg_security" "logType": "security_event" "action": "deny" @@ -610,18 +650,18 @@ - "addItemList": - "ip": "1.1.1.1" - "port": "0-65535" + "port": "0-65535" +"deny-rate_limit-only-IpAndApplication-frontPage-airTest_data": - - "opAction": "update" + "opAction": "add" "returnData": 1 - "policyName": "security-youtube-deny-only-IpAndApplication-frontPage-airTest-003" + "policyName": "youtube-deny-frontPage-003" "policyType": "tsg_security" "logType": "security_event" "action": "deny" "method": "rate_limit" "bps": 72 "isGre": 0 - "isEdit": 1 "logCapture": 1 "captureDepth": 44805 "userTags": "" @@ -654,10 +694,11 @@ - "ip": "1.1.1.1" "port": "0-65535" - - +"deny-tamper-only-IpAndApplication-frontPage-airTest_data": +- "opAction": "add" "returnData": 1 - "policyName": "security-youtube-deny-only-IpAndApplication-frontPage-airTest-004" + "policyName": "youtube-deny-frontPage-004" "policyType": "tsg_security" "logType": "security_event" "action": "deny" @@ -692,12 +733,12 @@ - "addItemList": - "ip": "1.1.1.1" - "port": "0-65535" + "port": "0-65535" "monitor-only-IpAndApplication-frontPage-airTest_data": - "opAction": "add" "returnData": 1 - "policyName": "security-youtube-monitor-only-IpAndApplication-frontPage-airTest-001" + "policyName": "youtube-monitor-frontPage-001" "policyType": "tsg_security" "logType": "security_event" "action": "monitor" @@ -710,7 +751,6 @@ "doBlacklist": 0 "doLog": 1 "isApp": 1 - "isOpen": 1 "airTestMessage": "app_name": "youtube" "app_operation": "frontPage" @@ -741,7 +781,7 @@ - "opAction": "add" "returnData": 1 - "policyName": "security-youtube-allow-only-IpAndApplication-SubscriptionContent-airTest-001" + "policyName": "youtube-allow-SubscriptionContent-001" "policyType": "tsg_security" "logType": "security_event" "action": "allow" @@ -750,7 +790,6 @@ "doBlacklist": 0 "doLog": 1 "isApp": 1 - "isOpen": 1 "airTestMessage": "app_name": "youtube" "app_operation": "SubscriptionContent" @@ -777,11 +816,11 @@ - "ip": "1.1.1.1" "port": "0-65535" -"deny-only-IpAndApplication-SubscriptionContent-airTest_data": +"deny-default-only-IpAndApplication-SubscriptionContent-airTest_data": - "opAction": "add" "returnData": 1 - "policyName": "security-youtube-deny-only-IpAndApplication-SubscriptionContent-airTest-001" + "policyName": "youtube-deny-default-SubscriptionContent" "policyType": "tsg_security" "logType": "security_event" "action": "deny" @@ -791,7 +830,6 @@ "doBlacklist": 0 "doLog": 1 "isApp": 1 - "isOpen": 1 "airTestMessage": "app_name": "youtube" "app_operation": "SubscriptionContent" @@ -818,10 +856,11 @@ - "ip": "1.1.1.1" "port": "0-65535" +"deny-drop-only-IpAndApplication-SubscriptionContent-airTest_data": - "opAction": "add" "returnData": 1 - "policyName": "security-youtube-deny-only-IpAndApplication-SubscriptionContent-airTest-002" + "policyName": "youtube-deny-drop-SubscriptionContent" "policyType": "tsg_security" "logType": "security_event" "action": "deny" @@ -856,11 +895,12 @@ - "addItemList": - "ip": "1.1.1.1" - "port": "0-65535" + "port": "0-65535" +"deny-rate_limit-only-IpAndApplication-SubscriptionContent-airTest_data": - "opAction": "add" "returnData": 1 - "policyName": "security-youtube-deny-only-IpAndApplication-SubscriptionContent-airTest-003" + "policyName": "youtube-deny-rate-SubscriptionContent" "policyType": "tsg_security" "logType": "security_event" "action": "deny" @@ -897,16 +937,16 @@ - "ip": "1.1.1.1" "port": "0-65535" +"deny-tamper-only-IpAndApplication-SubscriptionContent-airTest_data": - - "opAction": "update" + "opAction": "add" "returnData": 1 - "policyName": "security-youtube-deny-only-IpAndApplication-SubscriptionContent-airTest-004" + "policyName": "youtube-deny-tamper-SubscriptionContent" "policyType": "tsg_security" "logType": "security_event" "action": "deny" "method": "tamper" "isGre": 0 - "isEdit": 1 "logCapture": 1 "captureDepth": 38709 "userTags": "" @@ -938,12 +978,12 @@ - "addItemList": - "ip": "1.1.1.1" - "port": "0-65535" + "port": "0-65535" "monitor-only-IpAndApplication-SubscriptionContent-airTest_data": - "opAction": "add" "returnData": 1 - "policyName": "security-youtube-monitor-only-IpAndApplication-SubscriptionContent-airTest-001" + "policyName": "youtube-monitor-SubscriptionContent-001" "policyType": "tsg_security" "logType": "security_event" "action": "monitor" @@ -956,7 +996,6 @@ "doBlacklist": 0 "doLog": 1 "isApp": 1 - "isOpen": 1 "airTestMessage": "app_name": "youtube" "app_operation": "SubscriptionContent" |