Network Firewall Common Types

DBMS_CLOUD_OCI_NETWORK_FIREWALL_VARCHAR2_TBL Type

Nested table type of varchar2(32767).

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_varchar2_tbl FORCE IS TABLE OF (varchar2(32767)) NOT PERSISTABLE;

DBMS_CLOUD_OCI_NETWORK_FIREWALL_ADDRESS_LIST_T Type

List of addresses with a reference name. The value of an entry is a list of IP addresses or prefixes in CIDR notation or FQDNs. The associated key is the identifier by which the IP address list is referenced.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_address_list_t FORCE AUTHID CURRENT_USER IS OBJECT (
  name varchar2(32767),
  l_type varchar2(32767),
  addresses dbms_cloud_oci_network_firewall_varchar2_tbl,
  total_addresses number,
  parent_resource_id varchar2(32767),
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_address_list_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_address_list_t (
    name varchar2,
    l_type varchar2,
    addresses dbms_cloud_oci_network_firewall_varchar2_tbl,
    total_addresses number,
    parent_resource_id varchar2
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

name

(required) Unique name to identify the group of addresses to be used in the policy rules.

l_type

(required) Type of address List. The accepted values are - * FQDN * IP

Allowed values are: 'FQDN', 'IP'

addresses

(required) List of addresses.

total_addresses

(required) Count of total Addresses in the AddressList

parent_resource_id

(required) OCID of the Network Firewall Policy this Address List belongs to.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_ADDRESS_LIST_SUMMARY_T Type

Address List Summary in the network firewall policy

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_address_list_summary_t FORCE AUTHID CURRENT_USER IS OBJECT (
  name varchar2(32767),
  l_type varchar2(32767),
  total_addresses number,
  parent_resource_id varchar2(32767),
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_address_list_summary_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_address_list_summary_t (
    name varchar2,
    l_type varchar2,
    total_addresses number,
    parent_resource_id varchar2
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

name

(required) Name of Address List

l_type

(required) Type of address List. The accepted values are - * FQDN * IP

Allowed values are: 'FQDN', 'IP'

total_addresses

(required) Count of total Addresses in the AddressList

parent_resource_id

(required) OCID of the Network Firewall Policy this address list belongs to.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_ADDRESS_LIST_SUMMARY_TBL Type

Nested table type of dbms_cloud_oci_network_firewall_address_list_summary_t.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_address_list_summary_tbl FORCE IS TABLE OF (dbms_cloud_oci_network_firewall_address_list_summary_t) NOT PERSISTABLE;

DBMS_CLOUD_OCI_NETWORK_FIREWALL_ADDRESS_LIST_SUMMARY_COLLECTION_T Type

Collection of Address Lists in the network firewall policy

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_address_list_summary_collection_t FORCE AUTHID CURRENT_USER IS OBJECT (
  items dbms_cloud_oci_network_firewall_address_list_summary_tbl,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_address_list_summary_collection_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_address_list_summary_collection_t (
    items dbms_cloud_oci_network_firewall_address_list_summary_tbl
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

items

(required) Collection of address lists.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_APPLICATION_T Type

A protocol identifier (such as TCP, UDP, or ICMP) and protocol-specific parameters (such as a port range).

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_application_t FORCE AUTHID CURRENT_USER IS OBJECT (
  l_type varchar2(32767),
  name varchar2(32767),
  parent_resource_id varchar2(32767),
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_application_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_application_t (
    l_type varchar2,
    name varchar2,
    parent_resource_id varchar2
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE NOT FINAL;

Fields

Field Description

l_type

(required) Describes the type of Application.

Allowed values are: 'ICMP', 'ICMP_V6'

name

(required) Name of the application.

parent_resource_id

(required) OCID of the Network Firewall Policy this application belongs to.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_APPLICATION_GROUP_T Type

A group of applications.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_application_group_t FORCE AUTHID CURRENT_USER IS OBJECT (
  name varchar2(32767),
  apps dbms_cloud_oci_network_firewall_varchar2_tbl,
  total_apps number,
  parent_resource_id varchar2(32767),
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_application_group_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_application_group_t (
    name varchar2,
    apps dbms_cloud_oci_network_firewall_varchar2_tbl,
    total_apps number,
    parent_resource_id varchar2
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

name

(required) Name of the application Group.

apps

(required) List of apps in the group.

total_apps

(required) Count of total applications in the given application group.

parent_resource_id

(required) OCID of the Network Firewall Policy this application group belongs to.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_APPLICATION_GROUP_SUMMARY_T Type

Summary object for application list in the network firewall policy.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_application_group_summary_t FORCE AUTHID CURRENT_USER IS OBJECT (
  name varchar2(32767),
  total_apps number,
  parent_resource_id varchar2(32767),
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_application_group_summary_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_application_group_summary_t (
    name varchar2,
    total_apps number,
    parent_resource_id varchar2
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

name

(required) Name of the application groups.

total_apps

(required) Count of total applications in the given application group.

parent_resource_id

(required) OCID of the Network Firewall Policy this application group belongs to.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_APPLICATION_GROUP_SUMMARY_TBL Type

Nested table type of dbms_cloud_oci_network_firewall_application_group_summary_t.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_application_group_summary_tbl FORCE IS TABLE OF (dbms_cloud_oci_network_firewall_application_group_summary_t) NOT PERSISTABLE;

DBMS_CLOUD_OCI_NETWORK_FIREWALL_APPLICATION_GROUP_SUMMARY_COLLECTION_T Type

Collection of Application Lists in the network firewall policy

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_application_group_summary_collection_t FORCE AUTHID CURRENT_USER IS OBJECT (
  items dbms_cloud_oci_network_firewall_application_group_summary_tbl,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_application_group_summary_collection_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_application_group_summary_collection_t (
    items dbms_cloud_oci_network_firewall_application_group_summary_tbl
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

items

(required) List of application lists.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_APPLICATION_SUMMARY_T Type

Summary object for application element in the network firewall policy.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_application_summary_t FORCE AUTHID CURRENT_USER IS OBJECT (
  l_type varchar2(32767),
  name varchar2(32767),
  parent_resource_id varchar2(32767),
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_application_summary_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_application_summary_t (
    l_type varchar2,
    name varchar2,
    parent_resource_id varchar2
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE NOT FINAL;

Fields

Field Description

l_type

(required) Describes the type of Application.

Allowed values are: 'ICMP', 'ICMP_V6'

name

(required) Name of the application.

parent_resource_id

(required) OCID of the Network Firewall Policy this application belongs to.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_APPLICATION_SUMMARY_TBL Type

Nested table type of dbms_cloud_oci_network_firewall_application_summary_t.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_application_summary_tbl FORCE IS TABLE OF (dbms_cloud_oci_network_firewall_application_summary_t) NOT PERSISTABLE;

DBMS_CLOUD_OCI_NETWORK_FIREWALL_APPLICATION_SUMMARY_COLLECTION_T Type

Collection of Applications in the network firewall policy

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_application_summary_collection_t FORCE AUTHID CURRENT_USER IS OBJECT (
  items dbms_cloud_oci_network_firewall_application_summary_tbl,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_application_summary_collection_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_application_summary_collection_t (
    items dbms_cloud_oci_network_firewall_application_summary_tbl
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

items

(required) Collection of Applications.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_APPLY_NETWORK_FIREWALL_POLICY_DETAILS_T Type

Request data required to clone a network firewall policy.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_apply_network_firewall_policy_details_t FORCE AUTHID CURRENT_USER IS OBJECT (
  firewalls dbms_cloud_oci_network_firewall_varchar2_tbl,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_apply_network_firewall_policy_details_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_apply_network_firewall_policy_details_t (
    firewalls dbms_cloud_oci_network_firewall_varchar2_tbl
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

firewalls

(optional) Ordered priority list of firewall OCIDs on which the update needs to be applied in given order. If the list is a subset of the firewalls attached, then given firewalls would be deployed first with the change, followed by remaining firewalls.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_CHANGE_NETWORK_FIREWALL_COMPARTMENT_DETAILS_T Type

The information to be updated.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_change_network_firewall_compartment_details_t FORCE AUTHID CURRENT_USER IS OBJECT (
  compartment_id varchar2(32767),
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_change_network_firewall_compartment_details_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_change_network_firewall_compartment_details_t (
    compartment_id varchar2
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

compartment_id

(required) The OCID of the compartment into which the Network Firewalll resource should be moved.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_CHANGE_NETWORK_FIREWALL_POLICY_COMPARTMENT_DETAILS_T Type

The request details required to move the resource to target compartment.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_change_network_firewall_policy_compartment_details_t FORCE AUTHID CURRENT_USER IS OBJECT (
  compartment_id varchar2(32767),
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_change_network_firewall_policy_compartment_details_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_change_network_firewall_policy_compartment_details_t (
    compartment_id varchar2
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

compartment_id

(required) The OCID of the compartment into which the resource should be moved.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_CLONE_NETWORK_FIREWALL_POLICY_DETAILS_T Type

Request data required to clone a network firewall policy.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_clone_network_firewall_policy_details_t FORCE AUTHID CURRENT_USER IS OBJECT (
  display_name varchar2(32767),
  compartment_id varchar2(32767),
  freeform_tags json_element_t,
  defined_tags json_element_t,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_clone_network_firewall_policy_details_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_clone_network_firewall_policy_details_t (
    display_name varchar2,
    compartment_id varchar2,
    freeform_tags json_element_t,
    defined_tags json_element_t
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

display_name

(optional) A user-friendly optional name for the cloned firewall policy. Avoid entering confidential information.

compartment_id

(optional) The OCID of the compartment containing the NetworkFirewall Policy.

freeform_tags

(optional) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: `{\"Department\": \"Finance\"}`

defined_tags

(optional) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: `{\"Operations\": {\"CostCenter\": \"42\"}}`

DBMS_CLOUD_OCI_NETWORK_FIREWALL_CREATE_ADDRESS_LIST_DETAILS_T Type

The Request for creating the address List

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_create_address_list_details_t FORCE AUTHID CURRENT_USER IS OBJECT (
  name varchar2(32767),
  l_type varchar2(32767),
  addresses dbms_cloud_oci_network_firewall_varchar2_tbl,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_create_address_list_details_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_create_address_list_details_t (
    name varchar2,
    l_type varchar2,
    addresses dbms_cloud_oci_network_firewall_varchar2_tbl
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

name

(required) Unique name to identify the group of addresses to be used in the policy rules.

l_type

(required) Type of address List. The accepted values are - * FQDN * IP

Allowed values are: 'FQDN', 'IP'

addresses

(required) List of addresses.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_CREATE_APPLICATION_DETAILS_T Type

Request for creating a application against a policy.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_create_application_details_t FORCE AUTHID CURRENT_USER IS OBJECT (
  name varchar2(32767),
  l_type varchar2(32767),
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_create_application_details_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_create_application_details_t (
    name varchar2,
    l_type varchar2
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE NOT FINAL;

Fields

Field Description

name

(required) Name of the application

l_type

(optional) Describes the type of Application.

Allowed values are: 'ICMP', 'ICMP_V6'

DBMS_CLOUD_OCI_NETWORK_FIREWALL_CREATE_APPLICATION_GROUP_DETAILS_T Type

Request for creating a application list in a policy.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_create_application_group_details_t FORCE AUTHID CURRENT_USER IS OBJECT (
  name varchar2(32767),
  apps dbms_cloud_oci_network_firewall_varchar2_tbl,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_create_application_group_details_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_create_application_group_details_t (
    name varchar2,
    apps dbms_cloud_oci_network_firewall_varchar2_tbl
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

name

(required) Name of the application Group.

apps

(required) Collection of application names.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_CREATE_DECRYPTION_PROFILE_DETAILS_T Type

Request for Decryption Profile used on the firewall policy rules.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_create_decryption_profile_details_t FORCE AUTHID CURRENT_USER IS OBJECT (
  l_type varchar2(32767),
  name varchar2(32767),
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_create_decryption_profile_details_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_create_decryption_profile_details_t (
    l_type varchar2,
    name varchar2
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE NOT FINAL;

Fields

Field Description

l_type

(required) Describes the type of Decryption Profile SslForwardProxy or SslInboundInspection.

Allowed values are: 'SSL_INBOUND_INSPECTION', 'SSL_FORWARD_PROXY'

name

(required) Name of the decryption profile.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_DECRYPTION_RULE_MATCH_CRITERIA_T Type

Match criteria used in Decryption Rule used on the firewall policy rules.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_decryption_rule_match_criteria_t FORCE AUTHID CURRENT_USER IS OBJECT (
  source_address dbms_cloud_oci_network_firewall_varchar2_tbl,
  destination_address dbms_cloud_oci_network_firewall_varchar2_tbl,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_decryption_rule_match_criteria_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_decryption_rule_match_criteria_t (
    source_address dbms_cloud_oci_network_firewall_varchar2_tbl,
    destination_address dbms_cloud_oci_network_firewall_varchar2_tbl
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

source_address

(optional) An array of IP address list names to be evaluated against the traffic source address.

destination_address

(optional) An array of IP address list names to be evaluated against the traffic destination address.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_RULE_POSITION_T Type

An object which defines the position of the rule.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_rule_position_t FORCE AUTHID CURRENT_USER IS OBJECT (
  before_rule varchar2(32767),
  after_rule varchar2(32767),
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_rule_position_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_rule_position_t (
    before_rule varchar2,
    after_rule varchar2
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

before_rule

(optional) Identifier for rule before which this rule lies.

after_rule

(optional) Identifier for rule after which this rule lies.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_CREATE_DECRYPTION_RULE_DETAILS_T Type

Request for creating Decryption Rule used in the firewall policy rules. A Decryption Rule is used to define which traffic should be decrypted by the firewall, and how it should do so.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_create_decryption_rule_details_t FORCE AUTHID CURRENT_USER IS OBJECT (
  name varchar2(32767),
  condition dbms_cloud_oci_network_firewall_decryption_rule_match_criteria_t,
  action varchar2(32767),
  decryption_profile varchar2(32767),
  secret varchar2(32767),
  position dbms_cloud_oci_network_firewall_rule_position_t,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_create_decryption_rule_details_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_create_decryption_rule_details_t (
    name varchar2,
    condition dbms_cloud_oci_network_firewall_decryption_rule_match_criteria_t,
    action varchar2,
    decryption_profile varchar2,
    secret varchar2,
    position dbms_cloud_oci_network_firewall_rule_position_t
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

name

(required) Name for the decryption rule, must be unique within the policy.

condition

(required)

action

(required) Action: * NO_DECRYPT - Matching traffic is not decrypted. * DECRYPT - Matching traffic is decrypted with the specified `secret` according to the specified `decryptionProfile`.

Allowed values are: 'NO_DECRYPT', 'DECRYPT'

decryption_profile

(optional) The name of the decryption profile to use.

secret

(optional) The name of a mapped secret. Its `type` must match that of the specified decryption profile.

position

(optional)

DBMS_CLOUD_OCI_NETWORK_FIREWALL_CREATE_ICMP6_APPLICATION_DETAILS_T Type

Request for ICMP6 Application used on the firewall policy rules.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_create_icmp6_application_details_t FORCE AUTHID CURRENT_USER UNDER dbms_cloud_oci_network_firewall_create_application_details_t (
  icmp_type number,
  icmp_code number,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_create_icmp6_application_details_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_create_icmp6_application_details_t (
    name varchar2,
    l_type varchar2,
    icmp_type number,
    icmp_code number
  ) RETURN SELF AS RESULT
);

dbms_cloud_oci_network_firewall_create_icmp6_application_details_t is a subtype of the dbms_cloud_oci_network_firewall_create_application_details_t type.

Fields

Field Description

icmp_type

(required) The value of the ICMP6 message Type field as defined by RFC 4443.

icmp_code

(optional) The value of the ICMP6 message Code (subtype) field as defined by RFC 4443.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_CREATE_ICMP_APPLICATION_DETAILS_T Type

Request for ICMP Application used on the firewall policy rules.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_create_icmp_application_details_t FORCE AUTHID CURRENT_USER UNDER dbms_cloud_oci_network_firewall_create_application_details_t (
  icmp_type number,
  icmp_code number,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_create_icmp_application_details_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_create_icmp_application_details_t (
    name varchar2,
    l_type varchar2,
    icmp_type number,
    icmp_code number
  ) RETURN SELF AS RESULT
);

dbms_cloud_oci_network_firewall_create_icmp_application_details_t is a subtype of the dbms_cloud_oci_network_firewall_create_application_details_t type.

Fields

Field Description

icmp_type

(required) The value of the ICMP message Type field as defined by RFC 792.

icmp_code

(optional) The value of the ICMP message Code (subtype) field as defined by RFC 792.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_CREATE_MAPPED_SECRET_DETAILS_T Type

The Request for creating the Mapped Secret

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_create_mapped_secret_details_t FORCE AUTHID CURRENT_USER IS OBJECT (
  name varchar2(32767),
  source varchar2(32767),
  l_type varchar2(32767),
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_create_mapped_secret_details_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_create_mapped_secret_details_t (
    name varchar2,
    source varchar2,
    l_type varchar2
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE NOT FINAL;

Fields

Field Description

name

(required) Unique name to identify the group of urls to be used in the policy rules.

source

(required) Source of the secrets, where the secrets are stored.

l_type

(required) Type of the secrets mapped based on the policy. * `SSL_INBOUND_INSPECTION`: For Inbound inspection of SSL traffic. * `SSL_FORWARD_PROXY`: For forward proxy certificates for SSL inspection.

Allowed values are: 'SSL_INBOUND_INSPECTION', 'SSL_FORWARD_PROXY'

DBMS_CLOUD_OCI_NETWORK_FIREWALL_CREATE_NETWORK_FIREWALL_DETAILS_T Type

The information about new Network Firewall.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_create_network_firewall_details_t FORCE AUTHID CURRENT_USER IS OBJECT (
  display_name varchar2(32767),
  compartment_id varchar2(32767),
  subnet_id varchar2(32767),
  availability_domain varchar2(32767),
  network_firewall_policy_id varchar2(32767),
  ipv4_address varchar2(32767),
  ipv6_address varchar2(32767),
  network_security_group_ids dbms_cloud_oci_network_firewall_varchar2_tbl,
  freeform_tags json_element_t,
  defined_tags json_element_t,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_create_network_firewall_details_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_create_network_firewall_details_t (
    display_name varchar2,
    compartment_id varchar2,
    subnet_id varchar2,
    availability_domain varchar2,
    network_firewall_policy_id varchar2,
    ipv4_address varchar2,
    ipv6_address varchar2,
    network_security_group_ids dbms_cloud_oci_network_firewall_varchar2_tbl,
    freeform_tags json_element_t,
    defined_tags json_element_t
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

display_name

(optional) A user-friendly name for the Network Firewall. Does not have to be unique, and it's changeable. Avoid entering confidential information.

compartment_id

(required) The OCID of the compartment containing the Network Firewall.

subnet_id

(required) The OCID of the subnet associated with the Network Firewall.

availability_domain

(optional) Availability Domain where Network Firewall instance is created. To get a list of availability domains for a tenancy, use LIST_AVAILABILITY_DOMAINS Function operation. Example: `kIdk:PHX-AD-1`

network_firewall_policy_id

(required) The OCID of the Network Firewall Policy.

ipv4_address

(optional) IPv4 address for the Network Firewall.

ipv6_address

(optional) IPv6 address for the Network Firewall.

network_security_group_ids

(optional) An array of network security groups OCID associated with the Network Firewall.

freeform_tags

(optional) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: `{\"Department\": \"Finance\"}`

defined_tags

(optional) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: `{\"Operations\": {\"CostCenter\": \"42\"}}`

DBMS_CLOUD_OCI_NETWORK_FIREWALL_CREATE_NETWORK_FIREWALL_POLICY_DETAILS_T Type

Request data required to create a network firewall policy.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_create_network_firewall_policy_details_t FORCE AUTHID CURRENT_USER IS OBJECT (
  display_name varchar2(32767),
  compartment_id varchar2(32767),
  freeform_tags json_element_t,
  defined_tags json_element_t,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_create_network_firewall_policy_details_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_create_network_firewall_policy_details_t (
    display_name varchar2,
    compartment_id varchar2,
    freeform_tags json_element_t,
    defined_tags json_element_t
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

display_name

(optional) A user-friendly optional name for the firewall policy. Avoid entering confidential information.

compartment_id

(required) The OCID of the compartment containing the NetworkFirewall Policy.

freeform_tags

(optional) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: `{\"Department\": \"Finance\"}`

defined_tags

(optional) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: `{\"Operations\": {\"CostCenter\": \"42\"}}`

DBMS_CLOUD_OCI_NETWORK_FIREWALL_SECURITY_RULE_MATCH_CRITERIA_T Type

Criteria to evaluate against network traffic. A match occurs when at least one item in the array associated with each specified property corresponds with the relevant aspect of the traffic.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_security_rule_match_criteria_t FORCE AUTHID CURRENT_USER IS OBJECT (
  source_address dbms_cloud_oci_network_firewall_varchar2_tbl,
  destination_address dbms_cloud_oci_network_firewall_varchar2_tbl,
  application dbms_cloud_oci_network_firewall_varchar2_tbl,
  service dbms_cloud_oci_network_firewall_varchar2_tbl,
  url dbms_cloud_oci_network_firewall_varchar2_tbl,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_security_rule_match_criteria_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_security_rule_match_criteria_t (
    source_address dbms_cloud_oci_network_firewall_varchar2_tbl,
    destination_address dbms_cloud_oci_network_firewall_varchar2_tbl,
    application dbms_cloud_oci_network_firewall_varchar2_tbl,
    service dbms_cloud_oci_network_firewall_varchar2_tbl,
    url dbms_cloud_oci_network_firewall_varchar2_tbl
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

source_address

(optional) An array of IP address list names to be evaluated against the traffic source address.

destination_address

(optional) An array of IP address list names to be evaluated against the traffic destination address.

application

(optional) An array of application list names to be evaluated against the traffic protocol and protocol-specific parameters.

service

(optional) An array of service list names to be evaluated against the traffic protocol and protocol-specific parameters.

url

(optional) An array of URL pattern list names to be evaluated against the HTTP(S) request target.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_CREATE_SECURITY_RULE_DETAILS_T Type

Reqeust for creating Security Rule used in the firewall policy rules. Security Rules determine whether to block or allow a session based on traffic attributes, such as the source and destination IP address, protocol/port, and the HTTP(S) target URL.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_create_security_rule_details_t FORCE AUTHID CURRENT_USER IS OBJECT (
  name varchar2(32767),
  condition dbms_cloud_oci_network_firewall_security_rule_match_criteria_t,
  action varchar2(32767),
  inspection varchar2(32767),
  position dbms_cloud_oci_network_firewall_rule_position_t,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_create_security_rule_details_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_create_security_rule_details_t (
    name varchar2,
    condition dbms_cloud_oci_network_firewall_security_rule_match_criteria_t,
    action varchar2,
    inspection varchar2,
    position dbms_cloud_oci_network_firewall_rule_position_t
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

name

(required) Name for the Security rule, must be unique within the policy.

condition

(required)

action

(required) Types of Action on the Traffic flow. * ALLOW - Allows the traffic. * DROP - Silently drops the traffic, e.g. without sending a TCP reset. * REJECT - Rejects the traffic, sending a TCP reset to client and/or server as applicable. * INSPECT - Inspects traffic for vulnerability as specified in `inspection`, which may result in rejection.

Allowed values are: 'ALLOW', 'DROP', 'REJECT', 'INSPECT'

inspection

(optional) Type of inspection to affect the Traffic flow. This is only applicable if action is INSPECT. * INTRUSION_DETECTION - Intrusion Detection. * INTRUSION_PREVENTION - Intrusion Detection and Prevention. Traffic classified as potentially malicious will be rejected as described in `type`.

Allowed values are: 'INTRUSION_DETECTION', 'INTRUSION_PREVENTION'

position

(optional)

DBMS_CLOUD_OCI_NETWORK_FIREWALL_CREATE_SERVICE_DETAILS_T Type

Request for creating a service against a policy.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_create_service_details_t FORCE AUTHID CURRENT_USER IS OBJECT (
  name varchar2(32767),
  l_type varchar2(32767),
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_create_service_details_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_create_service_details_t (
    name varchar2,
    l_type varchar2
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE NOT FINAL;

Fields

Field Description

name

(required) Name of the service

l_type

(optional) Describes the type of Service.

Allowed values are: 'TCP_SERVICE', 'UDP_SERVICE'

DBMS_CLOUD_OCI_NETWORK_FIREWALL_CREATE_SERVICE_LIST_DETAILS_T Type

Request for creating a service list in a policy.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_create_service_list_details_t FORCE AUTHID CURRENT_USER IS OBJECT (
  name varchar2(32767),
  services dbms_cloud_oci_network_firewall_varchar2_tbl,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_create_service_list_details_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_create_service_list_details_t (
    name varchar2,
    services dbms_cloud_oci_network_firewall_varchar2_tbl
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

name

(required) Name of the service Group.

services

(required) Collection of service names.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_CREATE_SSL_FORWARD_PROXY_PROFILE_DETAILS_T Type

Request for creating SSLForwardProxy used on the firewall policy rules.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_create_ssl_forward_proxy_profile_details_t FORCE AUTHID CURRENT_USER UNDER dbms_cloud_oci_network_firewall_create_decryption_profile_details_t (
  is_expired_certificate_blocked number,
  is_untrusted_issuer_blocked number,
  is_revocation_status_timeout_blocked number,
  is_unsupported_version_blocked number,
  is_unsupported_cipher_blocked number,
  is_unknown_revocation_status_blocked number,
  are_certificate_extensions_restricted number,
  is_auto_include_alt_name number,
  is_out_of_capacity_blocked number,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_create_ssl_forward_proxy_profile_details_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_create_ssl_forward_proxy_profile_details_t (
    l_type varchar2,
    name varchar2,
    is_expired_certificate_blocked number,
    is_untrusted_issuer_blocked number,
    is_revocation_status_timeout_blocked number,
    is_unsupported_version_blocked number,
    is_unsupported_cipher_blocked number,
    is_unknown_revocation_status_blocked number,
    are_certificate_extensions_restricted number,
    is_auto_include_alt_name number,
    is_out_of_capacity_blocked number
  ) RETURN SELF AS RESULT
);

dbms_cloud_oci_network_firewall_create_ssl_forward_proxy_profile_details_t is a subtype of the dbms_cloud_oci_network_firewall_create_decryption_profile_details_t type.

Fields

Field Description

is_expired_certificate_blocked

(optional) Whether to block sessions if server's certificate is expired.

is_untrusted_issuer_blocked

(optional) Whether to block sessions if server's certificate is issued by an untrusted certificate authority (CA).

is_revocation_status_timeout_blocked

(optional) Whether to block sessions if the revocation status check for server's certificate does not succeed within the maximum allowed time (defaulting to 5 seconds).

is_unsupported_version_blocked

(optional) Whether to block sessions if SSL version is not supported.

is_unsupported_cipher_blocked

(optional) Whether to block sessions if SSL cipher suite is not supported.

is_unknown_revocation_status_blocked

(optional) Whether to block sessions if the revocation status check for server's certificate results in \"unknown\".

are_certificate_extensions_restricted

(optional) Whether to block sessions if the server's certificate uses extensions other than key usage and/or extended key usage.

is_auto_include_alt_name

(optional) Whether to automatically append SAN to impersonating certificate if server certificate is missing SAN.

is_out_of_capacity_blocked

(optional) Whether to block sessions if the firewall is temporarily unable to decrypt their traffic.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_CREATE_SSL_INBOUND_INSPECTION_PROFILE_DETAILS_T Type

Request for creating SSLInboundInspection used on the firewall policy rules.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_create_ssl_inbound_inspection_profile_details_t FORCE AUTHID CURRENT_USER UNDER dbms_cloud_oci_network_firewall_create_decryption_profile_details_t (
  is_unsupported_version_blocked number,
  is_unsupported_cipher_blocked number,
  is_out_of_capacity_blocked number,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_create_ssl_inbound_inspection_profile_details_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_create_ssl_inbound_inspection_profile_details_t (
    l_type varchar2,
    name varchar2,
    is_unsupported_version_blocked number,
    is_unsupported_cipher_blocked number,
    is_out_of_capacity_blocked number
  ) RETURN SELF AS RESULT
);

dbms_cloud_oci_network_firewall_create_ssl_inbound_inspection_profile_details_t is a subtype of the dbms_cloud_oci_network_firewall_create_decryption_profile_details_t type.

Fields

Field Description

is_unsupported_version_blocked

(optional) Whether to block sessions if SSL version is not supported.

is_unsupported_cipher_blocked

(optional) Whether to block sessions if SSL cipher suite is not supported.

is_out_of_capacity_blocked

(optional) Whether to block sessions if the firewall is temporarily unable to decrypt their traffic.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_PORT_RANGE_T Type

A Port Range which can be used for the running service. It uses port information.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_port_range_t FORCE AUTHID CURRENT_USER IS OBJECT (
  minimum_port number,
  maximum_port number,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_port_range_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_port_range_t (
    minimum_port number,
    maximum_port number
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

minimum_port

(required) The minimum port in the range (inclusive), or the sole port of a single-port range.

maximum_port

(optional) The maximum port in the range (inclusive), which may be absent for a single-port range.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_PORT_RANGE_TBL Type

Nested table type of dbms_cloud_oci_network_firewall_port_range_t.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_port_range_tbl FORCE IS TABLE OF (dbms_cloud_oci_network_firewall_port_range_t) NOT PERSISTABLE;

DBMS_CLOUD_OCI_NETWORK_FIREWALL_CREATE_TCP_SERVICE_DETAILS_T Type

Request for TCP Service used on the firewall policy rules.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_create_tcp_service_details_t FORCE AUTHID CURRENT_USER UNDER dbms_cloud_oci_network_firewall_create_service_details_t (
  port_ranges dbms_cloud_oci_network_firewall_port_range_tbl,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_create_tcp_service_details_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_create_tcp_service_details_t (
    name varchar2,
    l_type varchar2,
    port_ranges dbms_cloud_oci_network_firewall_port_range_tbl
  ) RETURN SELF AS RESULT
);

dbms_cloud_oci_network_firewall_create_tcp_service_details_t is a subtype of the dbms_cloud_oci_network_firewall_create_service_details_t type.

Fields

Field Description

port_ranges

(required) List of port-ranges used.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_CREATE_UDP_SERVICE_DETAILS_T Type

Request for UDP Service used on the firewall policy rules.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_create_udp_service_details_t FORCE AUTHID CURRENT_USER UNDER dbms_cloud_oci_network_firewall_create_service_details_t (
  port_ranges dbms_cloud_oci_network_firewall_port_range_tbl,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_create_udp_service_details_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_create_udp_service_details_t (
    name varchar2,
    l_type varchar2,
    port_ranges dbms_cloud_oci_network_firewall_port_range_tbl
  ) RETURN SELF AS RESULT
);

dbms_cloud_oci_network_firewall_create_udp_service_details_t is a subtype of the dbms_cloud_oci_network_firewall_create_service_details_t type.

Fields

Field Description

port_ranges

(required) List of port-ranges to be used.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_URL_PATTERN_T Type

Pattern describing a URL or set of URLs.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_url_pattern_t FORCE AUTHID CURRENT_USER IS OBJECT (
  l_type varchar2(32767),
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_url_pattern_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_url_pattern_t (
    l_type varchar2
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE NOT FINAL;

Fields

Field Description

l_type

(required) The type of pattern. * SIMPLE - A simple pattern with optional subdomain and/or path suffix wildcards.

Allowed values are: 'SIMPLE'

DBMS_CLOUD_OCI_NETWORK_FIREWALL_URL_PATTERN_TBL Type

Nested table type of dbms_cloud_oci_network_firewall_url_pattern_t.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_url_pattern_tbl FORCE IS TABLE OF (dbms_cloud_oci_network_firewall_url_pattern_t) NOT PERSISTABLE;

DBMS_CLOUD_OCI_NETWORK_FIREWALL_CREATE_URL_LIST_DETAILS_T Type

The Request for creating the URL List

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_create_url_list_details_t FORCE AUTHID CURRENT_USER IS OBJECT (
  name varchar2(32767),
  urls dbms_cloud_oci_network_firewall_url_pattern_tbl,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_create_url_list_details_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_create_url_list_details_t (
    name varchar2,
    urls dbms_cloud_oci_network_firewall_url_pattern_tbl
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

name

(required) Unique name to identify the group of urls to be used in the policy rules.

urls

(required) List of urls.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_CREATE_VAULT_MAPPED_SECRET_DETAILS_T Type

The request details to be created in the Vault Mapped Secret for the policy.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_create_vault_mapped_secret_details_t FORCE AUTHID CURRENT_USER UNDER dbms_cloud_oci_network_firewall_create_mapped_secret_details_t (
  vault_secret_id varchar2(32767),
  version_number number,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_create_vault_mapped_secret_details_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_create_vault_mapped_secret_details_t (
    name varchar2,
    source varchar2,
    l_type varchar2,
    vault_secret_id varchar2,
    version_number number
  ) RETURN SELF AS RESULT
);

dbms_cloud_oci_network_firewall_create_vault_mapped_secret_details_t is a subtype of the dbms_cloud_oci_network_firewall_create_mapped_secret_details_t type.

Fields

Field Description

vault_secret_id

(required) OCID for the Vault Secret to be used.

version_number

(required) Version number of the secret to be used.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_DECRYPTION_PROFILE_T Type

Decryption Profile used on the firewall policy rules.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_decryption_profile_t FORCE AUTHID CURRENT_USER IS OBJECT (
  l_type varchar2(32767),
  name varchar2(32767),
  parent_resource_id varchar2(32767),
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_decryption_profile_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_decryption_profile_t (
    l_type varchar2,
    name varchar2,
    parent_resource_id varchar2
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE NOT FINAL;

Fields

Field Description

l_type

(required) Describes the type of Decryption Profile SslForwardProxy or SslInboundInspection.

Allowed values are: 'SSL_INBOUND_INSPECTION', 'SSL_FORWARD_PROXY'

name

(required) Unique Name of the decryption profile.

parent_resource_id

(required) OCID of the Network Firewall Policy this decryption profile belongs to.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_DECRYPTION_PROFILE_SUMMARY_T Type

Decryption Profile used on the firewall policy rules.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_decryption_profile_summary_t FORCE AUTHID CURRENT_USER IS OBJECT (
  name varchar2(32767),
  l_type varchar2(32767),
  parent_resource_id varchar2(32767),
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_decryption_profile_summary_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_decryption_profile_summary_t (
    name varchar2,
    l_type varchar2,
    parent_resource_id varchar2
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

name

(required) Name of the secret.

l_type

(required) Type of the secrets mapped based on the policy. * `SSL_INBOUND_INSPECTION`: For Inbound inspection of SSL traffic. * `SSL_FORWARD_PROXY`: For forward proxy certificates for SSL inspection.

Allowed values are: 'SSL_INBOUND_INSPECTION', 'SSL_FORWARD_PROXY'

parent_resource_id

(required) OCID of the Network Firewall Policy this decryption profile belongs to.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_DECRYPTION_PROFILE_SUMMARY_TBL Type

Nested table type of dbms_cloud_oci_network_firewall_decryption_profile_summary_t.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_decryption_profile_summary_tbl FORCE IS TABLE OF (dbms_cloud_oci_network_firewall_decryption_profile_summary_t) NOT PERSISTABLE;

DBMS_CLOUD_OCI_NETWORK_FIREWALL_DECRYPTION_PROFILE_SUMMARY_COLLECTION_T Type

Collection of Decryption Profiles in the network firewall policy

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_decryption_profile_summary_collection_t FORCE AUTHID CURRENT_USER IS OBJECT (
  items dbms_cloud_oci_network_firewall_decryption_profile_summary_tbl,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_decryption_profile_summary_collection_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_decryption_profile_summary_collection_t (
    items dbms_cloud_oci_network_firewall_decryption_profile_summary_tbl
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

items

(required) Collection of Decryption Profiles.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_DECRYPTION_RULE_T Type

Decryption Rule used in the firewall policy rules. A Decryption Rule is used to define which traffic should be decrypted by the firewall, and how it should do so.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_decryption_rule_t FORCE AUTHID CURRENT_USER IS OBJECT (
  name varchar2(32767),
  condition dbms_cloud_oci_network_firewall_decryption_rule_match_criteria_t,
  action varchar2(32767),
  decryption_profile varchar2(32767),
  secret varchar2(32767),
  position dbms_cloud_oci_network_firewall_rule_position_t,
  parent_resource_id varchar2(32767),
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_decryption_rule_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_decryption_rule_t (
    name varchar2,
    condition dbms_cloud_oci_network_firewall_decryption_rule_match_criteria_t,
    action varchar2,
    decryption_profile varchar2,
    secret varchar2,
    position dbms_cloud_oci_network_firewall_rule_position_t,
    parent_resource_id varchar2
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

name

(required) Name for the decryption rule, must be unique within the policy.

condition

(required)

action

(required) Action: * NO_DECRYPT - Matching traffic is not decrypted. * DECRYPT - Matching traffic is decrypted with the specified `secret` according to the specified `decryptionProfile`.

Allowed values are: 'NO_DECRYPT', 'DECRYPT'

decryption_profile

(optional) The name of the decryption profile to use.

secret

(optional) The name of a mapped secret. Its `type` must match that of the specified decryption profile.

position

(optional)

parent_resource_id

(required) OCID of the Network Firewall Policy this decryption rule belongs to.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_DECRYPTION_RULE_SUMMARY_T Type

Summary for Decryption Rule used in the firewall policy rules. A Decryption Rule is used to define which traffic should be decrypted by the firewall, and how it should do so.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_decryption_rule_summary_t FORCE AUTHID CURRENT_USER IS OBJECT (
  name varchar2(32767),
  action varchar2(32767),
  decryption_profile varchar2(32767),
  secret varchar2(32767),
  priority_order number,
  parent_resource_id varchar2(32767),
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_decryption_rule_summary_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_decryption_rule_summary_t (
    name varchar2,
    action varchar2,
    decryption_profile varchar2,
    secret varchar2,
    priority_order number,
    parent_resource_id varchar2
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

name

(required) Name for the decryption rule, must be unique within the policy.

action

(required) Action: * NO_DECRYPT - Matching traffic is not decrypted. * DECRYPT - Matching traffic is decrypted with the specified `secret` according to the specified `decryptionProfile`.

Allowed values are: 'NO_DECRYPT', 'DECRYPT'

decryption_profile

(required) The name of the decryption profile to use.

secret

(required) The name of a mapped secret. Its `type` must match that of the specified decryption profile.

priority_order

(required) The priority order in which this rule should be evaluated.

parent_resource_id

(required) OCID of the Network Firewall Policy this application belongs to.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_DECRYPTION_RULE_SUMMARY_TBL Type

Nested table type of dbms_cloud_oci_network_firewall_decryption_rule_summary_t.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_decryption_rule_summary_tbl FORCE IS TABLE OF (dbms_cloud_oci_network_firewall_decryption_rule_summary_t) NOT PERSISTABLE;

DBMS_CLOUD_OCI_NETWORK_FIREWALL_DECRYPTION_RULE_SUMMARY_COLLECTION_T Type

Collection of Decryption Rule Summaries in the network firewall policy

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_decryption_rule_summary_collection_t FORCE AUTHID CURRENT_USER IS OBJECT (
  items dbms_cloud_oci_network_firewall_decryption_rule_summary_tbl,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_decryption_rule_summary_collection_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_decryption_rule_summary_collection_t (
    items dbms_cloud_oci_network_firewall_decryption_rule_summary_tbl
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

items

(required) Collection of Decryption Rule Summaries.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_ERROR_T Type

Error Information.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_error_t FORCE AUTHID CURRENT_USER IS OBJECT (
  code varchar2(32767),
  message varchar2(32767),
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_error_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_error_t (
    code varchar2,
    message varchar2
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

code

(required) A short error code that defines the error, meant for programmatic parsing.

message

(required) A human-readable error string.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_ICMP6_APPLICATION_T Type

ICMP6 Application used on the firewall policy rules.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_icmp6_application_t FORCE AUTHID CURRENT_USER UNDER dbms_cloud_oci_network_firewall_application_t (
  icmp_type number,
  icmp_code number,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_icmp6_application_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_icmp6_application_t (
    l_type varchar2,
    name varchar2,
    parent_resource_id varchar2,
    icmp_type number,
    icmp_code number
  ) RETURN SELF AS RESULT
);

dbms_cloud_oci_network_firewall_icmp6_application_t is a subtype of the dbms_cloud_oci_network_firewall_application_t type.

Fields

Field Description

icmp_type

(required) The value of the ICMP6 message Type field as defined by RFC 4443.

icmp_code

(optional) The value of the ICMP6 message Code (subtype) field as defined by RFC 4443.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_ICMP6_APPLICATION_SUMMARY_T Type

Summary object for ICMP V6 application element in the network firewall policy.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_icmp6_application_summary_t FORCE AUTHID CURRENT_USER UNDER dbms_cloud_oci_network_firewall_application_summary_t (
  icmp_type number,
  icmp_code number,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_icmp6_application_summary_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_icmp6_application_summary_t (
    l_type varchar2,
    name varchar2,
    parent_resource_id varchar2,
    icmp_type number,
    icmp_code number
  ) RETURN SELF AS RESULT
);

dbms_cloud_oci_network_firewall_icmp6_application_summary_t is a subtype of the dbms_cloud_oci_network_firewall_application_summary_t type.

Fields

Field Description

icmp_type

(required) The value of the ICMP message Type field as defined by RFC 792.

icmp_code

(optional) The value of the ICMP message Code (subtype) field as defined by RFC 792.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_ICMP_APPLICATION_T Type

ICMP Application used on the firewall policy rules.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_icmp_application_t FORCE AUTHID CURRENT_USER UNDER dbms_cloud_oci_network_firewall_application_t (
  icmp_type number,
  icmp_code number,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_icmp_application_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_icmp_application_t (
    l_type varchar2,
    name varchar2,
    parent_resource_id varchar2,
    icmp_type number,
    icmp_code number
  ) RETURN SELF AS RESULT
);

dbms_cloud_oci_network_firewall_icmp_application_t is a subtype of the dbms_cloud_oci_network_firewall_application_t type.

Fields

Field Description

icmp_type

(required) The value of the ICMP message Type field as defined by RFC 792.

icmp_code

(optional) The value of the ICMP message Code (subtype) field as defined by RFC 792.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_ICMP_APPLICATION_SUMMARY_T Type

Summary object for ICMP application element in the network firewall policy.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_icmp_application_summary_t FORCE AUTHID CURRENT_USER UNDER dbms_cloud_oci_network_firewall_application_summary_t (
  icmp_type number,
  icmp_code number,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_icmp_application_summary_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_icmp_application_summary_t (
    l_type varchar2,
    name varchar2,
    parent_resource_id varchar2,
    icmp_type number,
    icmp_code number
  ) RETURN SELF AS RESULT
);

dbms_cloud_oci_network_firewall_icmp_application_summary_t is a subtype of the dbms_cloud_oci_network_firewall_application_summary_t type.

Fields

Field Description

icmp_type

(required) The value of the ICMP message Type field as defined by RFC 792.

icmp_code

(optional) The value of the ICMP message Code (subtype) field as defined by RFC 792.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_MAPPED_SECRET_T Type

Mapped secret used on the firewall policy rules.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_mapped_secret_t FORCE AUTHID CURRENT_USER IS OBJECT (
  name varchar2(32767),
  source varchar2(32767),
  l_type varchar2(32767),
  parent_resource_id varchar2(32767),
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_mapped_secret_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_mapped_secret_t (
    name varchar2,
    source varchar2,
    l_type varchar2,
    parent_resource_id varchar2
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE NOT FINAL;

Fields

Field Description

name

(required) Name of the secret.

source

(required) Source of the secrets, where the secrets are stored.

Allowed values are: 'OCI_VAULT'

l_type

(required) Type of the secrets mapped based on the policy. * `SSL_INBOUND_INSPECTION`: For Inbound inspection of SSL traffic. * `SSL_FORWARD_PROXY`: For forward proxy certificates for SSL inspection.

Allowed values are: 'SSL_INBOUND_INSPECTION', 'SSL_FORWARD_PROXY'

parent_resource_id

(required) OCID of the Network Firewall Policy this Mapped Secret belongs to.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_MAPPED_SECRET_SUMMARY_T Type

Mapped secret used on the firewall policy rules.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_mapped_secret_summary_t FORCE AUTHID CURRENT_USER IS OBJECT (
  name varchar2(32767),
  source varchar2(32767),
  l_type varchar2(32767),
  parent_resource_id varchar2(32767),
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_mapped_secret_summary_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_mapped_secret_summary_t (
    name varchar2,
    source varchar2,
    l_type varchar2,
    parent_resource_id varchar2
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

name

(required) Name of the secret.

source

(required) Source of the secrets, where the secrets are stored.

l_type

(required) Type of the secrets mapped based on the policy. * `SSL_INBOUND_INSPECTION`: For Inbound inspection of SSL traffic. * `SSL_FORWARD_PROXY`: For forward proxy certificates for SSL inspection.

Allowed values are: 'SSL_INBOUND_INSPECTION', 'SSL_FORWARD_PROXY'

parent_resource_id

(required) OCID of the Network Firewall Policy this mapped secret belongs to.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_MAPPED_SECRET_SUMMARY_TBL Type

Nested table type of dbms_cloud_oci_network_firewall_mapped_secret_summary_t.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_mapped_secret_summary_tbl FORCE IS TABLE OF (dbms_cloud_oci_network_firewall_mapped_secret_summary_t) NOT PERSISTABLE;

DBMS_CLOUD_OCI_NETWORK_FIREWALL_MAPPED_SECRET_SUMMARY_COLLECTION_T Type

Collection of Mapped Secrets in the network firewall policy

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_mapped_secret_summary_collection_t FORCE AUTHID CURRENT_USER IS OBJECT (
  items dbms_cloud_oci_network_firewall_mapped_secret_summary_tbl,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_mapped_secret_summary_collection_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_mapped_secret_summary_collection_t (
    items dbms_cloud_oci_network_firewall_mapped_secret_summary_tbl
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

items

(required) Collection of Mapped Secrets.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_NETWORK_FIREWALL_T Type

A network firewall is a security resource that exists in a subnet of your choice and controls incoming and outgoing network traffic based on a set of security rules. Each firewall is associated with a policy. Traffic is routed to and from the firewall from resources such as internet gateways and dynamic routing gateways (DRGs). For more information, see Overview of Network Firewall

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_network_firewall_t FORCE AUTHID CURRENT_USER IS OBJECT (
  id varchar2(32767),
  compartment_id varchar2(32767),
  display_name varchar2(32767),
  subnet_id varchar2(32767),
  ipv4_address varchar2(32767),
  ipv6_address varchar2(32767),
  network_firewall_policy_id varchar2(32767),
  availability_domain varchar2(32767),
  network_security_group_ids dbms_cloud_oci_network_firewall_varchar2_tbl,
  time_created timestamp with time zone,
  time_updated timestamp with time zone,
  lifecycle_state varchar2(32767),
  lifecycle_details varchar2(32767),
  freeform_tags json_element_t,
  defined_tags json_element_t,
  system_tags json_element_t,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_network_firewall_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_network_firewall_t (
    id varchar2,
    compartment_id varchar2,
    display_name varchar2,
    subnet_id varchar2,
    ipv4_address varchar2,
    ipv6_address varchar2,
    network_firewall_policy_id varchar2,
    availability_domain varchar2,
    network_security_group_ids dbms_cloud_oci_network_firewall_varchar2_tbl,
    time_created timestamp with time zone,
    time_updated timestamp with time zone,
    lifecycle_state varchar2,
    lifecycle_details varchar2,
    freeform_tags json_element_t,
    defined_tags json_element_t,
    system_tags json_element_t
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

id

(required) The OCID of the Network Firewall resource.

compartment_id

(required) The OCID of the compartment containing the Network Firewall.

display_name

(required) A user-friendly name for the Network Firewall. Does not have to be unique, and it's changeable. Avoid entering confidential information.

subnet_id

(required) The OCID of the subnet associated with the Network Firewall.

ipv4_address

(optional) IPv4 address for the Network Firewall.

ipv6_address

(optional) IPv6 address for the Network Firewall.

network_firewall_policy_id

(required) The OCID of the Network Firewall Policy.

availability_domain

(optional) Availability Domain where Network Firewall instance is created. To get a list of availability domains for a tenancy, use the LIST_AVAILABILITY_DOMAINS Function operation. Example: `kIdk:PHX-AD-1`

network_security_group_ids

(optional) An array of network security groups OCID associated with the Network Firewall.

time_created

(required) The time at which the Network Firewall was created in the format defined by RFC3339. Example: `2016-08-25T21:10:29.600Z`

time_updated

(required) The time at which the Network Firewall was updated in the format defined by RFC3339. Example: `2016-08-25T21:10:29.600Z`

lifecycle_state

(required) The current state of the Network Firewall.

Allowed values are: 'CREATING', 'UPDATING', 'ACTIVE', 'DELETING', 'DELETED', 'FAILED', 'NEEDS_ATTENTION', 'ATTACHING', 'DETACHING'

lifecycle_details

(optional) A message describing the current state in more detail. For example, it can be used to provide actionable information for a resource in 'FAILED' state.

freeform_tags

(required) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: `{\"Department\": \"Finance\"}`

defined_tags

(required) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: `{\"Operations\": {\"CostCenter\": \"42\"}}`

system_tags

(optional) Usage of system tag keys. These predefined keys are scoped to namespaces. Example: `{\"orcl-cloud\": {\"free-tier-retained\": \"true\"}}`

DBMS_CLOUD_OCI_NETWORK_FIREWALL_NETWORK_FIREWALL_SUMMARY_T Type

Summary of the Network Firewall.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_network_firewall_summary_t FORCE AUTHID CURRENT_USER IS OBJECT (
  id varchar2(32767),
  compartment_id varchar2(32767),
  display_name varchar2(32767),
  subnet_id varchar2(32767),
  availability_domain varchar2(32767),
  ipv4_address varchar2(32767),
  ipv6_address varchar2(32767),
  network_firewall_policy_id varchar2(32767),
  time_created timestamp with time zone,
  time_updated timestamp with time zone,
  lifecycle_state varchar2(32767),
  lifecycle_details varchar2(32767),
  freeform_tags json_element_t,
  defined_tags json_element_t,
  system_tags json_element_t,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_network_firewall_summary_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_network_firewall_summary_t (
    id varchar2,
    compartment_id varchar2,
    display_name varchar2,
    subnet_id varchar2,
    availability_domain varchar2,
    ipv4_address varchar2,
    ipv6_address varchar2,
    network_firewall_policy_id varchar2,
    time_created timestamp with time zone,
    time_updated timestamp with time zone,
    lifecycle_state varchar2,
    lifecycle_details varchar2,
    freeform_tags json_element_t,
    defined_tags json_element_t,
    system_tags json_element_t
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

id

(required) The OCID of the Network Firewall resource.

compartment_id

(required) The OCID of the compartment containing the Network Firewall.

display_name

(required) A user-friendly name for the Network Firewall. Does not have to be unique, and it's changeable. Avoid entering confidential information.

subnet_id

(required) The OCID of the subnet associated with the Network Firewall.

availability_domain

(optional) Availability Domain where Network Firewall instance is created. To get a list of availability domains for a tenancy, use LIST_AVAILABILITY_DOMAINS Function operation. Example: `kIdk:PHX-AD-1`

ipv4_address

(optional) IPv4 address for the Network Firewall.

ipv6_address

(optional) IPv6 address for the Network Firewall.

network_firewall_policy_id

(required) The OCID of the Network Firewall Policy.

time_created

(required) The time instant at which the Network Firewall was created in the format defined by RFC3339. Example: `2016-08-25T21:10:29.600Z`

time_updated

(optional) The time instant at which the Network Firewall was updated in the format defined by RFC3339. Example: `2016-08-25T21:10:29.600Z`

lifecycle_state

(required) The current state of the Network Firewall.

Allowed values are: 'CREATING', 'UPDATING', 'ACTIVE', 'DELETING', 'DELETED', 'FAILED', 'NEEDS_ATTENTION', 'ATTACHING', 'DETACHING'

lifecycle_details

(optional) A message describing the current state in more detail. For example, can be used to provide actionable information for a resource in Failed state.

freeform_tags

(required) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: `{\"Department\": \"Finance\"}`

defined_tags

(required) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: `{\"Operations\": {\"CostCenter\": \"42\"}}`

system_tags

(optional) Usage of system tag keys. These predefined keys are scoped to namespaces. Example: `{\"orcl-cloud\": {\"free-tier-retained\": \"true\"}}`

DBMS_CLOUD_OCI_NETWORK_FIREWALL_NETWORK_FIREWALL_SUMMARY_TBL Type

Nested table type of dbms_cloud_oci_network_firewall_network_firewall_summary_t.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_network_firewall_summary_tbl FORCE IS TABLE OF (dbms_cloud_oci_network_firewall_network_firewall_summary_t) NOT PERSISTABLE;

DBMS_CLOUD_OCI_NETWORK_FIREWALL_NETWORK_FIREWALL_COLLECTION_T Type

A collection of NetworkFirewallSummary items.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_network_firewall_collection_t FORCE AUTHID CURRENT_USER IS OBJECT (
  items dbms_cloud_oci_network_firewall_network_firewall_summary_tbl,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_network_firewall_collection_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_network_firewall_collection_t (
    items dbms_cloud_oci_network_firewall_network_firewall_summary_tbl
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

items

(required) List of network firewalls.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_NETWORK_FIREWALL_POLICY_T Type

Description of NetworkFirewall Policy.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_network_firewall_policy_t FORCE AUTHID CURRENT_USER IS OBJECT (
  id varchar2(32767),
  compartment_id varchar2(32767),
  display_name varchar2(32767),
  time_created timestamp with time zone,
  time_updated timestamp with time zone,
  lifecycle_state varchar2(32767),
  lifecycle_details varchar2(32767),
  attached_network_firewall_count number,
  freeform_tags json_element_t,
  defined_tags json_element_t,
  system_tags json_element_t,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_network_firewall_policy_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_network_firewall_policy_t (
    id varchar2,
    compartment_id varchar2,
    display_name varchar2,
    time_created timestamp with time zone,
    time_updated timestamp with time zone,
    lifecycle_state varchar2,
    lifecycle_details varchar2,
    attached_network_firewall_count number,
    freeform_tags json_element_t,
    defined_tags json_element_t,
    system_tags json_element_t
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

id

(required) The OCID of the resource - Network Firewall Policy.

compartment_id

(required) The OCID of the compartment containing the NetworkFirewall Policy.

display_name

(required) A user-friendly optional name for the firewall policy. Avoid entering confidential information.

time_created

(required) The time instant at which the Network Firewall Policy was created in the format defined by RFC3339. Example: `2016-08-25T21:10:29.600Z`

time_updated

(required) The time instant at which the Network Firewall Policy was updated in the format defined by RFC3339. Example: `2016-08-25T21:10:29.600Z`

lifecycle_state

(required) The current state of the Network Firewall Policy.

Allowed values are: 'CREATING', 'UPDATING', 'ACTIVE', 'DELETING', 'DELETED', 'FAILED', 'NEEDS_ATTENTION', 'ATTACHING', 'DETACHING'

lifecycle_details

(optional) A message describing the current state in more detail. For example, can be used to provide actionable information for a resource in Failed state.

attached_network_firewall_count

(optional) Count of number of Network Firewall attached to the Policy.

freeform_tags

(required) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: `{\"Department\": \"Finance\"}`

defined_tags

(required) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: `{\"Operations\": {\"CostCenter\": \"42\"}}`

system_tags

(optional) Usage of system tag keys. These predefined keys are scoped to namespaces. Example: `{\"orcl-cloud\": {\"free-tier-retained\": \"true\"}}`

DBMS_CLOUD_OCI_NETWORK_FIREWALL_NETWORK_FIREWALL_POLICY_SUMMARY_T Type

Summary of the NetworkFirewall Policy.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_network_firewall_policy_summary_t FORCE AUTHID CURRENT_USER IS OBJECT (
  id varchar2(32767),
  compartment_id varchar2(32767),
  display_name varchar2(32767),
  time_created timestamp with time zone,
  time_updated timestamp with time zone,
  lifecycle_state varchar2(32767),
  lifecycle_details varchar2(32767),
  freeform_tags json_element_t,
  defined_tags json_element_t,
  system_tags json_element_t,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_network_firewall_policy_summary_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_network_firewall_policy_summary_t (
    id varchar2,
    compartment_id varchar2,
    display_name varchar2,
    time_created timestamp with time zone,
    time_updated timestamp with time zone,
    lifecycle_state varchar2,
    lifecycle_details varchar2,
    freeform_tags json_element_t,
    defined_tags json_element_t,
    system_tags json_element_t
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

id

(required) The OCID of the resource - Network Firewall Policy.

compartment_id

(required) The OCID of the compartment containing the NetworkFirewall Policy.

display_name

(required) A user-friendly optional name for the firewall policy. Avoid entering confidential information.

time_created

(required) The time instant at which the Network Firewall Policy was created in the format defined by RFC3339. Example: `2016-08-25T21:10:29.600Z`

time_updated

(optional) The time instant at which the Network Firewall Policy was updated in the format defined by RFC3339. Example: `2016-08-25T21:10:29.600Z`

lifecycle_state

(required) The current lifecycle state of the Network Firewall Policy.

Allowed values are: 'CREATING', 'UPDATING', 'ACTIVE', 'DELETING', 'DELETED', 'FAILED', 'NEEDS_ATTENTION', 'ATTACHING', 'DETACHING'

lifecycle_details

(optional) A message describing the current state in more detail. For example, can be used to provide actionable information for a resource in Failed state.

freeform_tags

(required) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: `{\"Department\": \"Finance\"}`

defined_tags

(required) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: `{\"Operations\": {\"CostCenter\": \"42\"}}`

system_tags

(optional) Usage of system tag keys. These predefined keys are scoped to namespaces. Example: `{\"orcl-cloud\": {\"free-tier-retained\": \"true\"}}`

DBMS_CLOUD_OCI_NETWORK_FIREWALL_NETWORK_FIREWALL_POLICY_SUMMARY_TBL Type

Nested table type of dbms_cloud_oci_network_firewall_network_firewall_policy_summary_t.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_network_firewall_policy_summary_tbl FORCE IS TABLE OF (dbms_cloud_oci_network_firewall_network_firewall_policy_summary_t) NOT PERSISTABLE;

DBMS_CLOUD_OCI_NETWORK_FIREWALL_NETWORK_FIREWALL_POLICY_SUMMARY_COLLECTION_T Type

Collection of Network Firewall Policies.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_network_firewall_policy_summary_collection_t FORCE AUTHID CURRENT_USER IS OBJECT (
  items dbms_cloud_oci_network_firewall_network_firewall_policy_summary_tbl,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_network_firewall_policy_summary_collection_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_network_firewall_policy_summary_collection_t (
    items dbms_cloud_oci_network_firewall_network_firewall_policy_summary_tbl
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

items

(required) Collection of network Firewall Policies.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_SECURITY_RULE_T Type

Security Rule used in the firewall policy rules. Security Rules determine whether to block or allow a session based on traffic attributes, such as the source and destination IP address, protocol/port, and the HTTP(S) target URL.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_security_rule_t FORCE AUTHID CURRENT_USER IS OBJECT (
  name varchar2(32767),
  condition dbms_cloud_oci_network_firewall_security_rule_match_criteria_t,
  action varchar2(32767),
  inspection varchar2(32767),
  position dbms_cloud_oci_network_firewall_rule_position_t,
  parent_resource_id varchar2(32767),
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_security_rule_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_security_rule_t (
    name varchar2,
    condition dbms_cloud_oci_network_firewall_security_rule_match_criteria_t,
    action varchar2,
    inspection varchar2,
    position dbms_cloud_oci_network_firewall_rule_position_t,
    parent_resource_id varchar2
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

name

(required) Name for the Security rule, must be unique within the policy.

condition

(required)

action

(required) Types of Action on the Traffic flow. * ALLOW - Allows the traffic. * DROP - Silently drops the traffic, e.g. without sending a TCP reset. * REJECT - Rejects the traffic, sending a TCP reset to client and/or server as applicable. * INSPECT - Inspects traffic for vulnerability as specified in `inspection`, which may result in rejection.

Allowed values are: 'ALLOW', 'DROP', 'REJECT', 'INSPECT'

inspection

(optional) Type of inspection to affect the Traffic flow. This is only applicable if action is INSPECT. * INTRUSION_DETECTION - Intrusion Detection. * INTRUSION_PREVENTION - Intrusion Detection and Prevention. Traffic classified as potentially malicious will be rejected as described in `type`.

Allowed values are: 'INTRUSION_DETECTION', 'INTRUSION_PREVENTION'

position

(optional)

parent_resource_id

(required) OCID of the Network Firewall Policy this security rule belongs to.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_SECURITY_RULE_SUMMARY_T Type

Summary for the Security Rule used in the firewall policy rules. Security Rules determine whether to block or allow a session based on traffic attributes, such as the source and destination IP address, protocol/port, and the HTTP(S) target URL.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_security_rule_summary_t FORCE AUTHID CURRENT_USER IS OBJECT (
  name varchar2(32767),
  action varchar2(32767),
  inspection varchar2(32767),
  priority_order number,
  parent_resource_id varchar2(32767),
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_security_rule_summary_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_security_rule_summary_t (
    name varchar2,
    action varchar2,
    inspection varchar2,
    priority_order number,
    parent_resource_id varchar2
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

name

(required) Name for the Security rule, must be unique within the policy.

action

(required) Types of Action on the Traffic flow. * ALLOW - Allows the traffic. * DROP - Silently drops the traffic, e.g. without sending a TCP reset. * REJECT - Rejects the traffic, sending a TCP reset to client and/or server as applicable. * INSPECT - Inspects traffic for vulnerability as specified in `inspection`, which may result in rejection.

Allowed values are: 'ALLOW', 'DROP', 'REJECT', 'INSPECT'

inspection

(optional) Type of inspection to affect the Traffic flow. This is only applicable if action is INSPECT. * INTRUSION_DETECTION - Intrusion Detection. * INTRUSION_PREVENTION - Intrusion Detection and Prevention. Traffic classified as potentially malicious will be rejected as described in `type`.

Allowed values are: 'INTRUSION_DETECTION', 'INTRUSION_PREVENTION'

priority_order

(required) The priority order in which this rule should be evaluated.

parent_resource_id

(required) OCID of the network firewall policy this security rule belongs to.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_SECURITY_RULE_SUMMARY_TBL Type

Nested table type of dbms_cloud_oci_network_firewall_security_rule_summary_t.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_security_rule_summary_tbl FORCE IS TABLE OF (dbms_cloud_oci_network_firewall_security_rule_summary_t) NOT PERSISTABLE;

DBMS_CLOUD_OCI_NETWORK_FIREWALL_SECURITY_RULE_SUMMARY_COLLECTION_T Type

Collection of Security Rule Summaries in the network firewall policy

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_security_rule_summary_collection_t FORCE AUTHID CURRENT_USER IS OBJECT (
  items dbms_cloud_oci_network_firewall_security_rule_summary_tbl,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_security_rule_summary_collection_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_security_rule_summary_collection_t (
    items dbms_cloud_oci_network_firewall_security_rule_summary_tbl
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

items

(required) Collection of Security Rule Summaries.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_SERVICE_T Type

A Service which can be used to identify the running service. It uses port & protocol information.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_service_t FORCE AUTHID CURRENT_USER IS OBJECT (
  l_type varchar2(32767),
  name varchar2(32767),
  parent_resource_id varchar2(32767),
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_service_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_service_t (
    l_type varchar2,
    name varchar2,
    parent_resource_id varchar2
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE NOT FINAL;

Fields

Field Description

l_type

(required) Describes the type of Service.

Allowed values are: 'TCP_SERVICE', 'UDP_SERVICE'

name

(required) Name of the service.

parent_resource_id

(required) OCID of the Network Firewall Policy this service belongs to.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_SERVICE_LIST_T Type

A group of services.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_service_list_t FORCE AUTHID CURRENT_USER IS OBJECT (
  name varchar2(32767),
  services dbms_cloud_oci_network_firewall_varchar2_tbl,
  total_services number,
  parent_resource_id varchar2(32767),
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_service_list_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_service_list_t (
    name varchar2,
    services dbms_cloud_oci_network_firewall_varchar2_tbl,
    total_services number,
    parent_resource_id varchar2
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

name

(required) Name of the service Group.

services

(required) List of services in the group.

total_services

(required) Count of total services in the given service List.

parent_resource_id

(required) OCID of the Network Firewall Policy this serviceList belongs to.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_SERVICE_LIST_SUMMARY_T Type

Summary object for service list in the network firewall policy.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_service_list_summary_t FORCE AUTHID CURRENT_USER IS OBJECT (
  name varchar2(32767),
  total_services number,
  parent_resource_id varchar2(32767),
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_service_list_summary_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_service_list_summary_t (
    name varchar2,
    total_services number,
    parent_resource_id varchar2
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

name

(required) Name of the service groups.

total_services

(required) Count of total services in the given service List.

parent_resource_id

(required) OCID of the Network Firewall Policy this application belongs to.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_SERVICE_LIST_SUMMARY_TBL Type

Nested table type of dbms_cloud_oci_network_firewall_service_list_summary_t.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_service_list_summary_tbl FORCE IS TABLE OF (dbms_cloud_oci_network_firewall_service_list_summary_t) NOT PERSISTABLE;

DBMS_CLOUD_OCI_NETWORK_FIREWALL_SERVICE_LIST_SUMMARY_COLLECTION_T Type

Collection of Service Lists in the network firewall policy

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_service_list_summary_collection_t FORCE AUTHID CURRENT_USER IS OBJECT (
  items dbms_cloud_oci_network_firewall_service_list_summary_tbl,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_service_list_summary_collection_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_service_list_summary_collection_t (
    items dbms_cloud_oci_network_firewall_service_list_summary_tbl
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

items

(required) List of service lists.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_SERVICE_SUMMARY_T Type

Summary object for service element in the network firewall policy.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_service_summary_t FORCE AUTHID CURRENT_USER IS OBJECT (
  l_type varchar2(32767),
  name varchar2(32767),
  parent_resource_id varchar2(32767),
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_service_summary_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_service_summary_t (
    l_type varchar2,
    name varchar2,
    parent_resource_id varchar2
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

l_type

(required) Describes the type of Service.

Allowed values are: 'TCP_SERVICE', 'UDP_SERVICE'

name

(required) Name of the service.

parent_resource_id

(required) OCID of the Network Firewall Policy this Service belongs to.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_SERVICE_SUMMARY_TBL Type

Nested table type of dbms_cloud_oci_network_firewall_service_summary_t.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_service_summary_tbl FORCE IS TABLE OF (dbms_cloud_oci_network_firewall_service_summary_t) NOT PERSISTABLE;

DBMS_CLOUD_OCI_NETWORK_FIREWALL_SERVICE_SUMMARY_COLLECTION_T Type

Collection of Services in the network firewall policy

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_service_summary_collection_t FORCE AUTHID CURRENT_USER IS OBJECT (
  items dbms_cloud_oci_network_firewall_service_summary_tbl,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_service_summary_collection_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_service_summary_collection_t (
    items dbms_cloud_oci_network_firewall_service_summary_tbl
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

items

(required) Collection of Services.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_SIMPLE_URL_PATTERN_T Type

Pattern describing an http/https URL or set thereof as a concatenation of optional host component and optional path component. `*.example.com` will match http://example.com/ and https://foo.example.com/foo?bar. `www.example.com/foo*` will match https://www.example.com/foo and http://www.exampe.com/foobar and https://www.example.com/foo/bar?baz, but not http://sub.www.example.com/foo or https://www.example.com/FOO. `*.example.com/foo*` will match http://example.com/foo and https://sub2.sub.example.com/foo/bar?baz, but not http://example.com/FOO.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_simple_url_pattern_t FORCE AUTHID CURRENT_USER UNDER dbms_cloud_oci_network_firewall_url_pattern_t (
  pattern varchar2(32767),
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_simple_url_pattern_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_simple_url_pattern_t (
    l_type varchar2,
    pattern varchar2
  ) RETURN SELF AS RESULT
);

dbms_cloud_oci_network_firewall_simple_url_pattern_t is a subtype of the dbms_cloud_oci_network_firewall_url_pattern_t type.

Fields

Field Description

pattern

(required) A string consisting of a concatenation of optional host component and optional path component. The host component may start with `*.` to match the case-insensitive domain and all its subdomains. The path component must start with a `/`, and may end with `*` to match all paths of which it is a case-sensitive prefix. A missing host component matches all request domains, and a missing path component matches all request paths. An empty value matches all requests.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_SSL_FORWARD_PROXY_PROFILE_T Type

SSLForwardProxy used on the firewall policy rules.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_ssl_forward_proxy_profile_t FORCE AUTHID CURRENT_USER UNDER dbms_cloud_oci_network_firewall_decryption_profile_t (
  is_expired_certificate_blocked number,
  is_untrusted_issuer_blocked number,
  is_revocation_status_timeout_blocked number,
  is_unsupported_version_blocked number,
  is_unsupported_cipher_blocked number,
  is_unknown_revocation_status_blocked number,
  are_certificate_extensions_restricted number,
  is_auto_include_alt_name number,
  is_out_of_capacity_blocked number,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_ssl_forward_proxy_profile_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_ssl_forward_proxy_profile_t (
    l_type varchar2,
    name varchar2,
    parent_resource_id varchar2,
    is_expired_certificate_blocked number,
    is_untrusted_issuer_blocked number,
    is_revocation_status_timeout_blocked number,
    is_unsupported_version_blocked number,
    is_unsupported_cipher_blocked number,
    is_unknown_revocation_status_blocked number,
    are_certificate_extensions_restricted number,
    is_auto_include_alt_name number,
    is_out_of_capacity_blocked number
  ) RETURN SELF AS RESULT
);

dbms_cloud_oci_network_firewall_ssl_forward_proxy_profile_t is a subtype of the dbms_cloud_oci_network_firewall_decryption_profile_t type.

Fields

Field Description

is_expired_certificate_blocked

(optional) Whether to block sessions if server's certificate is expired.

is_untrusted_issuer_blocked

(optional) Whether to block sessions if server's certificate is issued by an untrusted certificate authority (CA).

is_revocation_status_timeout_blocked

(optional) Whether to block sessions if the revocation status check for server's certificate does not succeed within the maximum allowed time (defaulting to 5 seconds).

is_unsupported_version_blocked

(optional) Whether to block sessions if SSL version is not supported.

is_unsupported_cipher_blocked

(optional) Whether to block sessions if SSL cipher suite is not supported.

is_unknown_revocation_status_blocked

(optional) Whether to block sessions if the revocation status check for server's certificate results in \"unknown\".

are_certificate_extensions_restricted

(optional) Whether to block sessions if the server's certificate uses extensions other than key usage and/or extended key usage.

is_auto_include_alt_name

(optional) Whether to automatically append SAN to impersonating certificate if server certificate is missing SAN.

is_out_of_capacity_blocked

(optional) Whether to block sessions if the firewall is temporarily unable to decrypt their traffic.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_SSL_INBOUND_INSPECTION_PROFILE_T Type

SSLInboundInspection used on the firewall policy rules.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_ssl_inbound_inspection_profile_t FORCE AUTHID CURRENT_USER UNDER dbms_cloud_oci_network_firewall_decryption_profile_t (
  is_unsupported_version_blocked number,
  is_unsupported_cipher_blocked number,
  is_out_of_capacity_blocked number,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_ssl_inbound_inspection_profile_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_ssl_inbound_inspection_profile_t (
    l_type varchar2,
    name varchar2,
    parent_resource_id varchar2,
    is_unsupported_version_blocked number,
    is_unsupported_cipher_blocked number,
    is_out_of_capacity_blocked number
  ) RETURN SELF AS RESULT
);

dbms_cloud_oci_network_firewall_ssl_inbound_inspection_profile_t is a subtype of the dbms_cloud_oci_network_firewall_decryption_profile_t type.

Fields

Field Description

is_unsupported_version_blocked

(optional) Whether to block sessions if SSL version is not supported.

is_unsupported_cipher_blocked

(optional) Whether to block sessions if SSL cipher suite is not supported.

is_out_of_capacity_blocked

(optional) Whether to block sessions if the firewall is temporarily unable to decrypt their traffic.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_TCP_SERVICE_T Type

TCP Service used on the firewall policy rules.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_tcp_service_t FORCE AUTHID CURRENT_USER UNDER dbms_cloud_oci_network_firewall_service_t (
  port_ranges dbms_cloud_oci_network_firewall_port_range_tbl,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_tcp_service_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_tcp_service_t (
    l_type varchar2,
    name varchar2,
    parent_resource_id varchar2,
    port_ranges dbms_cloud_oci_network_firewall_port_range_tbl
  ) RETURN SELF AS RESULT
);

dbms_cloud_oci_network_firewall_tcp_service_t is a subtype of the dbms_cloud_oci_network_firewall_service_t type.

Fields

Field Description

port_ranges

(required) List of port-ranges used.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_UDP_SERVICE_T Type

UDP Service used on the firewall policy rules.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_udp_service_t FORCE AUTHID CURRENT_USER UNDER dbms_cloud_oci_network_firewall_service_t (
  port_ranges dbms_cloud_oci_network_firewall_port_range_tbl,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_udp_service_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_udp_service_t (
    l_type varchar2,
    name varchar2,
    parent_resource_id varchar2,
    port_ranges dbms_cloud_oci_network_firewall_port_range_tbl
  ) RETURN SELF AS RESULT
);

dbms_cloud_oci_network_firewall_udp_service_t is a subtype of the dbms_cloud_oci_network_firewall_service_t type.

Fields

Field Description

port_ranges

(required) List of port-ranges used.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_UPDATE_ADDRESS_LIST_DETAILS_T Type

The request details to be updated in the address List for the policy.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_update_address_list_details_t FORCE AUTHID CURRENT_USER IS OBJECT (
  l_type varchar2(32767),
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_update_address_list_details_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_update_address_list_details_t (
    l_type varchar2
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE NOT FINAL;

Fields

Field Description

l_type

(required) Type of address List. The accepted values are - * FQDN * IP

Allowed values are: 'FQDN', 'IP'

DBMS_CLOUD_OCI_NETWORK_FIREWALL_UPDATE_APPLICATION_DETAILS_T Type

Request for updating an existing application in context to the network firewall policy.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_update_application_details_t FORCE AUTHID CURRENT_USER IS OBJECT (
  l_type varchar2(32767),
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_update_application_details_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_update_application_details_t (
    l_type varchar2
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE NOT FINAL;

Fields

Field Description

l_type

(required) Describes the type of Application.

Allowed values are: 'ICMP', 'ICMP_V6'

DBMS_CLOUD_OCI_NETWORK_FIREWALL_UPDATE_APPLICATION_GROUP_DETAILS_T Type

Request for updating an existing application in context to the network firewall policy.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_update_application_group_details_t FORCE AUTHID CURRENT_USER IS OBJECT (
  apps dbms_cloud_oci_network_firewall_varchar2_tbl,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_update_application_group_details_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_update_application_group_details_t (
    apps dbms_cloud_oci_network_firewall_varchar2_tbl
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

apps

(required) Collection of application names.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_UPDATE_DECRYPTION_PROFILE_DETAILS_T Type

Update Request for Decryption Profile used on the firewall policy rules.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_update_decryption_profile_details_t FORCE AUTHID CURRENT_USER IS OBJECT (
  l_type varchar2(32767),
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_update_decryption_profile_details_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_update_decryption_profile_details_t (
    l_type varchar2
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE NOT FINAL;

Fields

Field Description

l_type

(required) Describes the type of Decryption Profile SslForwardProxy or SslInboundInspection.

Allowed values are: 'SSL_INBOUND_INSPECTION', 'SSL_FORWARD_PROXY'

DBMS_CLOUD_OCI_NETWORK_FIREWALL_UPDATE_DECRYPTION_RULE_DETAILS_T Type

Request for updating Decryption Rule used in the firewall policy rules. A Decryption Rule is used to define which traffic should be decrypted by the firewall, and how it should do so.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_update_decryption_rule_details_t FORCE AUTHID CURRENT_USER IS OBJECT (
  condition dbms_cloud_oci_network_firewall_decryption_rule_match_criteria_t,
  action varchar2(32767),
  decryption_profile varchar2(32767),
  secret varchar2(32767),
  position dbms_cloud_oci_network_firewall_rule_position_t,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_update_decryption_rule_details_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_update_decryption_rule_details_t (
    condition dbms_cloud_oci_network_firewall_decryption_rule_match_criteria_t,
    action varchar2,
    decryption_profile varchar2,
    secret varchar2,
    position dbms_cloud_oci_network_firewall_rule_position_t
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

condition

(required)

action

(required) Action: * NO_DECRYPT - Matching traffic is not decrypted. * DECRYPT - Matching traffic is decrypted with the specified `secret` according to the specified `decryptionProfile`.

Allowed values are: 'NO_DECRYPT', 'DECRYPT'

decryption_profile

(optional) The name of the decryption profile to use.

secret

(optional) The name of a mapped secret. Its `type` must match that of the specified decryption profile.

position

(optional)

DBMS_CLOUD_OCI_NETWORK_FIREWALL_UPDATE_FQDN_ADDRESS_LIST_DETAILS_T Type

The request details to be updated in the address List for the policy.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_update_fqdn_address_list_details_t FORCE AUTHID CURRENT_USER UNDER dbms_cloud_oci_network_firewall_update_address_list_details_t (
  addresses dbms_cloud_oci_network_firewall_varchar2_tbl,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_update_fqdn_address_list_details_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_update_fqdn_address_list_details_t (
    l_type varchar2,
    addresses dbms_cloud_oci_network_firewall_varchar2_tbl
  ) RETURN SELF AS RESULT
);

dbms_cloud_oci_network_firewall_update_fqdn_address_list_details_t is a subtype of the dbms_cloud_oci_network_firewall_update_address_list_details_t type.

Fields

Field Description

addresses

(required) List of FQDN addresses.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_UPDATE_ICMP6_APPLICATION_DETAILS_T Type

Request for updating ICMP6 Application used on the firewall policy rules.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_update_icmp6_application_details_t FORCE AUTHID CURRENT_USER UNDER dbms_cloud_oci_network_firewall_update_application_details_t (
  icmp_type number,
  icmp_code number,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_update_icmp6_application_details_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_update_icmp6_application_details_t (
    l_type varchar2,
    icmp_type number,
    icmp_code number
  ) RETURN SELF AS RESULT
);

dbms_cloud_oci_network_firewall_update_icmp6_application_details_t is a subtype of the dbms_cloud_oci_network_firewall_update_application_details_t type.

Fields

Field Description

icmp_type

(required) The value of the ICMP6 message Type field as defined by RFC 4443.

icmp_code

(optional) The value of the ICMP6 message Code (subtype) field as defined by RFC 4443.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_UPDATE_ICMP_APPLICATION_DETAILS_T Type

Request for updating ICMP Application used on the firewall policy rules.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_update_icmp_application_details_t FORCE AUTHID CURRENT_USER UNDER dbms_cloud_oci_network_firewall_update_application_details_t (
  icmp_type number,
  icmp_code number,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_update_icmp_application_details_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_update_icmp_application_details_t (
    l_type varchar2,
    icmp_type number,
    icmp_code number
  ) RETURN SELF AS RESULT
);

dbms_cloud_oci_network_firewall_update_icmp_application_details_t is a subtype of the dbms_cloud_oci_network_firewall_update_application_details_t type.

Fields

Field Description

icmp_type

(required) The value of the ICMP message Type field as defined by RFC 792.

icmp_code

(optional) The value of the ICMP message Code (subtype) field as defined by RFC 792.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_UPDATE_IP_ADDRESS_LIST_DETAILS_T Type

The request details to be updated in the address List for the policy.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_update_ip_address_list_details_t FORCE AUTHID CURRENT_USER UNDER dbms_cloud_oci_network_firewall_update_address_list_details_t (
  addresses dbms_cloud_oci_network_firewall_varchar2_tbl,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_update_ip_address_list_details_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_update_ip_address_list_details_t (
    l_type varchar2,
    addresses dbms_cloud_oci_network_firewall_varchar2_tbl
  ) RETURN SELF AS RESULT
);

dbms_cloud_oci_network_firewall_update_ip_address_list_details_t is a subtype of the dbms_cloud_oci_network_firewall_update_address_list_details_t type.

Fields

Field Description

addresses

(required) List of IP addresses which could be IPv4 or IPv6 addresses or CIDR blocks.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_UPDATE_MAPPED_SECRET_DETAILS_T Type

The request details to be updated in the Mapped Secret for the policy.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_update_mapped_secret_details_t FORCE AUTHID CURRENT_USER IS OBJECT (
  source varchar2(32767),
  l_type varchar2(32767),
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_update_mapped_secret_details_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_update_mapped_secret_details_t (
    source varchar2,
    l_type varchar2
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE NOT FINAL;

Fields

Field Description

source

(required) Source of the secrets, where the secrets are stored.

l_type

(required) Type of the secrets mapped based on the policy. * `SSL_INBOUND_INSPECTION`: For Inbound inspection of SSL traffic. * `SSL_FORWARD_PROXY`: For forward proxy certificates for SSL inspection.

Allowed values are: 'SSL_INBOUND_INSPECTION', 'SSL_FORWARD_PROXY'

DBMS_CLOUD_OCI_NETWORK_FIREWALL_UPDATE_NETWORK_FIREWALL_DETAILS_T Type

The information to be updated.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_update_network_firewall_details_t FORCE AUTHID CURRENT_USER IS OBJECT (
  display_name varchar2(32767),
  network_firewall_policy_id varchar2(32767),
  network_security_group_ids dbms_cloud_oci_network_firewall_varchar2_tbl,
  freeform_tags json_element_t,
  defined_tags json_element_t,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_update_network_firewall_details_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_update_network_firewall_details_t (
    display_name varchar2,
    network_firewall_policy_id varchar2,
    network_security_group_ids dbms_cloud_oci_network_firewall_varchar2_tbl,
    freeform_tags json_element_t,
    defined_tags json_element_t
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

display_name

(optional) A user-friendly name for the Network Firewall. Does not have to be unique, and it's changeable. Avoid entering confidential information.

network_firewall_policy_id

(optional) The OCID of the Network Firewall Policy.

network_security_group_ids

(optional) An array of network security groups OCID associated with the Network Firewall.

freeform_tags

(optional) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: `{\"Department\": \"Finance\"}`

defined_tags

(optional) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: `{\"Operations\": {\"CostCenter\": \"42\"}}`

DBMS_CLOUD_OCI_NETWORK_FIREWALL_UPDATE_NETWORK_FIREWALL_POLICY_DETAILS_T Type

The request details to be updated in the firewall policy.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_update_network_firewall_policy_details_t FORCE AUTHID CURRENT_USER IS OBJECT (
  display_name varchar2(32767),
  freeform_tags json_element_t,
  defined_tags json_element_t,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_update_network_firewall_policy_details_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_update_network_firewall_policy_details_t (
    display_name varchar2,
    freeform_tags json_element_t,
    defined_tags json_element_t
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

display_name

(optional) A user-friendly name for the firewall. Does not have to be unique, and it's changeable. Avoid entering confidential information.

freeform_tags

(optional) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: `{\"Department\": \"Finance\"}`

defined_tags

(optional) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: `{\"Operations\": {\"CostCenter\": \"42\"}}`

DBMS_CLOUD_OCI_NETWORK_FIREWALL_UPDATE_SECURITY_RULE_DETAILS_T Type

Update Request for Security Rule used in the firewall policy rules. Security Rules determine whether to block or allow a session based on traffic attributes, such as the source and destination IP address, protocol/port, and the HTTP(S) target URL.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_update_security_rule_details_t FORCE AUTHID CURRENT_USER IS OBJECT (
  condition dbms_cloud_oci_network_firewall_security_rule_match_criteria_t,
  action varchar2(32767),
  inspection varchar2(32767),
  position dbms_cloud_oci_network_firewall_rule_position_t,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_update_security_rule_details_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_update_security_rule_details_t (
    condition dbms_cloud_oci_network_firewall_security_rule_match_criteria_t,
    action varchar2,
    inspection varchar2,
    position dbms_cloud_oci_network_firewall_rule_position_t
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

condition

(required)

action

(required) Types of Action on the Traffic flow. * ALLOW - Allows the traffic. * DROP - Silently drops the traffic, e.g. without sending a TCP reset. * REJECT - Rejects the traffic, sending a TCP reset to client and/or server as applicable. * INSPECT - Inspects traffic for vulnerability as specified in `inspection`, which may result in rejection.

Allowed values are: 'ALLOW', 'DROP', 'REJECT', 'INSPECT'

inspection

(optional) Type of inspection to affect the Traffic flow. This is only applicable if action is INSPECT. * INTRUSION_DETECTION - Intrusion Detection. * INTRUSION_PREVENTION - Intrusion Detection and Prevention. Traffic classified as potentially malicious will be rejected as described in `type`.

Allowed values are: 'INTRUSION_DETECTION', 'INTRUSION_PREVENTION'

position

(optional)

DBMS_CLOUD_OCI_NETWORK_FIREWALL_UPDATE_SERVICE_DETAILS_T Type

Request for updating an existing service in context to the network firewall policy.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_update_service_details_t FORCE AUTHID CURRENT_USER IS OBJECT (
  l_type varchar2(32767),
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_update_service_details_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_update_service_details_t (
    l_type varchar2
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE NOT FINAL;

Fields

Field Description

l_type

(required) Describes the type of Service.

Allowed values are: 'TCP_SERVICE', 'UDP_SERVICE'

DBMS_CLOUD_OCI_NETWORK_FIREWALL_UPDATE_SERVICE_LIST_DETAILS_T Type

Request for updating an existing service in context to the network firewall policy.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_update_service_list_details_t FORCE AUTHID CURRENT_USER IS OBJECT (
  services dbms_cloud_oci_network_firewall_varchar2_tbl,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_update_service_list_details_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_update_service_list_details_t (
    services dbms_cloud_oci_network_firewall_varchar2_tbl
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

services

(required) Collection of service names.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_UPDATE_SSL_FORWARD_PROXY_PROFILE_DETAILS_T Type

Update Request for SSLForwardProxy used on the firewall policy rules.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_update_ssl_forward_proxy_profile_details_t FORCE AUTHID CURRENT_USER UNDER dbms_cloud_oci_network_firewall_update_decryption_profile_details_t (
  is_expired_certificate_blocked number,
  is_untrusted_issuer_blocked number,
  is_revocation_status_timeout_blocked number,
  is_unsupported_version_blocked number,
  is_unsupported_cipher_blocked number,
  is_unknown_revocation_status_blocked number,
  are_certificate_extensions_restricted number,
  is_auto_include_alt_name number,
  is_out_of_capacity_blocked number,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_update_ssl_forward_proxy_profile_details_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_update_ssl_forward_proxy_profile_details_t (
    l_type varchar2,
    is_expired_certificate_blocked number,
    is_untrusted_issuer_blocked number,
    is_revocation_status_timeout_blocked number,
    is_unsupported_version_blocked number,
    is_unsupported_cipher_blocked number,
    is_unknown_revocation_status_blocked number,
    are_certificate_extensions_restricted number,
    is_auto_include_alt_name number,
    is_out_of_capacity_blocked number
  ) RETURN SELF AS RESULT
);

dbms_cloud_oci_network_firewall_update_ssl_forward_proxy_profile_details_t is a subtype of the dbms_cloud_oci_network_firewall_update_decryption_profile_details_t type.

Fields

Field Description

is_expired_certificate_blocked

(optional) Whether to block sessions if server's certificate is expired.

is_untrusted_issuer_blocked

(optional) Whether to block sessions if server's certificate is issued by an untrusted certificate authority (CA).

is_revocation_status_timeout_blocked

(optional) Whether to block sessions if the revocation status check for server's certificate does not succeed within the maximum allowed time (defaulting to 5 seconds).

is_unsupported_version_blocked

(optional) Whether to block sessions if SSL version is not supported.

is_unsupported_cipher_blocked

(optional) Whether to block sessions if SSL cipher suite is not supported.

is_unknown_revocation_status_blocked

(optional) Whether to block sessions if the revocation status check for server's certificate results in \"unknown\".

are_certificate_extensions_restricted

(optional) Whether to block sessions if the server's certificate uses extensions other than key usage and/or extended key usage.

is_auto_include_alt_name

(optional) Whether to automatically append SAN to impersonating certificate if server certificate is missing SAN.

is_out_of_capacity_blocked

(optional) Whether to block sessions if the firewall is temporarily unable to decrypt their traffic.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_UPDATE_SSL_INBOUND_INSPECTION_PROFILE_DETAILS_T Type

Update Request for SSLInboundInspection used on the firewall policy rules.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_update_ssl_inbound_inspection_profile_details_t FORCE AUTHID CURRENT_USER UNDER dbms_cloud_oci_network_firewall_update_decryption_profile_details_t (
  is_unsupported_version_blocked number,
  is_unsupported_cipher_blocked number,
  is_out_of_capacity_blocked number,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_update_ssl_inbound_inspection_profile_details_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_update_ssl_inbound_inspection_profile_details_t (
    l_type varchar2,
    is_unsupported_version_blocked number,
    is_unsupported_cipher_blocked number,
    is_out_of_capacity_blocked number
  ) RETURN SELF AS RESULT
);

dbms_cloud_oci_network_firewall_update_ssl_inbound_inspection_profile_details_t is a subtype of the dbms_cloud_oci_network_firewall_update_decryption_profile_details_t type.

Fields

Field Description

is_unsupported_version_blocked

(optional) Whether to block sessions if SSL version is not supported.

is_unsupported_cipher_blocked

(optional) Whether to block sessions if SSL cipher suite is not supported.

is_out_of_capacity_blocked

(optional) Whether to block sessions if the firewall is temporarily unable to decrypt their traffic.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_UPDATE_TCP_SERVICE_DETAILS_T Type

Request for updating TCP Service.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_update_tcp_service_details_t FORCE AUTHID CURRENT_USER UNDER dbms_cloud_oci_network_firewall_update_service_details_t (
  port_ranges dbms_cloud_oci_network_firewall_port_range_tbl,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_update_tcp_service_details_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_update_tcp_service_details_t (
    l_type varchar2,
    port_ranges dbms_cloud_oci_network_firewall_port_range_tbl
  ) RETURN SELF AS RESULT
);

dbms_cloud_oci_network_firewall_update_tcp_service_details_t is a subtype of the dbms_cloud_oci_network_firewall_update_service_details_t type.

Fields

Field Description

port_ranges

(required) List of port-ranges to be used.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_UPDATE_UDP_SERVICE_DETAILS_T Type

Request for updating UDP Service used on the firewall policy rules.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_update_udp_service_details_t FORCE AUTHID CURRENT_USER UNDER dbms_cloud_oci_network_firewall_update_service_details_t (
  port_ranges dbms_cloud_oci_network_firewall_port_range_tbl,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_update_udp_service_details_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_update_udp_service_details_t (
    l_type varchar2,
    port_ranges dbms_cloud_oci_network_firewall_port_range_tbl
  ) RETURN SELF AS RESULT
);

dbms_cloud_oci_network_firewall_update_udp_service_details_t is a subtype of the dbms_cloud_oci_network_firewall_update_service_details_t type.

Fields

Field Description

port_ranges

(required) List of port-ranges to be used.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_UPDATE_URL_LIST_DETAILS_T Type

The request details to be updated in the URL List for the policy.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_update_url_list_details_t FORCE AUTHID CURRENT_USER IS OBJECT (
  urls dbms_cloud_oci_network_firewall_url_pattern_tbl,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_update_url_list_details_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_update_url_list_details_t (
    urls dbms_cloud_oci_network_firewall_url_pattern_tbl
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

urls

(required) List of urls.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_UPDATE_VAULT_MAPPED_SECRET_DETAILS_T Type

The request details to be updated in the Vault Mapped Secret for the policy.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_update_vault_mapped_secret_details_t FORCE AUTHID CURRENT_USER UNDER dbms_cloud_oci_network_firewall_update_mapped_secret_details_t (
  vault_secret_id varchar2(32767),
  version_number number,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_update_vault_mapped_secret_details_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_update_vault_mapped_secret_details_t (
    source varchar2,
    l_type varchar2,
    vault_secret_id varchar2,
    version_number number
  ) RETURN SELF AS RESULT
);

dbms_cloud_oci_network_firewall_update_vault_mapped_secret_details_t is a subtype of the dbms_cloud_oci_network_firewall_update_mapped_secret_details_t type.

Fields

Field Description

vault_secret_id

(required) OCID for the Vault Secret to be used.

version_number

(required) Version number of the secret to be used.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_URL_LIST_T Type

URL pattern lists of the policy. The value of an entry is a list of URL patterns. The associated key/name is the identifier by which the URL pattern list is referenced.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_url_list_t FORCE AUTHID CURRENT_USER IS OBJECT (
  name varchar2(32767),
  urls dbms_cloud_oci_network_firewall_url_pattern_tbl,
  total_urls number,
  parent_resource_id varchar2(32767),
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_url_list_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_url_list_t (
    name varchar2,
    urls dbms_cloud_oci_network_firewall_url_pattern_tbl,
    total_urls number,
    parent_resource_id varchar2
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

name

(required) Unique name identifier for the URL list.

urls

(required) List of urls.

total_urls

(required) Total count of URLs in the URL List

parent_resource_id

(required) OCID of the Network Firewall Policy this URL List belongs to.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_URL_LIST_SUMMARY_T Type

URL List Summary in the network firewall policy

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_url_list_summary_t FORCE AUTHID CURRENT_USER IS OBJECT (
  name varchar2(32767),
  total_urls number,
  parent_resource_id varchar2(32767),
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_url_list_summary_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_url_list_summary_t (
    name varchar2,
    total_urls number,
    parent_resource_id varchar2
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

name

(required) Name of URL List

total_urls

(required) Total count of URLs in the URL List

parent_resource_id

(required) OCID of the Network Firewall Policy this mapped secret belongs to.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_URL_LIST_SUMMARY_TBL Type

Nested table type of dbms_cloud_oci_network_firewall_url_list_summary_t.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_url_list_summary_tbl FORCE IS TABLE OF (dbms_cloud_oci_network_firewall_url_list_summary_t) NOT PERSISTABLE;

DBMS_CLOUD_OCI_NETWORK_FIREWALL_URL_LIST_SUMMARY_COLLECTION_T Type

Collection of URL Lists in the network firewall policy

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_url_list_summary_collection_t FORCE AUTHID CURRENT_USER IS OBJECT (
  items dbms_cloud_oci_network_firewall_url_list_summary_tbl,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_url_list_summary_collection_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_url_list_summary_collection_t (
    items dbms_cloud_oci_network_firewall_url_list_summary_tbl
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

items

(required) Collection of url lists.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_VAULT_MAPPED_SECRET_T Type

Mapped secret stored in OCI vault used in the firewall policy rules.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_vault_mapped_secret_t FORCE AUTHID CURRENT_USER UNDER dbms_cloud_oci_network_firewall_mapped_secret_t (
  vault_secret_id varchar2(32767),
  version_number number,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_vault_mapped_secret_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_vault_mapped_secret_t (
    name varchar2,
    source varchar2,
    l_type varchar2,
    parent_resource_id varchar2,
    vault_secret_id varchar2,
    version_number number
  ) RETURN SELF AS RESULT
);

dbms_cloud_oci_network_firewall_vault_mapped_secret_t is a subtype of the dbms_cloud_oci_network_firewall_mapped_secret_t type.

Fields

Field Description

vault_secret_id

(required) OCID for the Vault Secret to be used.

version_number

(required) Version number of the secret to be used.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_WORK_REQUEST_RESOURCE_T Type

A resource created or operated on by a work request.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_work_request_resource_t FORCE AUTHID CURRENT_USER IS OBJECT (
  entity_type varchar2(32767),
  action_type varchar2(32767),
  identifier varchar2(32767),
  entity_uri varchar2(32767),
  metadata json_element_t,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_work_request_resource_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_work_request_resource_t (
    entity_type varchar2,
    action_type varchar2,
    identifier varchar2,
    entity_uri varchar2,
    metadata json_element_t
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

entity_type

(required) The resource type the work request affects.

action_type

(required) The way in which this resource is affected by the work tracked in the work request. A resource being created, updated, or deleted will remain in the IN_PROGRESS state until work is complete for that resource at which point it will transition to CREATED, UPDATED, or DELETED, respectively.

Allowed values are: 'CREATED', 'UPDATED', 'DELETED', 'IN_PROGRESS', 'RELATED', 'FAILED'

identifier

(required) The identifier of the resource the work request affects.

entity_uri

(optional) The URI path that the user can do a GET on to access the resource metadata

metadata

(optional) Additional information that helps to explain the resource.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_WORK_REQUEST_RESOURCE_TBL Type

Nested table type of dbms_cloud_oci_network_firewall_work_request_resource_t.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_work_request_resource_tbl FORCE IS TABLE OF (dbms_cloud_oci_network_firewall_work_request_resource_t) NOT PERSISTABLE;

DBMS_CLOUD_OCI_NETWORK_FIREWALL_WORK_REQUEST_T Type

A description of workrequest status

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_work_request_t FORCE AUTHID CURRENT_USER IS OBJECT (
  operation_type varchar2(32767),
  status varchar2(32767),
  id varchar2(32767),
  compartment_id varchar2(32767),
  resources dbms_cloud_oci_network_firewall_work_request_resource_tbl,
  percent_complete number,
  time_accepted timestamp with time zone,
  time_started timestamp with time zone,
  time_finished timestamp with time zone,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_work_request_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_work_request_t (
    operation_type varchar2,
    status varchar2,
    id varchar2,
    compartment_id varchar2,
    resources dbms_cloud_oci_network_firewall_work_request_resource_tbl,
    percent_complete number,
    time_accepted timestamp with time zone,
    time_started timestamp with time zone,
    time_finished timestamp with time zone
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

operation_type

(required) Type of the work request

Allowed values are: 'CREATE_NETWORK_FIREWALL', 'UPDATE_NETWORK_FIREWALL', 'DELETE_NETWORK_FIREWALL', 'MOVE_NETWORK_FIREWALL', 'CREATE_NETWORK_FIREWALL_POLICY', 'UPDATE_NETWORK_FIREWALL_POLICY', 'DELETE_NETWORK_FIREWALL_POLICY', 'MOVE_NETWORK_FIREWALL_POLICY'

status

(required) Status of current work request.

Allowed values are: 'ACCEPTED', 'IN_PROGRESS', 'WAITING', 'FAILED', 'SUCCEEDED', 'NEEDS_ATTENTION', 'CANCELING', 'CANCELED'

id

(required) The id of the work request.

compartment_id

(required) The ocid of the compartment that contains the work request. Work requests should be scoped to the same compartment as the resource the work request affects. If the work request affects multiple resources, and those resources are not in the same compartment, it is up to the service team to pick the primary resource whose compartment should be used

resources

(required) The resources affected by this work request.

percent_complete

(required) Percentage of the request completed.

time_accepted

(required) The date and time the request was created, as described in RFC 3339, section 14.29.

time_started

(optional) The date and time the request was started, as described in RFC 3339, section 14.29.

time_finished

(optional) The date and time the object was finished, as described in RFC 3339.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_WORK_REQUEST_ERROR_T Type

An error encountered while executing a work request.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_work_request_error_t FORCE AUTHID CURRENT_USER IS OBJECT (
  code varchar2(32767),
  message varchar2(32767),
  l_timestamp timestamp with time zone,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_work_request_error_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_work_request_error_t (
    code varchar2,
    message varchar2,
    l_timestamp timestamp with time zone
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

code

(required) A machine-usable code for the error that occured. Error codes are listed on (https://docs.cloud.oracle.com/Content/API/References/apierrors.htm)

message

(required) A human readable description of the issue encountered.

l_timestamp

(required) The time the error occured. An RFC3339 formatted datetime string.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_WORK_REQUEST_ERROR_TBL Type

Nested table type of dbms_cloud_oci_network_firewall_work_request_error_t.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_work_request_error_tbl FORCE IS TABLE OF (dbms_cloud_oci_network_firewall_work_request_error_t) NOT PERSISTABLE;

DBMS_CLOUD_OCI_NETWORK_FIREWALL_WORK_REQUEST_ERROR_COLLECTION_T Type

Results of a workRequestError search. Contains both WorkRequestError items and other information, such as metadata.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_work_request_error_collection_t FORCE AUTHID CURRENT_USER IS OBJECT (
  items dbms_cloud_oci_network_firewall_work_request_error_tbl,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_work_request_error_collection_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_work_request_error_collection_t (
    items dbms_cloud_oci_network_firewall_work_request_error_tbl
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

items

(required) List of workRequestError objects.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_WORK_REQUEST_LOG_ENTRY_T Type

A log message from the execution of a work request.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_work_request_log_entry_t FORCE AUTHID CURRENT_USER IS OBJECT (
  message varchar2(32767),
  l_timestamp timestamp with time zone,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_work_request_log_entry_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_work_request_log_entry_t (
    message varchar2,
    l_timestamp timestamp with time zone
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

message

(required) Human-readable log message.

l_timestamp

(required) The time the log message was written. An RFC3339 formatted datetime string

DBMS_CLOUD_OCI_NETWORK_FIREWALL_WORK_REQUEST_LOG_ENTRY_TBL Type

Nested table type of dbms_cloud_oci_network_firewall_work_request_log_entry_t.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_work_request_log_entry_tbl FORCE IS TABLE OF (dbms_cloud_oci_network_firewall_work_request_log_entry_t) NOT PERSISTABLE;

DBMS_CLOUD_OCI_NETWORK_FIREWALL_WORK_REQUEST_LOG_ENTRY_COLLECTION_T Type

Results of a workRequestLog search. Contains both workRequestLog items and other information, such as metadata.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_work_request_log_entry_collection_t FORCE AUTHID CURRENT_USER IS OBJECT (
  items dbms_cloud_oci_network_firewall_work_request_log_entry_tbl,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_work_request_log_entry_collection_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_work_request_log_entry_collection_t (
    items dbms_cloud_oci_network_firewall_work_request_log_entry_tbl
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

items

(required) List of workRequestLogEntries.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_WORK_REQUEST_SUMMARY_T Type

A summary of the status of a work request.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_work_request_summary_t FORCE AUTHID CURRENT_USER IS OBJECT (
  operation_type varchar2(32767),
  status varchar2(32767),
  id varchar2(32767),
  compartment_id varchar2(32767),
  resources dbms_cloud_oci_network_firewall_work_request_resource_tbl,
  percent_complete number,
  time_accepted timestamp with time zone,
  time_started timestamp with time zone,
  time_finished timestamp with time zone,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_work_request_summary_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_work_request_summary_t (
    operation_type varchar2,
    status varchar2,
    id varchar2,
    compartment_id varchar2,
    resources dbms_cloud_oci_network_firewall_work_request_resource_tbl,
    percent_complete number,
    time_accepted timestamp with time zone,
    time_started timestamp with time zone,
    time_finished timestamp with time zone
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

operation_type

(required) Type of the work request

Allowed values are: 'CREATE_NETWORK_FIREWALL', 'UPDATE_NETWORK_FIREWALL', 'DELETE_NETWORK_FIREWALL', 'MOVE_NETWORK_FIREWALL', 'CREATE_NETWORK_FIREWALL_POLICY', 'UPDATE_NETWORK_FIREWALL_POLICY', 'DELETE_NETWORK_FIREWALL_POLICY', 'MOVE_NETWORK_FIREWALL_POLICY'

status

(required) Status of current work request.

Allowed values are: 'ACCEPTED', 'IN_PROGRESS', 'WAITING', 'FAILED', 'SUCCEEDED', 'NEEDS_ATTENTION', 'CANCELING', 'CANCELED'

id

(required) The id of the work request.

compartment_id

(required) The ocid of the compartment that contains the work request. Work requests should be scoped to the same compartment as the resource the work request affects. If the work request affects multiple resources, and those resources are not in the same compartment, it is up to the service team to pick the primary resource whose compartment should be used

resources

(required) The resources affected by this work request.

percent_complete

(required) Percentage of the request completed.

time_accepted

(required) The date and time the request was created, as described in RFC 3339, section 14.29.

time_started

(optional) The date and time the request was started, as described in RFC 3339, section 14.29.

time_finished

(optional) The date and time the object was finished, as described in RFC 3339.

DBMS_CLOUD_OCI_NETWORK_FIREWALL_WORK_REQUEST_SUMMARY_TBL Type

Nested table type of dbms_cloud_oci_network_firewall_work_request_summary_t.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_work_request_summary_tbl FORCE IS TABLE OF (dbms_cloud_oci_network_firewall_work_request_summary_t) NOT PERSISTABLE;

DBMS_CLOUD_OCI_NETWORK_FIREWALL_WORK_REQUEST_SUMMARY_COLLECTION_T Type

Results of a workRequest search. Contains both WorkRequest items and other information, such as metadata.

Syntax

CREATE OR REPLACE NONEDITIONABLE TYPE dbms_cloud_oci_network_firewall_work_request_summary_collection_t FORCE AUTHID CURRENT_USER IS OBJECT (
  items dbms_cloud_oci_network_firewall_work_request_summary_tbl,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_work_request_summary_collection_t
    RETURN SELF AS RESULT,
  CONSTRUCTOR FUNCTION dbms_cloud_oci_network_firewall_work_request_summary_collection_t (
    items dbms_cloud_oci_network_firewall_work_request_summary_tbl
  ) RETURN SELF AS RESULT
) NOT PERSISTABLE;

Fields

Field Description

items

(required) List of workRequestSummary objects.

Was this article helpful?