Post Rules - Get

Service:

Cloud NGFW

API Version:

2025-05-23

Get a PostRulesResource

GET https://management.azure.com/providers/PaloAltoNetworks.Cloudngfw/globalRulestacks/{globalRulestackName}/postRules/{priority}?api-version=2025-05-23

URI Parameters

Name	In	Required	Type	Description
globalRulestackName	path	True	string	GlobalRulestack resource name
priority	path	True	string	Post Rule priority
api-version	query	True	string minLength: 1	The API version to use for this operation.

Responses

Name	Type	Description
200 OK	PostRulesResource	Azure operation completed successfully.
Other Status Codes	ErrorResponse	Common error response for all Azure Resource Manager APIs to return error details for failed operations.

Security

azure_auth

Azure Active Directory OAuth2 Flow.

Type: oauth2
Flow: implicit
Authorization URL: https://login.microsoftonline.com/common/oauth2/authorize

Scopes

Name	Description
user_impersonation	impersonate your user account

Examples

PostRules_Get_MaximumSet_Gen

PostRules_Get_MinimumSet_Gen

PostRules_Get_MaximumSet_Gen

Sample request

HTTP

GET https://management.azure.com/providers/PaloAltoNetworks.Cloudngfw/globalRulestacks/lrs1/postRules/1?api-version=2025-05-23

Sample response

Status code:

200

{
  "id": "aaaaaaaaaaaaaaaaaa",
  "name": "aaaaaaaaaa",
  "properties": {
    "actionType": "Allow",
    "applications": [
      "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
    ],
    "auditComment": "aaa",
    "category": {
      "feeds": [
        "aaaaaaaaaaaa"
      ],
      "urlCustom": [
        "aaaaa"
      ]
    },
    "decryptionRuleType": "SSLOutboundInspection",
    "description": "aaaaaaaaaaaaaaaaaaaaaaaaaaaa",
    "destination": {
      "cidrs": [
        "aaaaaaa"
      ],
      "countries": [
        "aaaaaaaaaaaaaa"
      ],
      "feeds": [
        "aaaaaaaaaaaaaaaaaaaaaaaaaa"
      ],
      "fqdnLists": [
        "aaaaaaaaaaaaa"
      ],
      "prefixLists": [
        "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
      ]
    },
    "enableLogging": "DISABLED",
    "etag": "aaaaaaaaaaaaaaaaaaaa",
    "inboundInspectionCertificate": "aaaaaaaaaaaaaaaaaaaaaaaaaaa",
    "negateDestination": "TRUE",
    "negateSource": "TRUE",
    "priority": 24,
    "protocol": "aaaa",
    "protocolPortList": [
      "aaaaaaaaaaaa"
    ],
    "provisioningState": "Accepted",
    "ruleName": "aaaaaaaaaaaaaaaaaaaaaaaaa",
    "ruleState": "DISABLED",
    "source": {
      "cidrs": [
        "aaa"
      ],
      "countries": [
        "aaaaa"
      ],
      "feeds": [
        "aaaaaaaaaaaaaaaaaaa"
      ],
      "prefixLists": [
        "aaaaaaaaaaaaaaaaaaaa"
      ]
    },
    "tags": [
      {
        "key": "keyName",
        "value": "value"
      }
    ]
  },
  "systemData": {
    "createdAt": "2022-09-09T05:08:24.229Z",
    "createdBy": "praval",
    "createdByType": "User",
    "lastModifiedAt": "2022-09-09T05:08:24.229Z",
    "lastModifiedBy": "praval",
    "lastModifiedByType": "User"
  },
  "type": "aaaaaaaaaaaaaaaaaaaaaaaaaaaa"
}

PostRules_Get_MinimumSet_Gen

Sample request

HTTP

GET https://management.azure.com/providers/PaloAltoNetworks.Cloudngfw/globalRulestacks/lrs1/postRules/1?api-version=2025-05-23

Sample response

Status code:

200

{
  "id": "/providers/PaloAltoNetworks.Cloudngfw/globalRulestacks/lrs1/postrules/1",
  "properties": {
    "ruleName": "aaaaaaaaaaaaaaaaaaaaaaaaa"
  }
}

Definitions

Name	Description
ActionEnum
BooleanEnum	Boolean Enum
Category	URL/EDL to match
createdByType	The type of identity that created the resource.
DecryptionRuleTypeEnum
DestinationAddr	destination address
ErrorAdditionalInfo	The resource management error additional info.
ErrorDetail	The error detail.
ErrorResponse	Error response
PostRulesResource	PostRulestack rule list
ProvisioningState	Provisioning state of the firewall resource.
SourceAddr	Address properties
StateEnum	Enabled or Disabled Enum
systemData	Metadata pertaining to creation and last modification of the resource.
TagInfo	Tag

ActionEnum

Enumeration

Value	Description
Allow
DenySilent
DenyResetServer
DenyResetBoth

BooleanEnum

Enumeration

Boolean Enum

Value	Description
TRUE
FALSE

Category

Object

URL/EDL to match

Name	Type	Description
feeds	string[]	feed list
urlCustom	string[]	custom URL

createdByType

Enumeration

The type of identity that created the resource.

Value	Description
User
Application
ManagedIdentity
Key

DecryptionRuleTypeEnum

Enumeration

Value	Description
SSLOutboundInspection
SSLInboundInspection
None

DestinationAddr

Object

destination address

Name	Type	Description
cidrs	string[]	special value 'any'
countries	string[]	list of countries
feeds	string[]	list of feeds
fqdnLists	string[]	fqdn list
prefixLists	string[]	prefix list

ErrorAdditionalInfo

Object

The resource management error additional info.

Name	Type	Description
info	object	The additional info.
type	string	The additional info type.

ErrorDetail

Object

The error detail.

Name	Type	Description
additionalInfo	ErrorAdditionalInfo[]	The error additional info.
code	string	The error code.
details	ErrorDetail[]	The error details.
message	string	The error message.
target	string	The error target.

ErrorResponse

Object

Error response

Name	Type	Description
error	ErrorDetail	The error object.

PostRulesResource

Object

PostRulestack rule list

Name	Type	Default value	Description
id	string		Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}
name	string		The name of the resource
properties.actionType	ActionEnum		rule action
properties.applications	string[]		array of rule applications
properties.auditComment	string		rule comment
properties.category	Category		rule category
properties.decryptionRuleType	DecryptionRuleTypeEnum		enable or disable decryption
properties.description	string		rule description
properties.destination	DestinationAddr		destination address
properties.enableLogging	StateEnum		enable or disable logging
properties.etag	string		etag info
properties.inboundInspectionCertificate	string		inbound Inspection Certificate
properties.negateDestination	BooleanEnum		cidr should not be 'any'
properties.negateSource	BooleanEnum		cidr should not be 'any'
properties.priority	integer (int32)
properties.protocol	string	application-default	any, application-default, TCP:number, UDP:number
properties.protocolPortList	string[]		prot port list
properties.provisioningState	ProvisioningState		Provisioning state of the resource.
properties.ruleName	string		rule name
properties.ruleState	StateEnum		state of this rule
properties.source	SourceAddr		source address
properties.tags	TagInfo[]		tag for rule
systemData	systemData		System metadata for this resource.
type	string		The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"

ProvisioningState

Enumeration

Provisioning state of the firewall resource.

Value	Description
Accepted
Creating
Updating
Deleting
Succeeded
Failed
Canceled
Deleted
NotSpecified

SourceAddr

Object

Address properties

Name	Type	Description
cidrs	string[]	special value 'any'
countries	string[]	list of countries
feeds	string[]	list of feeds
prefixLists	string[]	prefix list

StateEnum

Enumeration

Enabled or Disabled Enum

Value	Description
DISABLED
ENABLED

systemData

Object

Metadata pertaining to creation and last modification of the resource.

Name	Type	Description
createdAt	string (date-time)	The timestamp of resource creation (UTC).
createdBy	string	The identity that created the resource.
createdByType	createdByType	The type of identity that created the resource.
lastModifiedAt	string (date-time)	The timestamp of resource last modification (UTC)
lastModifiedBy	string	The identity that last modified the resource.
lastModifiedByType	createdByType	The type of identity that last modified the resource.

TagInfo

Object

Tag

Name	Type	Description
key	string	tag name
value	string	tag value